Privacy policy
This page explains what personal data Donchian Capital collects across its services, why, who helps us process it, and the rights you have under Indonesia's Personal Data Protection Law (Law No. 27 of 2022). We collect only what we need, and we never sell your data.
01Data we collect
- Account: name, email, profile photo (if you sign in with Google), and a securely hashed password (if you use email sign-in).
- Masterclass: membership plan, payment status, lessons completed, and files downloaded.
- Services: what you tell us when you contact us about Quant Ecosystem, Research & Outlook, or a speaking engagement, such as name, organization, and event or project details.
- Security: sign-in sessions, IP address, and device type, used to keep accounts safe.
02What we never collect
- Card or bank details: payments are handled entirely by Midtrans.
- Your exchange login, funds, or withdrawal-enabled API keys for Quant Ecosystem.
- Advertising or tracking cookies.
03Why we use it
- To run your account, membership, and access to lessons.
- To confirm payments and send service emails such as sign-up confirmation and password reset.
- To reply to enquiries and deliver research or speaking engagements you request.
- To prevent fraud and account sharing.
04Services that help us
Each provider processes data only to deliver its part of the service, under its own privacy policy.
- Cloudflare: website hosting and security.
- Supabase: database for accounts and progress.
- Google: sign-in with Google.
- Resend: sending service emails.
- Midtrans: payment processing.
- YouTube: playing lesson videos.
- WhatsApp: only when you choose to contact us there.
05Cookies
We use only essential cookies: to keep you signed in, and to remember your language and light or dark mode. No consent banner is needed because nothing is used for advertising.
06Retention and security
We keep account data while your account is active, and payment records as long as tax law requires. Data is encrypted in transit, access is limited to people who need it, and passwords are never stored in readable form.
07Your rights
Email us from the address on your account and we will act within the time the law requires.
- Access the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Ask us to delete your account and data.
- Withdraw consent for optional processing at any time.
08Changes to this policy
If we change how we use personal data, we will update this page, and email account holders about significant changes.