Privacy Policy

Effective October 31, 2026

This policy explains how PT Momenial Open Media (“Momenial”) handles personal data as a controller: data about event organizers and their team members, and about visitors to pentas.events and resepsi.rsvp.

If you registered for an event

The organizer decides what is collected and why, and Momenial processes it on the organizer's behalf under our data processing addendum. For questions about your registration, contact the organizer first; we will help them respond.

What we collect

Your name, email address and mobile number; your password, stored only as a hash, and your passkeys; your organization's details, invoice details and payout account; your plan purchases, with card details kept by Midtrans or PayPal, not by us; a log of actions in the console, with the IP address and browser used; and the messages you send us.

How we use it

To run your account and events, sign you in securely, bill you and send receipts and renewal reminders, answer support requests, prevent abuse and fraud, and meet our legal obligations. We do not sell personal data or use it for advertising.

Legal basis

We process your data to perform our contract with you, in our legitimate interest in keeping the service secure, to meet legal obligations such as keeping billing records, and with your consent where we ask for it.

Cookies

We use only the cookies the service needs: to keep you signed in, to open an order you placed, to remember the country of your mobile number and to complete a passkey sign-in. Some forms run a Cloudflare check against bots. We use no advertising or third-party analytics cookies, and event page views are counted without identifying anyone.

Who we share it with

The providers that run the service, listed in our data processing addendum; Midtrans or PayPal when you pay for a plan; the other members of your account's team; and authorities when the law requires it.

Where it is stored

Your account and its events are stored in the data region chosen at sign-up: the Americas, Europe or Asia-Pacific. Sign-in records sit in a global database whose primary copy is in Asia-Pacific, and some providers are in the United States, so your data may be transferred abroad. Transfers out of the European Economic Area are covered by the EU Standard Contractual Clauses.

How long we keep it

As long as your account exists. When an account is deleted, its data is deleted with it, except billing records and the security log of account actions, which we keep as the law requires. Deleted data can remain in backups for up to 30 days.

Your rights

You can view and correct most of your data in the console, and the account owner can delete the account there. You can also ask us for a copy of your data, to correct or delete it, or to stop a use you object to, and you may withdraw consent at any time. You may also complain to the data protection authority where you live.

Security

Data is encrypted in transit and at rest, each organizer's data is kept apart, and console access is role-based. The full measures are in our data processing addendum.

Changes and contact

We update this policy when the service or the law changes; the date above shows the current version. Questions and requests go to support@momenial.com.

PT Momenial Open Media · O2 EK05/1, Grand Wisata, Bekasi 17510, Indonesia