Orionex General Terms of Service

PT Orionex Solusi Digital ("Orionex Solutions," "Orionex," "we," "us," or "our"), located at Gedung Wirausaha, Jalan H. R. Rasuna Said Kav. C No. 5, Setiabudi, Jakarta Selatan, 12920, Indonesia, provides shared corporate services, software-enabled services, IT Consulting, Custom Software Development, payment and identity infrastructure, and product-specific offerings such as Luncurin.

These Terms of Service ("Terms") govern your access to and use of Orionex's current shared services, including Orionex websites, Orionex Identity, Orionex Pay, IT Consulting, Custom Software Development, Luncurin, and related services (collectively, the "Services"), unless a separate signed agreement or product-specific addendum states otherwise.

BY CREATING AN ACCOUNT, COMPLETING A SIGN-UP OR CHECKOUT FLOW, OR OTHERWISE AFFIRMATIVELY INDICATING YOUR ACCEPTANCE (SUCH AS BY CHECKING A CONSENT BOX), YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREED TO THESE TERMS, OUR PRIVACY POLICY, AND ANY APPLICABLE PRODUCT-SPECIFIC ADDENDUM.

If there is a conflict between Orionex legal documents, the order of precedence is:

• a separately signed MSA, enterprise agreement, or SOW;
• a product-specific addendum;
• these general Terms; and
• website notices or non-contractual guidance.

Your Personal Data is processed in accordance with our Privacy Policy and any applicable product-specific addendum. The Privacy Policy describes the categories of Personal Data we collect, the purposes and legal bases for Processing, your data-subject rights (including access, correction, deletion, and portability), our breach-notification obligations, and the role of Orionex's Data Protection Officer. Channels for privacy requests and product-specific privacy contacts are described in the Privacy Policy and the applicable Product Addendum.

Orionex operates as an electronic system provider subject to applicable registration requirements under Indonesian law, including Peraturan Pemerintah No. 71 Tahun 2019 and related regulations. Orionex's registration status may be verified through the applicable government registry.

"Services" means the current Orionex shared corporate services, including Orionex websites, Orionex Identity, Orionex Pay, IT Consulting, Custom Software Development, Luncurin, APIs, and related services.

"Shared Orionex Services" means cross-service infrastructure or services operated by Orionex, including Orionex Identity and Orionex Pay.

"Product Addendum" means a product-specific legal addendum that supplements these Terms for a particular product or service.

"Customer Data" means data, content, files, materials, or information submitted to Orionex through the Services.

"Client Project Data" means Customer Data or other materials processed by Orionex on behalf of a client for IT Consulting or Custom Software Development services, unless the applicable contract states otherwise.

"AI Output" means data, text, code, media, or suggestions generated by an Orionex AI-enabled workflow in response to an input.

"Order Documents" means an order form, proposal, quotation, SOW, or other service document accepted by the parties.

"Beta Services" means features or services identified as beta, preview, experimental, or early access.

"Personal Data" means any information relating to an identified or identifiable natural person, whether directly or indirectly, alone or in combination with other information.

"Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.

"Controller" means the party that, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

"Processor" means a party that processes Personal Data on behalf of and under the instructions of a Controller.

"Sub-processor" means a third party engaged by a Processor to process Personal Data on behalf of the Controller.

"Data Subject" means the identified or identifiable natural person to whom Personal Data relates.

"Consent" means a freely given, specific, informed, and unambiguous indication by which a Data Subject signifies agreement to the Processing of Personal Data relating to them.

"Legitimate Interest" means a lawful basis for Processing where the Processing is necessary for the legitimate interests pursued by the Controller or a third party, except where overridden by the interests or fundamental rights of the Data Subject.

You may only use the Services if you have the legal capacity to do so under applicable law.

• If you are located in Indonesia, you must satisfy the minimum age and legal-capacity requirements under applicable Indonesian law.
• If you are located in the EEA, the UK, or another jurisdiction applying GDPR-style child-Consent rules, and the relevant Service relies on Consent for a direct offer to a child, you must be at least the age at which you can validly Consent under applicable law, or use the Service with parent or guardian authorization where permitted.

If you use the Services on behalf of a company, school, institution, or other organization, you represent that you have authority to bind that organization.

If a Service requires an account, you must:

• provide accurate and current information;
• keep credentials secure;
• restrict access to authorized users only; and
• notify Orionex promptly of suspected unauthorized access or misuse.

You agree not to use the Services in violation of applicable law, including export controls, sanctions, privacy law, intellectual property law, and the Indonesian electronic-system and consumer-protection framework applicable to your use.

If Orionex reasonably requires identity, merchant, billing, or organization verification for a Service, you agree to provide information reasonably necessary to complete that verification. Orionex will only request information that is proportionate and relevant to the verification purpose.

Subject to these Terms, Orionex grants you a limited, non-exclusive, non-transferable, revocable right to access and use the Services for your own internal business, professional, or otherwise authorized purposes.

Orionex may use Shared Orionex Services, including Orionex Identity and Orionex Pay, across multiple products or service lines.

If Orionex provides software or components for deployment in your own environment, your rights are limited to the license or service scope stated in the applicable contract. You remain responsible for infrastructure you control unless your contract says otherwise.

Beta Services may change, contain errors, or be discontinued at any time. Unless Orionex expressly agrees otherwise in writing, Beta Services are provided without any service commitment.

