Private Mode does not retain PDFs. Workspace stores a PDF only after an authenticated user explicitly selects Save to account.
Scope and controller
This Policy applies to the public FariDocs website, its nineteen document generators, Blog, guide, Workspace, and related administrative operation.
The FariDocs operator acts as the personal data controller for service analytics and operational records. Contact: admin@farinotech.id.
Data processed
Document input may include company details, recipient and shipping details, dates, transaction items, notes, terms, payment information, logos, and signatures that you choose to enter.
Operational analytics may include IP address and an IP hash, country, device type, browser, operating system, user agent, device token hash, action, document type, and timestamp.
Workspace security history records successful, failed, and blocked sign-in attempts with account email, IP address, country, device, browser, operating system, time, and result so users and administrators can investigate unauthorized access.
Limited document metadata may include document type and number, language, title, company name, bill-to text, currency, calculated amounts, option flags, item count, and creation or expiry time.
Language preference, security session data, and CSRF tokens may be stored in the session or browser as necessary for functionality and security.
How data is used
Data is processed to generate the requested PDF, calculate totals, preserve a draft while switching language, prevent abuse, apply any configured daily limit, troubleshoot errors, measure aggregate usage, maintain security, and administer the service.
We do not sell document content or personal data, and we do not use document content for unrelated advertising.
PDF files, Workspace storage, and image processing
In Private Mode, generated PDF files are not retained as downloadable files on the server and temporary output is removed after delivery.
In Workspace Mode, a PDF and its document data are retained only when an authenticated user explicitly selects Save to account. Stored files are isolated by account, count toward the user’s storage quota, and can be downloaded or deleted from My Documents.
Creating or using a Workspace account requires affirmative acceptance of the Terms of Service, this Privacy Policy, and the Workspace data-storage agreement. Continued Workspace use remains subject to those agreements.
Uploaded JPG, JPEG, BMP, PNG, or WebP logos and signatures are validated, resized proportionally when needed, and processed for PDF generation. Their visual ratio is preserved within the standard logo or signature area.
Legal basis and your instructions
Processing needed to generate a requested document is performed at your instruction to provide the service.
Security, abuse prevention, essential analytics, and legal compliance are performed for legitimate operational purposes and applicable legal obligations. Where consent is required, you may withdraw it subject to lawful retention requirements.
Retention
Private Mode PDFs are not retained. A language-switch draft is kept temporarily in browser session storage and is designed to expire after a short period.
Workspace PDFs and document data remain in the user account until deleted by the user, removed by an authorized administrator, or the account is closed, subject to legal requirements. OTP records expire automatically and account sessions are security-controlled.
A Deleted Workspace account is initially access-revoked rather than immediately destroyed so an authorized administrator can recover business records. A permanent deletion request remains subject to identity verification, lawful retention, and backup cycles.
General document metadata and login/IP security history follow the retention configured or reasonably required for abuse prevention, auditing, dispute handling, and legal obligations.
Backups, if used by the hosting provider, may take additional time to cycle out under the provider’s backup schedule.
Sharing and processors
Data may be processed by hosting, infrastructure, security, or maintenance providers only as needed to operate the service and under appropriate safeguards.
Data may be disclosed when required by law, a valid authority request, or when necessary to protect rights, safety, and service integrity.
If infrastructure processes data outside Indonesia, the operator will apply safeguards required for cross-border personal data transfers.
Security
Reasonable technical and organizational controls are used, including input validation, access controls, CSRF protection, administrator authentication, restricted file types and sizes, temporary-file cleanup, and minimized PDF retention.
No online system is risk-free. Users should avoid entering unnecessary sensitive personal data and should protect downloaded PDFs after they leave the service.
Your rights
Subject to applicable Indonesian law, you may request access, correction, completion, deletion or destruction, withdrawal of consent, restriction or objection where applicable, and information about processing.
We may need to verify your identity and the relevant record before acting on a request. Some information may be retained where required by law or necessary to establish, exercise, or defend legal claims.
Children, cookies, and external links
The service is intended for business users and is not directed to children. Do not enter a minor’s personal data unless you have proper authority and a lawful reason.
Only essential session or preference technologies are intended by default. If optional analytics or marketing cookies are introduced, this Policy and any consent controls should be updated first.
External links are governed by the privacy practices of their respective operators.
Updates, Indonesian framework, and contact
This Policy may be updated when the service, processing activities, or legal requirements change. The effective date below identifies the current version.
The service is designed with reference to Indonesia’s Personal Data Protection Law, electronic systems regulation, and the amended Electronic Information and Transactions framework.
Privacy requests or questions can be sent to admin@farinotech.id.