Privacy Policy

The data controller responsible for your personal data under this Policy is CV Nusa Dewata Digital, the operator of ListifyOS.

• Entity: CV Nusa Dewata Digital
• Registered address: Jalan Parijata 9X, Desa/Kelurahan Beraban, Kecamatan Kediri, Kabupaten Tabanan, Provinsi Bali 82121, Indonesia
• Business registration (NIB): 1000 0000 0495 6201
• Contact: hello@listifyos.com

You can use the contact details above to raise any question about this Policy or to exercise your data protection rights.

This Policy applies only to personal data collected through our marketing Website (listifyos.com) — for example, when you browse the site, submit the contact or demo form, or subscribe to updates.

It does not cover the ListifyOS software platform (the application at app.listifyos.com). When you create an account and use the platform, the processing of data in your workspace is governed by the separate platform terms and data processing agreement provided at sign-up. For data you submit through partner-operated, white-labelled property sites built on ListifyOS, the relevant operator of that site is the controller.

Information you provide to us

• Contact and demo requests. Your full name, work email address, company name, your role (e.g. property developer, agency, agent), and the contents of any message you send us.
• Correspondence. Records of communications when you email us or otherwise contact us, including any information you choose to include.
• Marketing preferences. Your choices about receiving product updates and marketing communications.

Information we collect automatically

• Usage and device data. Information about how you interact with the Website, such as pages viewed, links clicked, referring URLs, approximate location derived from your IP address, browser type, device type, and operating system.
• Log data. Server logs that may include your IP address, timestamps, and request details, used for security and to operate the Website.
• Cookies and similar technologies. See the “Cookies and tracking” section below.

We do not intentionally collect special categories of personal data (such as health, biometric, or financial account data) through the Website, and we ask that you do not submit such information through our forms. We do not knowingly collect personal data from children (see the Children section).

We use cookies and similar technologies to operate the Website, remember your preferences, and understand how the Website is used. Cookies are small files stored on your device.

• Strictly necessary cookies are required for the Website to function and cannot be switched off in our systems.
• Analytics and performance cookies help us measure and improve the Website. These are used only where permitted by applicable law and, where required, with your consent.
• Preference cookies remember choices you make to improve your experience.

Where consent is required, we ask for it before setting non-essential cookies, and you can withdraw or change your choices at any time through your browser settings or any cookie controls we provide. Blocking some cookies may affect how the Website works.

We use personal data to:

• Respond to your enquiries, demo requests, and support messages;
• Provide information about our products, plans, and services;
• Operate, maintain, secure, and improve the Website;
• Send marketing and product communications where you have opted in or where otherwise permitted by law;
• Analyse usage to understand and improve performance and content;
• Detect, prevent, and address fraud, abuse, security, and technical issues; and
• Comply with our legal obligations and enforce our terms.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent — for non-essential cookies and optional marketing communications. You may withdraw consent at any time.
• Legitimate interests — to respond to your enquiries, secure and improve the Website, and conduct basic analytics, balanced against your rights and interests.
• Performance of a contract / pre-contractual steps — to act on your request before entering into any agreement, such as arranging a demo.
• Legal obligation — where we must process data to comply with the law.

Under Indonesia's PDP Law and other applicable regimes, we process personal data on equivalent lawful grounds, including your consent, the necessity to fulfil your request, our legitimate interests, and compliance with legal obligations.

If you opt in, we may send you product updates, news, and offers. You can unsubscribe at any time using the link in our emails or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and we may still send you non-promotional service messages where appropriate.

We do not sell your personal data. We share personal data only as described below:

• Service providers (processors). Trusted third parties that help us run the Website and our business — such as website and cloud hosting, email delivery, analytics, and customer relationship management — acting on our instructions under appropriate contractual safeguards.
• Legal and compliance. Authorities, regulators, or other parties where required to comply with the law, enforce our terms, or protect our rights, users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this Policy.

We operate from Indonesia and may use service providers located in other countries. As a result, your personal data may be transferred to, stored in, or processed in countries other than your own, which may have different data protection laws.

Where we transfer personal data subject to the GDPR or UK GDPR outside the EEA or the UK, we put in place appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or rely on another lawful transfer mechanism. You may contact us for more information about these safeguards.

We keep personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting, or reporting requirements. For example, we retain enquiry and contact records for as long as needed to respond to and follow up on your request and for a reasonable period afterwards. When data is no longer needed, we delete or anonymise it.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration — including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address incidents promptly.

Depending on where you live and the applicable law, you may have the following rights in respect of your personal data:

• Access — request a copy of the personal data we hold about you;
• Rectification — ask us to correct inaccurate or incomplete data;
• Erasure — ask us to delete your personal data in certain circumstances;
• Restriction — ask us to limit how we process your data;
• Portability — receive certain data in a structured, machine-readable format;
• Objection — object to processing based on our legitimate interests or to direct marketing; and
• Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these rights, contact us at hello@listifyos.com. We will respond within the timeframes required by applicable law and may need to verify your identity first. There is normally no charge, and we will not discriminate against you for exercising your rights.

If you are in the EEA or the UK and believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority. If you are in Indonesia, you may exercise the rights granted under the PDP Law. We would, however, appreciate the chance to address your concerns before you approach a regulator.

The Website is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

The Website may contain links to third-party websites and services that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated version on this page and revise the effective date above. Where required by law, we will provide additional notice or seek your consent. Your continued use of the Website after changes take effect indicates your acceptance of the updated Policy.

If you have any questions, requests, or complaints about this Policy or our handling of your personal data, please contact:

• CV Nusa Dewata Digital (ListifyOS)
• Jalan Parijata 9X, Desa/Kelurahan Beraban, Kecamatan Kediri, Kabupaten Tabanan, Provinsi Bali 82121, Indonesia
• Email: hello@listifyos.com