Privacy Policy
Last updated: 8 August 2026
GardLayer ("GardLayer", "we", "us") is a Trust & AI Security Layer platform developed and operated by PT Karsa Sibernetik Internasional. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you visit our website, sign up for a trial, or deploy GardLayer inside your organization.
1. Information We Collect
We collect information you provide directly, such as your name, company name, company email address, and phone number, when you request a demo, register for a trial, or contact our sales or support team. We also collect standard technical information (IP address, browser type, pages visited) when you use this website.
2. Data Processed Through the GardLayer Platform
When your organization deploys GardLayer, our LENSA, KAWAL, GERBANG, PETA, and MENARA modules process telemetry and content originating from your own environment — such as DNS queries, browser-extension events, LLM API traffic metadata, and security policy configurations — solely to deliver the shadow-AI discovery, DLP, and firewall functions you have configured. In this context, your organization is the data controller and GardLayer acts as a data processor, handling this data only under your instructions and the terms of our agreement with you.
3. How We Use Information
We use the information we collect to provide and improve the GardLayer service, respond to inquiries and support requests, send product and account communications, and maintain the security and integrity of our platform. We do not use customer monitoring data collected via LENSA/KAWAL/GERBANG for advertising purposes.
4. Sharing and Disclosure
We do not sell your personal information. We may share information with trusted subprocessors who help us operate our infrastructure (such as cloud hosting and email delivery providers) under confidentiality obligations, or where required to comply with a legal obligation, protect our rights, or with your consent.
5. Data Retention
We retain account and lead information for as long as needed to provide our services and for a reasonable period afterward for legal and record-keeping purposes. Platform monitoring data processed on your behalf is retained according to the retention settings configured in your GardLayer deployment.
6. Security Measures
We apply technical and organizational safeguards including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access control, and audit logging to protect information from unauthorized access, alteration, or disclosure.
7. Your Rights
Subject to applicable law, including Indonesia's Personal Data Protection Law (UU PDP No. 27/2022), you may request access to, correction of, or deletion of your personal data, and may object to certain processing. To exercise these rights, contact us at the email address below.
8. Cookies
This website uses essential cookies to remember your language preference and to keep the site functioning correctly. We do not use third-party advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at hello@gardlayer.id or PT Karsa Sibernetik Internasional, Jakarta, Indonesia.