Privacy Policy

Last update : 20 February 2026

Tilabs.co (“TiLabs”, “we”, or “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit the tilabs.co website, contact us, request a demo, or use our Enablement-as-a-Service (EaaS) services for Odoo (“Services”).

By accessing tilabs.co or using our Services, you agree to this Privacy Policy.

1) Who We Are

Data Controller:
PT Teknologi Inovasi Labs (“TiLabs”)
Address: CLEON PARK, Jl. Komp. Perumahan Jkt Garden City, Cakung, Jakarta Timur City, Special Capital Region of Jakarta 13910
Email: support@tilabs.co

If you are a business customer using Odoo through TiLabs, your organization/company generally acts as the Data Controller for end-user data in Odoo, and TiLabs acts as the Data Processor (see Section 6).

Data Controller:
PT Teknologi Inovasi Labs (“TiLabs”)
Address: CLEON PARK, Jl. Komp. Perumahan Jkt Garden City, Cakung, East Jakarta City, Special Capital Region of Jakarta 13910

Email: support@tilabs.co

2) Scope

This policy applies to:

Visitors of the website tilabs.co
Prospects/leads who fill out forms, request demos, or contact TiLabs
Customers using Odoo EaaS TiLabs (implementation, configuration, managed hosting, support, training)
Customer users whose data is processed by TiLabs in the context of providing the Services

This policy applies to:

Visitors of the website tilabs.co
Prospects/leads who fill out forms, request demos, or contact TiLabs
Customers using Odoo EaaS TiLabs (implementation, configuration, managed hosting, support, training)
Customer users whose data is processed by TiLabs in the context of providing the Services

3) Personal Data That We Collect

We may collect the following types of data:

A. Website & Marketing

Identity & contact: name, company name, job title, email, phone number
Form inputs: message, needs, project details
Website usage data: IP address, device/browser info, pages visited, referral source, approximate location (city/country)
Cookies and similar tracking technologies (see Section 10)

B. Customer Account & Service Provisioning (Odoo EaaS)

Depending on the project scope, TiLabs may process data within your Odoo environment, such as:

Admin and user account information (name, work email, access role)
Operational data entered by your organization (e.g. contacts, sales, purchase, inventory, invoice)
Support & communication logs (tickets, support-related chat/email)

C. Payments & Contract Administration (B2B)

Billing contact details and invoice address
Payment status and transaction references (we generally do not store complete card details when processed by a third-party payment provider)

We may collect the following types of data:

A. Website & Marketing

Identity & contact: name, company name, job title, email, phone number
Form inputs: messages, requirements, project details
Website usage data: IP address, device/browser info, pages visited, referral source, approximate location (city/country)
Cookies and similar tracking technologies (see Section 10)

B. Customer Accounts & Service Provisioning (Odoo EaaS)

Depending on the project scope, TiLabs may process data within your Odoo environment, such as:

Admin and user account information (name, work email, access roles)
Operational data entered by your organization (e.g., contacts, sales, purchases, inventory, invoices)
Support logs & communication (tickets, support-related chat/email)

C. Payments & Contract Administration (B2B)

Billing contact details and invoice address
Payment status and transaction references (we generally do not store complete card details if processed by third-party payment providers)

We may collect the following types of data:

A. Website & Marketing

Identity & contact: name, company name, job title, email, phone number
Form inputs: message, needs, project details
Website usage data: IP address, device/browser info, pages visited, referral source, approximate location (city/country)
Cookies and similar tracking technologies (see Section 10)

B. Customer Account & Service Provisioning (Odoo EaaS)

Depending on the project scope, TiLabs may process data within your Odoo environment, such as:

Admin and user account information (name, work email, access role)
Operational data entered by your organization (e.g. contacts, sales, purchase, inventory, invoice)
Support & communication logs (tickets, support-related chat/email)

C. Payments & Contract Administration (B2B)

Billing contact details and invoice address
Payment status and transaction references (we generally do not store complete card details when processed by a third-party payment provider)

4) How We Use Personal Data

We use personal data to:

Respond to inquiries, demo requests, and quotes
Provide and operate the Services (implementation, hosting, support, training)
Manage customer accounts, access, and security
Send service updates, maintenance notifications, and support responses
Improve website performance and user experience
Marketing activities (if permitted), such as sending product updates or event invitations
Comply with legal obligations and enforce agreements
Prevent fraud, abuse, or security incidents

We use personal data to:

Respond to inquiries, demo requests, and quotes
Provide and operate the Services (implementation, hosting, support, training)
Manage customer accounts, access, and security
Send service updates, maintenance notifications, and support responses
Improve website performance and user experience
Marketing activities (if permitted), such as sending product updates or event invitations
Comply with legal obligations and enforce agreements
Prevent fraud, abuse, or security incidents

5) Basis for Processing That We Use

To the extent applicable, we process personal data based on one or more of the following grounds:

Contract: to provide the Services you requested or purchased
Legitimate interest: running and improving our business (e.g., security, service improvement, communication)
Consent: for certain marketing communications and non-essential cookies
Legal obligations: compliance with regulations/legal requests

To the extent applicable, we process personal data based on one or more of the following grounds:

Contract: to provide the Services you requested or purchased
Legitimate interest: running and improving our business (e.g., security, service improvement, communication)
Consent: for certain marketing communications and non-essential cookies
Legal obligations: compliance with regulations/legal requests

