Privacy policy

Who we are

One Stop Visa Service (operated by [PT 公司全称]) is a private visa agency with offices in Bali and Jakarta. We are not a government office. This policy explains what personal data we collect through our website, WhatsApp, Instagram and Messenger, and how we use and protect it.

Email: [联系邮箱]; WhatsApp: +62 813-8888-1288.

What we collect and why

• Enquiry form: your name, contact details, preferred office, the visa you need, travel month and any notes. Used so an advisor can contact you, quote and process your visa.
• Visa planner and chat: your messages and plan choices (purpose, length of stay, nationality, city). Used to answer questions, build your plan and pass you to an advisor when needed.
• Arrival declaration form: each traveller's name, passport number, nationality, passport expiry date, date of birth and sex, plus arrival date, flight number, address in Indonesia and contact details. Used only to complete your All Indonesia arrival declaration.
• Ad source: the ad parameters (utm) in the link you followed to our website, to see which ads work. They don't identify you.
• Technical data: your IP address, used only to prevent abuse (rate limits) and for bot protection.

How we protect it

The whole site uses HTTPS. Passport and ID details are stored encrypted with AES-256-GCM and are only decrypted when the responsible advisor opens them in our admin console. Every view is recorded in an audit log.

ID numbers never appear in logs, notifications, links or AI prompts. Please don't send passport numbers on WhatsApp, in DMs or in chat. When we need them, we'll send you a link to the form on our website.

How long we keep it

• Arrival declaration details: deleted automatically 30 days after the arrival date.
• Technical request records that contain IP addresses (used to prevent abuse and spam): deleted after 1 day.
• Enquiries and chat history: kept as long as needed to serve you and meet legal requirements. You can ask us to delete them at any time.
• [Retention periods for other data to be confirmed after legal review]

Who we share it with

• Indonesian Immigration and related government systems, as required to process visas and arrival declarations.
• Service providers: Cloudflare (hosting, database and bot protection), Meta (WhatsApp, Instagram and Messenger messages) and Anthropic (the Claude model behind our AI advisor). They only process data on our instructions.
• Storage and processing outside Indonesia: these providers' servers may be located outside Indonesia (for example in Singapore or the United States), so your data is stored and processed outside Indonesia. We only use providers with strong safeguards, we encrypt passport and ID details ourselves before they are stored, and we handle these transfers as required by Indonesia's Personal Data Protection Law.
• We never sell your personal data.

Our AI advisor

Automatic replies in the visa planner and in direct messages are generated by AI (Anthropic's Claude model), and the first reply says so. AI answers are guidance only. Indonesian Immigration makes the final decision on every visa.

You can ask for a human at any time and an advisor will take over. The AI never makes decisions with legal effect on you on its own.

Your rights

Under Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022), you have the right to:

• know why and on what basis we process your data;
• access your data and get a copy;
• correct data that is inaccurate or incomplete;
• ask us to delete your data, or to stop or restrict processing it;
• withdraw your consent (this doesn't affect processing before you withdrew it);
• object to decisions based solely on automated processing;
• receive your data in a portable format where the law provides, and complain to the supervisory authority.

To use these rights, contact [联系邮箱] or WhatsApp +62 813-8888-1288. We'll reply within the time limits set by law.

Cookies and browser storage

We use one cookie (lang) to remember your language. Ad parameters (utm) are kept only for your current browser session and cleared when you close the browser. Passport details are never stored in your browser.

Changes to this policy

If we update this policy, we'll change the date at the top of this page.