1. Who is responsible for your data
VOXPASS is operated by VOXLABS, Indonesia. VOXLABS sells tickets as an intermediary on behalf of event organizers; it is not the organizer of the events on VOXPASS.
- For your account, payments, e-tickets and the platform itself, VOXLABS is the data controller (pengendali data pribadi).
- When you buy a ticket, the event's organizer also receives the attendee data needed to run their event and is a separate controller for its own use of that data. VOXLABS processes data on organizers' behalf for check-in and attendee lists (as prosesor data pribadi).
2. What we collect
- Identity and contact: name, email address, phone number.
- Order data: events and tickets bought, amounts, order and ticket codes, check-in times.
- Attendee details an organizer asks for at checkout (for example, T-shirt size or date of birth for age-limited events).
- Payment data: the payment method and status from our payment provider. We don't store full card numbers.
- If an event is cancelled and we refund by bank transfer: the bank account you give us.
- For organizers: identity or company documents and bank account details for verification (KYC) and payouts.
- Technical data: sign-in sessions, IP address and browser type, used for security and to prevent abuse.
3. Why we use it, and on what legal basis
- To perform our contract with you — sell and deliver tickets, process payments and refunds, let you sign in, and check you in at the event.
- To meet legal obligations — accounting and tax records, and organizer verification.
- Legitimate interests — keeping the platform secure, preventing fraud, and fixing problems.
- Consent — for anything optional, such as WhatsApp ticket updates. You can withdraw consent at any time.
We don't sell your personal data, and we don't use it for advertising on behalf of third parties.
4. Who we share it with
- The event's organizer: your name, email, phone number and the attendee details they requested, so they can run the event and contact you about it.
- Service providers working for us under contract: payment gateways, email and messaging delivery, and hosting.
- Authorities, when Indonesian law requires it.
5. How long we keep it
We keep order and payment records for as long as Indonesian accounting and tax rules require (generally 10 years). Account data is kept while your account is active. Sign-in links and one-time codes expire within minutes to hours. Other data is deleted or anonymized when it's no longer needed.
6. Security
Passwords are stored as one-way hashes. Sensitive details such as bank accounts are encrypted. Access to personal data inside VOXLABS is limited to people who need it and is logged. If a personal data breach affects you, we'll notify you and the authorities within 3 × 24 hours, as UU PDP requires.
7. Your rights
Under UU PDP you have the right to:
- get information about how your data is used, and access a copy of it;
- correct data that is wrong or incomplete;
- have your data deleted or its processing stopped, unless we must keep it by law;
- withdraw consent you gave;
- object to decisions made only by automated processing;
- receive your data in a commonly used format; and
- complain about how we handle your data.
To use these rights, email privacy@voxpass.id from the address on your account. We'll reply within 3 × 24 hours as required by law. For data an organizer holds, you can also contact the organizer directly.
8. Transfers outside Indonesia
Some of our service providers may process data outside Indonesia. When that happens, we make sure the protection is at least equivalent to UU PDP, through contracts or other safeguards the law recognizes.
9. Cookies
We use only the cookies VOXPASS needs to work: your sign-in session and your language choice. We don't use advertising cookies.
10. Children
You must be at least 17, or have consent from a parent or guardian, to create an account or buy tickets. Some events have their own age limits.
11. Changes
We'll post changes to this policy here and tell account holders by email about important ones before they take effect.