6) The Role of TiLabs: Controller vs. Data Processor

A. When TiLabs acts as the Data Controller

TiLabs acts as the Data Controller for personal data collected through:

Website activities and marketing for tilabs.co
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as the Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions. In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process this data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

A. When TiLabs acts as the Data Controller

TiLabs acts as the Data Controller for personal data collected through:

Website activities and marketing for tilabs.co
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as the Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions. In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process this data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

7) Data Sharing and Disclosure

We may share personal data with:

Service providers/subprocessors (e.g., hosting provider, cloud infrastructure, email delivery, analytics) only to provide the Services
Professional advisors (legal, accounting) when necessary
Authorities if required by law or to protect rights and safety
Business transactions (mergers, acquisitions, restructuring) with reasonable protections

We do not sell your personal data.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

We may share personal data with:

Service providers/subprocessors (e.g., hosting provider, cloud infrastructure, email delivery, analytics) only to provide the Services
Professional advisors (legal, accounting) when necessary
Authorities if required by law or to protect rights and safety
Business transactions (mergers, acquisitions, restructuring) with reasonable protections

We do not sell your personal data.

8) Cross-Border Data Transfer

Your data may be processed in other countries depending on the location of our service providers. In the event of cross-border transfers, we apply reasonable protections (contractual and technical) to maintain data security.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

9) Data Retention

We retain personal data only for as long as necessary for the described purposes:

Lead/prospect data: generally up to [12–24 months] from the last interaction (unless required longer)
Customer and support records: for the duration of the contract and a reasonable period thereafter for legal, audit, or dispute purposes
System logs: as needed for security and operational purposes

Customer data within Odoo is stored in accordance with customer instructions and contract terms.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

We retain personal data only for as long as necessary for the described purposes:

Lead/prospect data: generally up to [12–24 months] from the last interaction (unless required longer)
Customer and support records: for the duration of the contract and a reasonable period thereafter for legal, audit, or dispute purposes
System logs: as needed for security and operational purposes

Customer data within Odoo is stored in accordance with customer instructions and contract terms.

10) Cookies and Tracking

We use cookies and similar technologies to:

Enable core website functions
Analyze traffic and performance
Measure marketing effectiveness

You can control cookies through browser settings and (where available) cookie preference banners/settings. Disabling cookies may affect website functionality.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

We use cookies and similar technologies to:

Enable core website functions
Analyze traffic and performance
Measure marketing effectiveness

You can control cookies through browser settings and (where available) cookie preference banners/settings. Disabling cookies may affect website functionality.

11) Security

We implement reasonable administrative, technical, and organizational security measures, including:

Access control and the principle of least privilege
Authentication controls for system and admin access
Monitoring and logging for security events
Encryption in transit (TLS/HTTPS) where relevant
Secure operational procedures for support access to the Odoo environment

No transmission/storage method is 100% secure, but we strive to protect data using practices that align with industry standards.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

We implement reasonable administrative, technical, and organizational security measures, including:

Access control and the principle of least privilege
Authentication controls for system and admin access
Monitoring and logging for security events
Encryption in transit (TLS/HTTPS) where relevant
Secure operational procedures for support access to the Odoo environment

No transmission/storage method is 100% secure, but we strive to protect data using practices that align with industry standards.

12) Your Rights

Depending on applicable law, you may have the right to:

Request access to your personal data
Correct inaccurate data
Delete data (subject to legal/contractual limitations)
Object to or restrict processing
Withdraw consent (if processing is based on consent)
Data portability (if applicable)

To submit a request, contact [privacy@tilabs.co].
If you are an end user of a TiLabs customer's Odoo system, please contact your organization/company first as they are the Data Controller.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

Depending on applicable law, you may have the right to:

Request access to your personal data
Correct inaccurate data
Delete data (subject to legal/contractual limitations)
Object to or restrict processing
Withdraw consent (if processing is based on consent)
Data portability (if applicable)

To submit a request, contact [privacy@tilabs.co].
If you are an end user of a TiLabs customer's Odoo system, please contact your organization/company first as they are the Data Controller.

13) Policy Changes

We may update this Privacy Policy from time to time. The latest version will be published on tilabs.co with the updated "Last updated" date. We may inform you of material changes through reasonable communication channels.

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

14) Contact Us

For privacy-related questions or requests:
PT Teknologi Inovasi Labs (TiLabs)
Email: support@tilabs.id

A. When TiLabs acts as a Data Controller

TiLabs acts as a Data Controller for personal data collected through:

Website activities and tilabs.co marketing
Sales inquiries, demo requests, and customer relationship management
Contract administration and billing contacts

B. When TiLabs acts as a Data Processor

When providing Odoo EaaS, TiLabs may process personal data within your Odoo instance based on your instructions.

In this context:

You (the customer) = Data Controller
TiLabs = Data Processor
We only access/process that data for support, troubleshooting, implementation, configuration, and operational maintenance in accordance with the agreement.

If required, we can provide a Data Processing Agreement (DPA) as part of the service contract.

For privacy-related questions or requests:
PT Teknologi Inovasi Labs (TiLabs)
Email: support@tilabs.id

Ready to Fix Your ERP Problems?

Our EaaS model is flexible and grows with your business. It is fast, secure, and always supported.

Daftar