Privacy Policy

We Are Collaborative (“We Are Collaborative”, “we”, “us”, or “our”) is a digital marketing brand operated by PT Stimulate Global Media. We are the data controller responsible for the personal data processed through this website (wearecollaborative.net), our customer portal, our academy, and the products and services we offer.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, how we protect it, and the choices and rights available to you. It applies to everyone who visits our site, submits an enquiry, creates an account, enrolls in a course, makes a purchase, or otherwise interacts with us.

Information you provide to us

• Account data — your name, email address, and password when you register. Passwords are stored only as a salted one-way hash (bcrypt); we never store or can read your plaintext password.
• Profile data — optional details you add to your profile or account settings.
• Enquiry & lead data— information you submit through contact, “Get Started,” or newsletter forms, such as your name, email, company, and message.
• Purchase & enrollment data — courses you enroll in, orders, invoices, and subscription details.
• Payment data — payments are processed by our third-party payment gateway (Midtrans). Card and payment instrument details are entered with and handled by the gateway; we do not collect or store full card numbers. We receive transaction metadata such as order ID, status, amount, and payment method.
• Community & content — posts, replies, saved resources, and other content you submit within the customer portal or community.
• Communications — messages you send us by email, chat, or support requests, and your preferences for receiving communications.
• AI assistant inputs — text you enter into our on-site chat assistant (see Section 5).

Information collected automatically

• Device & connection data — IP address, browser type, device and operating system, and referring pages.
• Usage & analytics data — pages viewed, links clicked, time on page, visitor sessions and events, and similar interaction data we use to understand and improve the site.
• Personalization (affinity) data — signals about which topics and content you engage with, stored to tailor what we show you. This is associated with a first-party cookie, not your identity.
• Cookies — see Section 4.

Information from third parties — we may receive limited data from our payment gateway (transaction confirmations) and, where you use them, from analytics and advertising platforms connected to our products.

• To create and manage your account and authenticate you securely.
• To deliver our services — process enrollments, orders, payments, and invoices, and provide access to courses, resources, and the community.
• To respond to your enquiries, requests, and support messages.
• To operate the on-site AI chat assistant.
• To personalize content and recommendations based on your interests.
• To send you service messages and, where you have opted in or it is otherwise permitted, marketing and newsletter communications — which you can opt out of at any time.
• To measure, analyze, and improve our website, products, and content.
• To maintain security, prevent fraud and abuse, and enforce our terms.
• To comply with our legal and regulatory obligations and to establish, exercise, or defend legal claims.

We use a small number of first-party cookies and similar technologies:

• Essential cookies — authentication and session cookies required to keep you signed in and to operate secure areas of the site. The site cannot function properly without these.
• Preference / personalization — to remember your settings (such as theme) and tailor content to your interests.
• Analytics — to understand how the site is used so we can improve it.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in or using parts of the site.

Our website offers an AI chat assistant. Text you submit to the assistant is sent to our AI provider (Google, via the Gemini API) to generate a response. Please do not enter sensitive personal information (such as passwords, payment card numbers, or government identifiers) into the chat. We use these inputs to provide and improve the assistant experience.

We do not sell your personal data. We share it only as needed to run our business, and with appropriate safeguards, including with:

• Service providers (processors) who help us operate, including: hosting and infrastructure (Vercel), database hosting (Neon), payment processing (Midtrans), AI features (Google), and email delivery. These providers process data on our behalf under contract.
• Professional advisers such as accountants, auditors, and lawyers, where reasonably necessary.
• Authorities where required by law, regulation, legal process, or to protect rights, safety, and the integrity of our services.
• Successors in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We and our service providers may process and store your data in countries other than your own, including Indonesia, Australia, and the United States. Where data is transferred across borders, we take steps to ensure it is protected consistent with this policy and applicable law.

We keep personal data only for as long as necessary for the purposes set out in this policy — for example, for the life of your account and our relationship with you, and afterwards as needed to meet legal, accounting, tax, or reporting obligations, or to resolve disputes. When data is no longer needed, we delete or anonymize it.

We use technical and organizational measures appropriate to the risk, including encryption of data in transit (HTTPS), one-way hashing of passwords (bcrypt), access controls, and signed/verified payment webhooks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please help protect your account by keeping your password confidential.

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Port your data to another service in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Opt out of marketing — use the unsubscribe link in any marketing email or contact us directly.

To exercise any of these rights, email us at hello@wearecollaborative.net. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. You also have the right to complain to your local data protection authority.

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from children under the age required by local law (generally 16). If you believe a child has provided us with personal data, please contact us and we will delete it.

Our site may link to third-party websites and services we do not control. This policy does not apply to those sites; please review their own privacy notices.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are material, take additional steps to notify you. Your continued use of our services after an update means you accept the revised policy.

If you have any questions, requests, or concerns about this policy or your personal data, contact us at:

We Are Collaborative — PT Stimulate Global Media
hello@wearecollaborative.net