Privacy Policy
Effective date: 7 September 2026
This Privacy Policy explains how Sivali Cloud Technology (PT Sivali Catur Lestari) (“Sivali”, “we”, “us”) collects, uses, stores, and shares personal information when you use our websites and cloud products, including Orcastra Cloud Service (https://app.orcastra.io / https://sso.orcastra.io) and https://sivali.co.
1. What is Orcastra Cloud Service?
Orcastra Cloud Service is Sivali’s cloud management platform for provisioning and operating virtual machines and related infrastructure. Users sign in through the Orcastra Account Center to access the dashboard, consoles, and connected services. This Privacy Policy covers that product and related authentication flows, including sign-in with Google and other identity providers.
2. Information we collect
Depending on how you interact with us, we may collect:
- Account and profile data: name, email address, phone number, company or billing address, country, and account identifiers.
- Authentication data: when you choose “Sign in with Google” or another provider, we receive basic profile information the provider shares with your consent (typically name, email address, and a unique account ID). We do not receive your Google password.
- Service and usage data: product activity (for example instance names you manage, roles/tenants, login timestamps), device/browser type, IP address, and diagnostic logs needed to operate and secure the service.
- Support and communication data: messages you send to support, and related tickets.
- Cookies and similar technologies: session cookies and security cookies required for login, CSRF protection, and preference storage. See section 6.
3. How we use personal information
We use personal information to:
- create and manage your Orcastra / Sivali accounts;
- authenticate you (including via Google OAuth) and enforce access control;
- provide, operate, maintain, and improve Orcastra Cloud Service and related support;
- process orders, billing, and customer communications where applicable;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- comply with legal obligations and enforce our terms.
We do not sell personal information. We do not use Google user data for advertising.
4. Google Sign-In / OAuth data use (Limited Use)
If you sign in to Orcastra Cloud Service with Google, we request only the minimum OAuth scopes needed for authentication and account linking (for example openid, email, and profile). We use that Google account data solely to:
- identify and authenticate the user;
- create or link an Orcastra account;
- display your name/email in the product account UI;
- secure the session and prevent unauthorized access.
Google user data obtained through Google APIs is not used for serving advertisements, not sold, and not transferred except as needed to provide or improve user-facing features, for security, or to comply with law — consistent with Google’s API Services User Data Policy, including the Limited Use requirements.
5. Sharing and processors
We may share personal information with:
- Infrastructure and hosting providers that process data on our behalf to run Orcastra and related systems;
- Identity providers you choose (e.g. Google) as part of the sign-in flow you initiate;
- Professional advisors or authorities when required by law or to protect rights and safety;
- Successors in connection with a merger, acquisition, or asset transfer, subject to this policy’s protections.
Service providers are bound to process personal data only on our instructions and with appropriate safeguards.
6. Cookies
We use essential cookies for authentication sessions, security, and load balancing. Where analytics cookies are used on marketing sites, they help us understand aggregate traffic; you can control cookies through your browser settings. Disabling essential cookies may prevent login from working.
7. Retention
We retain account and service data for as long as your account remains active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal, tax, or security requirements. Authentication logs are retained for a limited period appropriate for security investigation, then deleted or anonymized.
8. Security
We apply administrative, technical, and organizational measures appropriate to the risk, including TLS in transit, access controls, and monitoring. No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.
9. International transfers
Primary operations are in Indonesia. Where processors are located elsewhere, we use contractual and technical safeguards consistent with applicable law and this policy.
10. Your rights
Subject to applicable law, you may request access, correction, deletion, or restriction of your personal information, or object to certain processing. For Orcastra account data, you can also update profile fields in the Account Center where available. To exercise rights, contact us using the details below. You may also revoke Google access at any time in your Google Account permissions.
11. Children
Orcastra Cloud Service and our sites are not directed to children under 16. We do not knowingly collect personal information from children.
12. Changes
We may update this Privacy Policy from time to time. The “Effective date” above will change when we make material updates. Continued use of the services after an update constitutes acceptance of the revised policy where permitted by law.
