Privacy Policy

Last Updated: September 2026 • Version 2.4 Sovereign Global

1. Sovereign Zero-Log Doctrine

CTARTech Indonesia ("CTAR.Tech", "we", "us") respects your absolute data sovereignty. ZentyTeamsCore operates under a strict Zero-Raw-Data-Collection doctrine. Our client SDKs (Rust, TypeScript, Python, Go) execute in-memory RASP (Runtime Application Self-Protection) and never transmit plain-text payloads, credentials, user databases, or proprietary source code to central servers.

2. Telemetry and Differential Privacy

When threat signals (such as SovereignDistressSignal) are reported:

• Cryptographic Hashes Only: Attack signatures and payloads are hashed using SHA-256 and salt before telemetry egress.
• Differential Privacy (ε ≤ 0.75): Machine learning updates shared via the Allied Mesh utilize strict Differential Privacy noise injection, guaranteeing individual client data cannot be reverse-engineered.
• Immutable WORM Ledger: Forensic incident metadata is recorded into an append-only Merkle tree conforming to ISO/IEC 27037 chain-of-custody standards.

3. Emergency Rescue Data Handling

If you engage our Emergency Hostage Rescue & System Unlock Unit:

• Data provided (ransom notes, victim IP addresses, affected system schemas) is utilized exclusively to formulate surgical counter-intrusion scripts to retrieve your cryptographic keys.
• All recovered keys and data are encrypted with your public key using NIST FIPS 203 (ML-KEM-768 / Kyber) Post-Quantum Cryptography.
• All operational logs regarding the rescue are permanently purged from staging memory 72 hours post-operation upon your sign-off.

4. WhatsApp Notification Service (KaoWhat.com Gateway)

Security alerts and rescue status notifications sent via WhatsApp utilize official Meta Cloud API infrastructure via our dedicated device session (Ctartech). Phone numbers provided are never shared with advertisers or third parties and are strictly used for mission-critical security alerts.

5. Compliance and Data Subject Rights

We comply fully with the European Union General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Act (UU PDP No. 27/2022), and ISO/IEC 27001:2022. You retain full rights to request audit trails, data destruction, or tenant de-registration at any time via privacy@ctar.tech.

← Back to Home

Kebijakan Privasi

Terakhir Diperbarui: September 2026 • Versi 2.4 Berdaulat Global

1. Doktrin Kedaulatan Zero-Log

CTARTech Indonesia ("CTAR.Tech", "kami") menghormati kedaulatan data Anda secara mutlak. ZentyTeamsCore beroperasi di bawah doktrin Tanpa Pengumpulan Data Mentah. SDK kami (Rust, TypeScript, Python, Go) menjalankan proteksi RASP in-memory dan tidak pernah mengirimkan payload mentah, kredensial, database pengguna, atau kode sumber rahasia ke server pusat.

2. Telemetri dan Differential Privacy

Ketika sinyal ancaman (seperti SovereignDistressSignal) dilaporkan:

• Hanya Hash Kriptografis: Signature serangan di-hash menggunakan SHA-256 ber-salt sebelum dikirim.
• Differential Privacy (ε ≤ 0.75): Pembelajaran AI federasi pada Allied Mesh menerapkan noise privasi matematis sehingga data klien tidak dapat direkonstruksi oleh pihak manapun.
• Buku Besar WORM Merkle: Log audit forensik dicatat dalam pohon Merkle yang tidak dapat diubah (anti-tamper) sesuai standar rantai bukti ISO/IEC 27037.

3. Penanganan Data Operasi Penyelamatan Darurat

Jika Anda meminta intervensi Layanan Darurat Pembobol Sistem & Hostage Rescue:

• Informasi yang Anda berikan (catatan tebusan, IP korban, topologi sistem) hanya digunakan secara eksklusif untuk mengeksekusi operasi penembusan balik penyelamatan aset Anda.
• Kunci dekripsi yang berhasil direbut kembali disegel dengan kriptografi pasca-kuantum NIST FIPS 203 (ML-KEM-768).
• Seluruh artefak operasi dihapus permanen dari memori 72 jam setelah pemulihan selesai dan disetujui klien.

4. Layanan Notifikasi WhatsApp (KaoWhat.com Gateway)

Alert keamanan darurat via WhatsApp dikirim melalui gateway Meta Official Cloud API KaoWhat (Sesi Ctartech). Nomor telepon Anda dijamin tidak akan pernah dibagikan kepada pihak ketiga dan murni digunakan untuk pemberitahuan darurat insiden siber.

5. Hak Subjek Data & Kepatuhan Hukum

Kami patuh penuh terhadap UU PDP No. 27/2022, UU ITE No. 1/2024, GDPR, dan ISO/IEC 27001:2022. Anda berhak meminta laporan audit bukti digital atau penghapusan tenant kapan saja melalui privacy@ctar.tech.

← Kembali ke Beranda