Good Guys Consulting office

Privacy Policy

Last updated: March 28, 2026

1. Who We Are

Good Guys Consulting (PT Good Guys Consulting) is a foreign investment legal consulting firm registered in Indonesia. Our registered address is Jl. Sri Wedari No. 24, Ubud, Gianyar, Bali 80571, Indonesia. For any privacy-related inquiries, contact us at me@goodguys.consulting.

2. Information We Collect

We collect the following categories of information:

  • Personal information: name, email address, phone number, nationality, passport details, and date of birth.
  • Business information: company details, KBLI codes, shareholder structures, and corporate documents.
  • Financial information: billing details and payment information processed through Stripe.
  • Usage data: cookies, page views, and analytics collected via Vercel Analytics.
  • Communication data: messages sent through our contact forms, documents uploaded to our portal, and AI onboarding chat conversations.

3. How We Use Your Data

  • Service delivery: processing visa applications, company formations, property due diligence, and tax filings on your behalf.
  • Legal filings: submitting required documentation to Indonesian government agencies.
  • Compliance monitoring: tracking deadlines, renewals, and regulatory obligations.
  • Communication: responding to your inquiries, sending service updates, and delivering transactional emails.
  • Billing: processing payments and maintaining financial records.
  • Improving our services: analyzing usage patterns to enhance the website and client experience.

4. AI Processing

We use AI technology (Claude by Anthropic) in our onboarding chat to understand your needs and recommend appropriate services. Conversation data from the AI chat is processed to provide personalized service recommendations and is stored securely. All AI-generated recommendations are reviewed by our legal team before any formal advice is provided.

5. Legal Basis for Processing

  • Contract performance: processing necessary to deliver the services you have engaged us for.
  • Legitimate interest: improving our services, preventing fraud, and ensuring security.
  • Consent: where required, such as for marketing communications. You may withdraw consent at any time.

6. Data Sharing

We share your data with the following categories of recipients, only as necessary:

  • Indonesian government agencies: immigration (DGIM), tax authority (DJP), and the corporate registry (AHU) as required for service delivery.
  • Supabase: data hosting and database services (Singapore).
  • Stripe: payment processing.
  • Resend: transactional email delivery.
  • Anthropic: AI processing for onboarding chat.
  • Vercel: website hosting and analytics.

7. Data Retention

Client data is retained for the duration of your engagement plus 7 years, in accordance with Indonesian regulatory requirements. AI chat data is retained for 1 year. You may request earlier deletion subject to our legal and regulatory obligations.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data, subject to legal retention requirements.
  • Restriction of processing in certain circumstances.
  • Portability of your data in a structured, machine-readable format.
  • Objection to processing based on legitimate interest.

To exercise any of these rights, contact us at me@goodguys.consulting.

9. Cookies

  • Essential cookies: required for authentication and core functionality.
  • Analytics cookies: Vercel Analytics for understanding site usage and improving our services.
  • We do not use advertising or third-party tracking cookies.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS/SSL).
  • Encryption at rest (Supabase encrypted storage).
  • Role-based access controls.
  • Row Level Security (RLS) policies on all database tables.

11. International Transfers

Your data may be stored and processed outside of Indonesia. Our primary data storage is in Singapore (Supabase). AI processing occurs in the United States (Anthropic). Website hosting is provided by Vercel with global edge infrastructure. We ensure appropriate safeguards are in place for all international data transfers.

12. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

13. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you through the website or by email. We encourage you to review this policy periodically.

14. Contact

For questions or concerns about this privacy policy or our data practices, contact us at:

Good Guys Consulting
PT Good Guys Consulting
Jl. Sri Wedari No. 24, Ubud, Gianyar
Bali 80571, Indonesia
me@goodguys.consulting