
Privacy Policy
Last updated: March 28, 2026
1. Who We Are
Good Guys Consulting (PT Good Guys Consulting) is a foreign investment legal consulting firm registered in Indonesia. Our registered address is Jl. Sri Wedari No. 24, Ubud, Gianyar, Bali 80571, Indonesia. For any privacy-related inquiries, contact us at me@goodguys.consulting.
2. Information We Collect
We collect the following categories of information:
- Personal information: name, email address, phone number, nationality, passport details, and date of birth.
- Business information: company details, KBLI codes, shareholder structures, and corporate documents.
- Financial information: billing details and payment information processed through Stripe.
- Usage data: cookies, page views, and analytics collected via Vercel Analytics.
- Communication data: messages sent through our contact forms, documents uploaded to our portal, and AI onboarding chat conversations.
3. How We Use Your Data
- Service delivery: processing visa applications, company formations, property due diligence, and tax filings on your behalf.
- Legal filings: submitting required documentation to Indonesian government agencies.
- Compliance monitoring: tracking deadlines, renewals, and regulatory obligations.
- Communication: responding to your inquiries, sending service updates, and delivering transactional emails.
- Billing: processing payments and maintaining financial records.
- Improving our services: analyzing usage patterns to enhance the website and client experience.
4. AI Processing
We use AI technology (Claude by Anthropic) in our onboarding chat to understand your needs and recommend appropriate services. Conversation data from the AI chat is processed to provide personalized service recommendations and is stored securely. All AI-generated recommendations are reviewed by our legal team before any formal advice is provided.
5. Legal Basis for Processing
- Contract performance: processing necessary to deliver the services you have engaged us for.
- Legitimate interest: improving our services, preventing fraud, and ensuring security.
- Consent: where required, such as for marketing communications. You may withdraw consent at any time.
6. Data Sharing
We share your data with the following categories of recipients, only as necessary:
- Indonesian government agencies: immigration (DGIM), tax authority (DJP), and the corporate registry (AHU) as required for service delivery.
- Supabase: data hosting and database services (Singapore).
- Stripe: payment processing.
- Resend: transactional email delivery.
- Anthropic: AI processing for onboarding chat.
- Vercel: website hosting and analytics.
7. Data Retention
Client data is retained for the duration of your engagement plus 7 years, in accordance with Indonesian regulatory requirements. AI chat data is retained for 1 year. You may request earlier deletion subject to our legal and regulatory obligations.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, subject to legal retention requirements.
- Restriction of processing in certain circumstances.
- Portability of your data in a structured, machine-readable format.
- Objection to processing based on legitimate interest.
To exercise any of these rights, contact us at me@goodguys.consulting.
9. Cookies
- Essential cookies: required for authentication and core functionality.
- Analytics cookies: Vercel Analytics for understanding site usage and improving our services.
- We do not use advertising or third-party tracking cookies.
10. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/SSL).
- Encryption at rest (Supabase encrypted storage).
- Role-based access controls.
- Row Level Security (RLS) policies on all database tables.
11. International Transfers
Your data may be stored and processed outside of Indonesia. Our primary data storage is in Singapore (Supabase). AI processing occurs in the United States (Anthropic). Website hosting is provided by Vercel with global edge infrastructure. We ensure appropriate safeguards are in place for all international data transfers.
12. Children
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
13. Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you through the website or by email. We encourage you to review this policy periodically.
14. Contact
For questions or concerns about this privacy policy or our data practices, contact us at:
Good Guys Consulting
PT Good Guys Consulting
Jl. Sri Wedari No. 24, Ubud, Gianyar
Bali 80571, Indonesia
me@goodguys.consulting