Maleo SitesHukum
Sub-processors
The third-party service providers that process personal data on our behalf to operate Maleo Sites.
- Effective
- 23 August 2026
- Version
- 1.0
To operate and deliver Maleo Sites, we engage vetted third-party service providers ("Sub-processors") to assist with infrastructure, database storage, email delivery, and payment processing.
In compliance with Law No. 27 of 2022 on Personal Data Protection ("UU PDP") and ourData Processing Agreement, this page provides a comprehensive and transparent list of every sub-processor we use.
1. Overview
Before engaging any sub-processor, we evaluate their data security practices, compliance standards, and privacy commitments. Every sub-processor is bound by contractual terms that enforce strict data protection and confidentiality obligations.
2. Current Sub-processors
The following entities currently process data in connection with Maleo Sites:
| Sub-processor | Role / Purpose | Processing Location | Data Processed |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting, database (D1), object storage (R2), CDN, and DNS | Global edge network, including data centres in Singapore and the United States | All account data, site content, uploaded media, form submissions, and analytics events |
| Resend, Inc. | Transactional email (email verification, password reset, notifications) | United States | Email address and the contents of the message sent |
| PT Mayar Kernel Supernova | Payment processing for customers paying in Indonesian rupiah | Indonesia | Name, email address, mobile number, transaction amount, and payment method |
| Dodo Payments | Merchant of record and payment processing for customers paying in currencies other than Indonesian rupiah | India and the United States | Name, email address, billing country, transaction amount, and payment method |
| Google LLC | Optional "Sign in with Google" authentication | Global | Name, email address, and profile picture, only if you choose this sign-in method |
3. Security and Due Diligence
We ensure that all listed sub-processors meet stringent operational standards, including:
- Data protection agreements: We maintain data processing agreements with each provider ensuring compliance with global and local data privacy frameworks.
- Encryption: Ensuring data transferred to and stored by sub-processors is encrypted using robust protocols (TLS in transit and AES-256 at rest).
- Principle of least privilege: Sub-processors only receive access to the minimal amount of data necessary to perform their designated technical function.
4. Updates and Objections
As our platform evolves, we may add or replace sub-processors. When material changes are made to this list:
- We will update this public page and note the revision date.
- If you are a customer bound by our Data Processing Agreement and have legitimate data protection concerns regarding a newly appointed sub-processor, you may contact us at privacy@maleosites.com within 30 days of the update.
- If an objection cannot be mutually resolved, you retain the right to terminate your subscription and export or delete your data without penalty.
Questions about this document? Write to support@maleosites.com.