13. Contact
Sivali Cloud Technology (PT Sivali Catur Lestari)
Grand Slipi Tower LT.42 Unit 42GH, JL. Letjen S Parman, Palmerah, Jakarta Barat, DKI Jakarta, Indonesia
Email: ops (at) sivali.co.id
Web: https://sivali.co · https://orcastra.io · https://app.orcastra.io
Effective date: 7 September 2026
This Privacy Policy explains how Sivali Cloud Technology (PT Sivali Catur Lestari) (“Sivali”, “we”, “us”) collects, uses, stores, and shares personal information when you use our websites and cloud products, including Orcastra Cloud Service (https://app.orcastra.io / https://sso.orcastra.io) and https://sivali.co.
1. What is Orcastra Cloud Service?
Orcastra Cloud Service is Sivali’s cloud management platform for provisioning and operating virtual machines and related infrastructure. Users sign in through the Orcastra Account Center to access the dashboard, consoles, and connected services. This Privacy Policy covers that product and related authentication flows, including sign-in with Google and other identity providers.
2. Information we collect
Depending on how you interact with us, we may collect:
- Account and profile data: name, email address, phone number, company or billing address, country, and account identifiers.
- Authentication data: when you choose “Sign in with Google” or another provider, we receive basic profile information the provider shares with your consent (typically name, email address, and a unique account ID). We do not receive your Google password.
- Service and usage data: product activity (for example instance names you manage, roles/tenants, login timestamps), device/browser type, IP address, and diagnostic logs needed to operate and secure the service.
- Support and communication data: messages you send to support, and related tickets.
- Cookies and similar technologies: session cookies and security cookies required for login, CSRF protection, and preference storage. See section 6.
3. How we use personal information
We use personal information to:
- create and manage your Orcastra / Sivali accounts;
- authenticate you (including via Google OAuth) and enforce access control;
- provide, operate, maintain, and improve Orcastra Cloud Service and related support;
- process orders, billing, and customer communications where applicable;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- comply with legal obligations and enforce our terms.
We do not sell personal information. We do not use Google user data for advertising.
4. Google Sign-In / OAuth data use (Limited Use)
If you sign in to Orcastra Cloud Service with Google, we request only the minimum OAuth scopes needed for authentication and account linking (for example openid, email, and profile). We use that Google account data solely to:
- identify and authenticate the user;
- create or link an Orcastra account;
- display your name/email in the product account UI;
- secure the session and prevent unauthorized access.
Google user data obtained through Google APIs is not used for serving advertisements, not sold, and not transferred except as needed to provide or improve user-facing features, for security, or to comply with law — consistent with Google’s API Services User Data Policy, including the Limited Use requirements.
5. Sharing and processors
We may share personal information with:
- Infrastructure and hosting providers that process data on our behalf to run Orcastra and related systems;
- Identity providers you choose (e.g. Google) as part of the sign-in flow you initiate;
- Professional advisors or authorities when required by law or to protect rights and safety;
- Successors in connection with a merger, acquisition, or asset transfer, subject to this policy’s protections.
Service providers are bound to process personal data only on our instructions and with appropriate safeguards.
6. Cookies
We use essential cookies for authentication sessions, security, and load balancing. Where analytics cookies are used on marketing sites, they help us understand aggregate traffic; you can control cookies through your browser settings. Disabling essential cookies may prevent login from working.
7. Retention
We retain account and service data for as long as your account remains active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal, tax, or security requirements. Authentication logs are retained for a limited period appropriate for security investigation, then deleted or anonymized.
8. Security
We apply administrative, technical, and organizational measures appropriate to the risk, including TLS in transit, access controls, and monitoring. No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.
9. International transfers
Primary operations are in Indonesia. Where processors are located elsewhere, we use contractual and technical safeguards consistent with applicable law and this policy.
10. Your rights
Subject to applicable law, you may request access, correction, deletion, or restriction of your personal information, or object to certain processing. For Orcastra account data, you can also update profile fields in the Account Center where available. To exercise rights, contact us using the details below. You may also revoke Google access at any time in your Google Account permissions.
11. Children
Orcastra Cloud Service and our sites are not directed to children under 16. We do not knowingly collect personal information from children.
12. Changes
We may update this Privacy Policy from time to time. The “Effective date” above will change when we make material updates. Continued use of the services after an update constitutes acceptance of the revised policy where permitted by law.
13. Contact
Sivali Cloud Technology (PT Sivali Catur Lestari)
Grand Slipi Tower LT.42 Unit 42GH, JL. Letjen S Parman, Palmerah, Jakarta Barat, DKI Jakarta, Indonesia
Email: ops (at) sivali.co.id
Web: https://sivali.co · https://orcastra.io · https://app.orcastra.io