Privacy Policy

1. Scope and responsibility

iMatch is a business platform used by buyers, suppliers, and their staff. The organization that provides your account decides who may use its workspace and what business information is entered there. Where organizations exchange records through iMatch, each may receive information needed for that transaction. Contact your organization's administrator first for questions about its data or your account.

2. Information processed

• Account details, including your name, email address, organization, role, and access assignments.
• Authentication and security information, including password hashes, sessions, sign-in activity, and audit history.
• Business information entered or uploaded by users, such as contacts, product and location details, orders, invoices, delivery records, attachments, and messages associated with workflows.
• Technical information needed to operate and troubleshoot the service, such as browser requests, errors, and performance data.

3. How information is used

Information is used to authenticate users, apply organization and role permissions, run purchasing and stock workflows, generate and share records with intended counterparties, provide notifications, protect the service, investigate errors, and maintain audit trails. Processing may be needed to deliver the service requested by your organization, meet applicable obligations, or protect legitimate security and operational interests. Where consent is required, it will be requested separately.

4. Sharing and service providers

Authorized users within your organization and relevant buyer or supplier counterparties can see information needed for their assigned workflows. Limited information may also be processed by hosting, storage, email, and performance service providers that support iMatch. Platform administrators may access information for support and security under access controls and audit logging. Information may be disclosed when required by law.

5. Cookies and sessions

iMatch uses cookies needed to keep you signed in and remember your active organization or location. Selecting “Remember me” keeps your sign-in available across browser sessions for longer; without it, the sign-in cookie ends with the browser session. You can sign out to end a session. Blocking required cookies may prevent sign-in.

6. Security and retention

iMatch uses account permissions, scoped access, password hashing, and audit records to help protect data. No online system can promise absolute security. Account and session data is kept as needed to operate access. Transaction documents and audit records are kept as business records and may remain after an individual account is disabled. Other data is retained according to operational needs, organizational instructions, and applicable legal requirements.

7. Your choices and requests

You may ask about, correct, or request access to your personal data through the administrator of the organization that provided your account or by emailing support@imatch.id. Requests to restrict, delete, or export data will be assessed under applicable law and any need to preserve transaction or audit records. Indonesia's Personal Data Protection Law describes rights that may apply to you.

8. Changes to this policy

This policy may be updated when the service or its data practices change. The updated date above shows when this version was revised. Material changes will be communicated through the service or your organization.