1. Summary
CoreAsia Download Manager ("CAD") is a desktop download manager with a companion browser extension, operated by PT Inti Asia Teknologi (the CoreAsia brand). Processing by the app and extension happens locally on your device, and for the core functions of CAD we do not collect your personal data to our servers — EXCEPT as described in this Policy: (a) purchase data processed by the seller of record / Merchant of Record (Gumroad) per their privacy policy; (b) technical diagnostics if you enable them (see Diagnostics); (c) license activation/identification data if online license validation is introduced in a future version; and (d) disclosures required by law or valid legal process. Otherwise, we do not upload your history, download contents, or URLs to our servers, and we do not sell your personal data. If we introduce server-based features in the future, we will update this Policy before such features become active.
2. Data Controller & Roles
PT Inti Asia Teknologi is the data controller for data processed by the app, optional diagnostics, and license activation. For purchases, Gumroad acts as seller of record (Merchant of Record) and controller/processor of your payment data (name, email, billing address, card/tax data) per its privacy policy; PT Inti Asia Teknologi does not store your card data. Privacy questions may be sent to [email protected].
3. Browser Extension (Chrome/Edge)
The companion extension helps detect downloadable media on the page you are viewing. To do this, the extension may read:
- The active tab URL and media links (e.g. video/audio) present on the page you open
- ONLY when you start a download that requires it: cookies for the relevant site, so the app can download content that needs your logged-in session
4. Where Extension Data Is Sent
The data above is sent ONLY to the CoreAsia Download Manager application running LOCALLY on your computer (address 127.0.0.1 / localhost). This data is NOT sent to CoreAsia servers or any third party. The extension does not sell data, does not show ads, and does not track your browsing activity for advertising purposes.
5. Desktop Application
The desktop application runs on your computer and:
- Downloads the files you request to the folder you choose
- Stores settings, license, and download history LOCALLY on your device
- Does not upload your download history to our servers
6. License Activation
Activation requires no account. Currently licenses are validated locally (offline, Ed25519) without sending personal data to our servers. In a future version, we may introduce online license validation; if enabled, only minimal license/installation identifiers are sent to prevent abuse, and this Policy will be updated before that feature is active. Purchase and license issuance are handled by the seller of record (Gumroad) per their privacy policy.
7. Trial Period
The 3-day free trial is tracked using a local timestamp on your device. No personal data is collected to run the trial.
8. Optional Diagnostics (Opt-In)
Technical diagnostics are optional and OFF by default; they are active only if you turn them on yourself, and you can turn them off at any time. When enabled, we send limited technical data: a pseudonymized installation identifier (a one-way hash that cannot be reversed to your identity), plus app version, operating-system version, locale, and time zone. We do not send your history, download contents, or URLs. This data is used solely for diagnostics and product-quality improvement.
9. Legal Bases & Cross-Border Transfers
Our legal bases: performance of a contract (processing your purchase and license), consent (optional diagnostics), and legitimate interests (security and product improvement). Purchase data may be processed outside your country of residence (e.g., via Gumroad in the United States) with safeguards required by applicable law (e.g., standard contractual clauses).
10. Data Security & Breach Notification
We apply reasonable technical and organizational measures to protect data, but no method of transmission or storage is 100% secure; we cannot guarantee absolute security. If a personal-data breach occurs that poses a risk to you, we will notify you and the competent authority within the time limits required by applicable law — including no later than 3x24 hours under the Indonesian PDP Law No. 27 of 2022, and, where applicable, without undue delay / within 72 hours under GDPR Article 33.
11. No Sale of Data
We do not sell, rent, or trade your personal data to third parties.
12. Your Rights
Because most data is stored locally on your device, you remain in full control. Depending on your jurisdiction (e.g., EU/UK under GDPR/UK GDPR, or Indonesia under the PDP Law), you have the right to: access, rectify, erase, restrict, or object to processing of your personal data, request portability, and withdraw consent at any time without affecting prior lawful processing. For payment data, submit a request through us or directly to Gumroad. You also have the right to lodge a complaint with the competent data-protection authority (e.g., the Indonesian PDP Authority, or an EU/UK data-protection authority). Contact us at [email protected]. You can exercise these rights directly as follows:
- Delete history, settings, and app data directly from your device
- Turn off optional diagnostics at any time
- Remove the app and extension to stop all related data processing
13. Data Storage and Retention
Settings, license, and download history are stored locally on your device until you delete them. We do not keep copies of that data on our servers. Optional diagnostics data (if you enable it) is retained for at most 12 (twelve) months, then deleted or anonymized. License-activation data is retained for the license term for support and anti-abuse purposes. Purchase data is retained by Gumroad per its policies and tax obligations.
14. Data Recipients / Sub-processors
Our categories of data recipients are limited to: (a) Gumroad (seller of record / payment processor); (b) our analytics/diagnostics provider (only for the optional diagnostics data you enable); and (c) infrastructure/hosting providers supporting our limited services. We do not share your personal data with others except as described in this Policy or required by law.
15. Third-Party Content/Sites
This Policy covers only the handling of data by CAD. Third-party content, sites, and services you access through CAD are governed by their own policies and terms, beyond our control. Responsibility for the legality of content you download is governed by the Terms of Use.
16. Policy Changes
We may update this Policy from time to time, marked by a revision date on this page. For material changes to how we process personal data, we will give reasonable notice (in-app or on this page) before they take effect and — where required by law — request your renewed consent.
17. Governing Law
This privacy policy is governed by and interpreted under the laws of the Republic of Indonesia. CoreAsia Download Manager is operated by PT Inti Asia Teknologi.
18. Contact Us
For questions about the CoreAsia Download Manager privacy policy, contact us at [email protected].