In five sentences
- On varmos.id we collect only what you submit through a form, plus basic technical data needed to keep the site running.
- Estate data inside app.varmos.id belongs to your company; we process it on your instructions, not for our own purposes.
- We do not sell personal data to anyone.
- The storage location and infrastructure provider will be stated transparently before the form is used in production.
- You have the right to access, correct, delete, and withdraw consent for your personal data.
1.Who is responsible
This policy is issued by PT Elevasi Agri Indonesia, with its registered office at registered address (“Elevarm”, “we”), the operator of the site varmos.id and the VarmOS.
Questions about personal data and consent withdrawal can be sent to hello@elevarm.com.
2.Two distinct roles
Worth separating from the start, because the responsibilities differ:
- As data controller — for the varmos.id site
- When you fill in a demo form, subscribe to Insight, or contact us, Elevarm determines the purpose and means of processing that data itself. That is the part governed in detail by this policy.
- As data processor — for app.varmos.id
- Operational estate data inside the application — including estate worker data, harvest results, and cost records — is controlled by the customer company. Elevarm processes it on the customer's instructions under the subscription agreement and a separate data processing agreement. We do not use that data for our own purposes.
3.Data we collect
3.1 Data you provide yourself
| Source | Data |
|---|---|
| Demo request form | Name, job title, company name, work email, phone number, commodity, approximate area managed, context you provide, consent version, and submission time |
| Insight subscription | Email address |
| Direct communication | The content of emails, messages, or meeting notes you send us |
3.2 Data collected automatically
The hosting provider may process basic technical logs such as IP address, browser type, requested page, and access time for security and fault diagnosis. The VarmOS form backend does not store IP addresses or user-agent strings in the demo-request table. No visitor analytics, marketing pixels, or cross-site tracking are currently installed.
3.3 What we do not collect
We do not request specific categories of personal data such as health, beliefs, political views, or biometric data through this site. Please do not send such data through forms on varmos.id.
4.Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Storing and following up your demo request | Explicit consent recorded with the time and consent-text version; it may be withdrawn at any time |
| Sending Insight articles | Consent, which can be withdrawn at any time |
| Maintaining service security and availability | Our legitimate interest in protecting the system |
| Meeting legal, tax, and audit obligations | Statutory obligation |
We do not use data you submit through varmos.id to train artificial intelligence models without your written consent.
5.Cookies and local storage
This site uses browser local storage to remember exactly one thing: your light or dark mode preference. That data stays on your device and is never sent to our servers.
We currently do not install Google Analytics, Meta Pixel, Hotjar, or another analytics or marketing tool that creates cookies. If a non-essential tool is added, this policy will be updated and consent will be requested before that tool runs.
6.Who we share data with
We do not sell personal data. Data may be shared on a limited basis with:
- Infrastructure providers that run our servers and databases.
- Corporate email provider, only where follow-up is sent by email.
- Professional advisers such as auditors and legal counsel, to the extent necessary.
- Competent authorities, where required by law.
Form data is stored in VarmOS's internal database and is not forwarded to an external CRM provider. The legal name of the hosting and database provider must be included in the final sub-processor list before production launch.
7.Data location and transfers
The form backend is prepared for Cloudflare Pages and D1 infrastructure with an Asia-Pacific primary-location hint. A location hint does not guarantee Indonesia-only storage; the actual production configuration must be confirmed and stated in the final policy.
Where some processing must take place outside Indonesia, we will ensure equivalent protection as required by applicable law, and inform you accordingly.
8.How long data is kept
| Data type | Retention period |
|---|---|
| Demo requests that do not proceed | 24 months from the last meaningful contact, then deleted or anonymised |
| Insight subscription data | Until you unsubscribe |
| Technical logs | 12 months |
| Documents with statutory retention | As required by applicable regulation |
9.Security
We apply encryption in transit and at rest, role-based access control, audit trails over data changes, separation of development and production environments, and regular backups. No system is entirely immune; that is why we also maintain incident response procedures.
In the event of a personal data breach, we will notify affected parties and the competent authority within the timeframes set by regulation.
10.Your rights
Under applicable law, you have the right to:
- Request information about and a copy of the personal data we process about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Withdraw consent you previously gave.
- Object to certain processing.
- Request your data in a portable format.
- Lodge a complaint with the competent authority.
Requests can be sent to hello@elevarm.com. We respond within the timeframes set by regulation. For data inside app.varmos.id, requests should first go to your company as the data controller; we will support your company in fulfilling them.
11.Children and minors
This service is intended for business use and is not directed at children. We do not knowingly collect children's personal data through this site.
12.Changes to this policy
This policy may be updated. The last update date appears at the top of the page. For material changes, we will give notice through this site or by email to active customers.
13.Contacting us
Email: hello@elevarm.com
Address: registered office address
For general questions about the platform, use the contact page.
See also Terms of Service.