Privacy Policy

1. Who we are the data controller

EX Epic Academy (“we”, “the Academy”, “us”) operates the ex-academy.co website and runs an immersive AI product accelerator program in Bali, Indonesia.

The operator and data controller under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022, “UU PDP”) is EPIC SOLUTIONS PT., with registered operations in Bali, Indonesia, in collaboration with EX Venture Group. For any privacy matter, contact us at info@ex-academy.co.

2. The personal data we collect

When you apply to the Academy, attend an interview, or interact with this website, we may collect: name, email address, phone number, country of residence, your application answers, portfolio or project references (e.g. GitHub), visa-related information, and any communications you send us.

When you visit ex-academy.co, we automatically collect technical data: IP address (and approximate region), browser type, device type, pages visited and time spent, and anonymous engagement signals through cookies and similar technologies (see Section 12).

3. How we use your personal data

We process your data for the following purposes: (a) reviewing your application and conducting the live assessment interview; (b) operating logistics housing, meals, and venture floor access for accepted builders; (c) communicating with you about the program, your interview result, the alumni network, and any opportunity that may follow; (d) compliance with Indonesian law, including visa, tax, and regulatory obligations.

4. Lawful basis for processing (Article 20, UU PDP)

We rely on the following lawful bases: explicit consent; performance of a contract (your participation as an accepted builder); our legitimate interests in operating a global educational program; and compliance with legal obligations under Indonesian and Balinese law.

5. Cookies and similar technologies

We use essential cookies that are required for the website to function (for example, storing your cookie preference so the banner does not reappear every visit).

We also use non-essential cookies for analytics, so we can understand how the site is used and improve it. Non-essential cookies are only placed after you accept them via the cookie banner. You can revoke your consent at any time by clearing your browser’s local storage for this site, which re-displays the banner.

6. Sharing your personal data

We do not sell your personal data. We share it only with: (a) our hosting, payment, email and analytics providers, under data processing agreements; (b) Indonesian government authorities when legally required (e.g. visa, tax, or regulatory requests); (c) your assigned mentors during the program, on a need-to-know basis.

7. Data retention

We keep applications and interview notes for up to 24 months after your last interaction with us, then delete or anonymize them. Accepted builder records are retained for the duration of your program plus 5 years, for accounting, regulatory, and alumni-network purposes. You may request earlier deletion where the law allows.

8. International data transfers

Because our hosting, analytics and email providers may operate outside Indonesia, your personal data may be processed in countries with different data protection rules. Where this occurs, we rely on legal safeguards such as Standard Contractual Clauses or other measures provided for under Articles 55–57 of the UU PDP and we only transfer data necessary to deliver the services.

9. Data security

We use industry-standard administrative, technical and physical safeguards: TLS encryption in transit, access controls on internal systems, and least-privilege access. No system is perfectly secure, but we treat your data with the care required by Articles 35 and 39 of the UU PDP.

10. Your rights as a data subject (Articles 5–13, UU PDP)

You have the right to: (a) be informed about how your data is processed; (b) access and obtain a copy; (c) request correction of inaccurate data; (d) request deletion; (e) restrict or object to processing; (f) withdraw your consent at any time (without affecting processing already done); (g) data portability; (h) not be subject to automated decision-making or profiling that has significant legal effect.

To exercise any of these rights, email academy@exventure.co with the subject “Data Subject Request”. We respond within 30 days.

11. Children’s data

The Academy is designed for adult builders (18+). We do not intentionally collect personal data from minors. If you believe we have collected a minor’s data, contact us and we will delete it.

12. Cookies detail (essential vs non-essential)

Essential cookies: store your cookie consent preference in local storage. They run automatically and cannot be disabled without breaking core site functions.

Non-essential cookies (active only after you Accept): analytics tags that count page views, sessions, and anonymous engagement signals to help us improve the site. No decision-grade profiling is performed.

13. Updates to this policy

We may update this Policy to reflect changes in our practices, the program, or Indonesian law. The “Last updated” date will always reflect the most recent revision.

14. How to contact us

Email: academy@exventure.co

Postal: EX Epic Academy, c/o EPIC SOLUTIONS PT., Bali, Indonesia.

We acknowledge receipt of privacy requests in writing within five business days, in line with the UU PDP.