Privacy
Policy.

01Who we are and scope

PT Dahono Consulting Agency ("Dahono", "we") is a management consulting company and technology provider based in Jakarta, Indonesia. This policy covers personal data collected through dahono.com, consulting engagements and Dahono Labs.

Other Dahono products — including Dahono Router, Poketo, ktik.me and OtaPro — publish their own privacy policies, which apply to data processed by those products.

02Indonesian Personal Data Protection Law

We process personal data in line with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (UU PDP) and its implementing regulations, following the principles of data minimisation, purpose limitation, transparency and security.

03Information we collect

• Contact and identification data: name, work email, WhatsApp number, organisation and job title submitted through inquiries.
• Engagement data: project briefs, requirements, company registration details and business objectives.
• Documents: contract drafts, vendor agreements, NDAs and policies submitted for consultation or AI-assisted review.
• Technical data: anonymised request logs, browser user-agent and performance metrics, used only for reliability and security.
• Language preference: a cookie and local storage entry ("dahono_lang") remembering your chosen language.

04AI document processing (Dahono-4B)

• Zero retention: contracts and inputs are processed in stateless memory and are never added to training data or used to fine-tune models.
• Encryption: data between your device and our servers is protected with TLS encryption.
• Non-disclosure: Dahono signs a mutual NDA before reviewing proprietary business records.

05How we use information

• To deliver consulting, compliance review and technology services you have engaged us for.
• To respond to inquiries, send proposals and schedule work.
• To meet tax, corporate reporting and other legal obligations in Indonesia.

06Sharing

We never sell, rent or monetise personal data. We share information only with:

• Infrastructure providers that host or transmit data for us under confidentiality obligations and recognised security standards.
• Authorities, when required by a valid court order or Indonesian law.

07Your rights

Under the PDP Law, you have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data once an engagement has ended.
• Withdraw consent to future communications at any time.

08Retention and security

We keep project records only as long as needed for the engagement, contractual warranty periods or tax requirements. Access is role-based, and we apply encryption and security controls across our systems.