Effective 28 September 2026. Controller: PT Farino Teknologi Indonesia (Farinotech), GMI Building, Jl. Srengseng Sawah No.4, Kec. Jagakarsa, Jakarta Selatan, Jakarta 12630, Indonesia.
Data and purposes
We process your name, email, password hash, license entitlement, order reference, generated installation identifier, device public key, operating system and architecture, device label, activation timestamps, and account actions to provide accounts, redeem keys, enforce device allowances, and protect the service. Licensing does not upload PDF documents. Authentication uses cryptographic key hashes. New keys and original keys supplied for recovery are also stored encrypted so authorized administrators can retrieve them; each administrator reveal is audited. Clients and the desktop show masked keys.
Website enquiries
If you contact us, we use your name, email address, selected topic and message to respond to your enquiry. Messages are delivered through our hosting email service to sales@farinopdf.com. No document upload is requested. Enquiries are kept only as needed for follow-up, related contractual records or legal obligations; unrelated marketing requires a separate basis. Contact sales@farinopdf.com for privacy requests.
Email verification and recovery
New accounts use a six-digit email verification code valid for 10 minutes, with limited attempts and resend frequency. Verification codes and reset tokens are stored as cryptographic hashes. Transactional verification and recovery messages are sent through the SMTP service configured by the operator. SMTP passwords are encrypted in server storage. Existing accounts created before this verification workflow retain their prior login rights unless verification is required by an account change.
Security and retention
API access tokens expire after 12 hours, reset links after 30 minutes, and offline entitlements after up to seven days. Scheduled maintenance deletes expired sessions, verification codes, reset tokens and rate-limit records, and removes application audit entries older than 180 days. Account, license and order records remain as needed to support purchased rights, resolve disputes and meet applicable record-keeping obligations. Deletion requests are reviewed against those obligations. Backups may retain prior data until their documented rotation period ends.
Application audit logs contain a keyed hash of the connection IP address. Hosting, email and network security providers may retain raw connection metadata under their operational policies. Farinotech must configure provider access, backup retention and any international transfers consistently with applicable law. Service passwords and signing keys are restricted to authorized operators.
Legal grounds and choices
Processing supports the requested contract, fraud prevention, security, and applicable legal obligations. Unrelated marketing is not enabled by accepting the license. Account information is necessary for paid activation. The basic application can be used without an account, subject to its limitations.
Your rights and assistance
Use the portal to view licenses and deactivate devices. For access, correction, deletion, objections, applicable data rights or security concerns, contact official support on your purchase receipt or the postal address above. Proportionate identity verification may be required. Requests will be handled under applicable law, with any lawful retention reason explained.
Updates and providers
The update service receives connection metadata when checking or downloading releases, not document contents. Hosting and configured email services process data required to operate these services. Material purpose or notice changes will be communicated as required by law.