Where Orionex facilitates domain, certificate, or related infrastructure services, third-party provider terms may apply in addition to these Terms. Orionex does not act as a registrar, bank, or public certification authority unless expressly stated otherwise.

You may not use the Services to:

• violate applicable law or third-party rights;
• upload or distribute malware or harmful code;
• interfere with security controls, rate limits, verification measures, or service integrity;
• scrape, copy, or systematically extract data without authorization;
• reverse engineer the Services except where applicable law cannot lawfully restrict that activity;
• use the Services to train external AI systems using Orionex materials or Customer Data where Orionex or the applicable client has not authorized that use;
• publish or submit content you do not have the right to use; or
• resell or white-label the Services unless Orionex has authorized that arrangement in writing.

If you submit Customer Data, you are responsible for ensuring you have the rights, notices, permissions, and legal basis necessary for that submission.

You may not use the Services to host, publish, transmit, or process content that is illegal, infringing, fraudulent, abusive, or otherwise prohibited by applicable law or these Terms.

Orionex may suspend, remove, disable, or restrict access to content or account activity that Orionex reasonably believes violates law, these Terms, or the security and integrity of the Services.

Where legally and operationally feasible, Orionex may give notice and an opportunity to respond before taking action. Orionex may act without prior notice where immediate action is reasonably necessary for legal compliance, urgent safety issues, fraud prevention, or service protection.

If you believe material hosted through the Services infringes your rights, send a complaint to legal@orionex.id with sufficient detail for Orionex to review the issue.

Orionex may comply with lawful requests, orders, or takedown obligations from courts, regulators, or competent authorities, including requests made under Indonesian electronic-system rules.

The Services, including Orionex software, content, branding, workflows, and related intellectual property, remain owned by Orionex or its licensors.

You retain your rights in Customer Data.

You grant Orionex only the limited rights necessary to:

• host, process, secure, maintain, and support the Services;
• perform the applicable contract;
• generate aggregated or de-identified analytics, service insights, and service-quality improvements where permitted by law, disclosed in the Privacy Policy, and consistent with any applicable client contract where Orionex acts as a Processor; and
• comply with law, security obligations, and documented client instructions where Orionex acts as a Processor.

Orionex does not use Customer Data to train or fine-tune artificial intelligence or machine learning models, whether operated by Orionex or by third parties, unless you have separately and expressly authorized that use. Where Orionex integrates third-party AI providers, Orionex uses API-based configurations that opt out of provider-side model training for input and output data.

Orionex may refer to your name, logo, or project as a customer reference only if:

• you have given prior written approval; or
• the relevant Order Documents or Product Addendum expressly allow it.

Any related Personal Data or business contact information used for that purpose will be handled in accordance with the Privacy Policy and the scope of the relevant approval or contract.

If you provide feedback or suggestions, Orionex may use that feedback without restriction, provided Orionex does not publicly disclose your confidential information when doing so. To the extent feedback contains Personal Data of third parties, Orionex will process such Personal Data in accordance with the Privacy Policy.

If you engage Orionex for IT Consulting or Custom Software Development, this Section applies unless the signed project documents say otherwise.

The scope, timing, deliverables, and commercial terms for a project may be described in Order Documents. If there is a conflict, the signed project documents control.

Each party must protect the other party's confidential information and use it only as needed to perform the applicable contract, except where disclosure is required by law or the information is already lawfully public.

For IT Consulting and Custom Software Development:

• Orionex acts as a Controller for Orionex's own sales, contact, account, billing, support, administrative, security, and compliance data; and
• Orionex acts as a Processor for Client Project Data unless the applicable contract expressly states otherwise.

If Orionex processes Client Project Data on your behalf, you are responsible for:

• providing lawful instructions;
• ensuring you have the right to provide the data;
• providing required notices and obtaining required consents; and
• notifying Orionex of any special restrictions that apply to the data.

Where Orionex acts as a Processor for a project, the applicable Processor obligations will be set out in the relevant MSA, SOW, DPA, or other project-specific data-Processing term that meets the requirements of applicable data-protection law, including UU No. 27 Tahun 2022 (Pelindungan Data Pribadi) and, where the engagement involves Personal Data subject to GDPR, the applicable GDPR Processor requirements. Orionex will ensure that each Processor engagement is documented with data-Processing terms before Processing begins. That project-level document controls to the extent of conflict for the relevant project.

You are responsible for timely access, decisions, approvals, and dependencies that Orionex reasonably needs to perform the Services. Orionex is not responsible for project delays caused by your failure to provide those dependencies on time.

Depending on the Service, Orionex may offer payment through:

• Orionex Pay;
• manual bank transfer.

Where Orionex Pay is used, Orionex may use backend payment processors, including Xendit, to support invoice issuance, payment collection, reconciliation, or related workflows. Additional bank, payment-network, or processor terms may apply to the transaction only where they are presented in the relevant checkout flow, invoice, order documents, or transaction method.

Unless Orionex states otherwise in writing:

• fees are payable in the currency stated on the invoice or checkout flow;
• you are responsible for applicable taxes, duties, and government charges, except taxes based on Orionex's net income; and
• Orionex may require advance payment, milestone payment, or recurring billing depending on the Service.

Recurring services may renew automatically if stated in the applicable Service or order flow. Orionex may suspend or limit Services for non-payment, payment abuse, fraud risk, or repeated failed collection attempts after any notice required by law or the applicable product flow.

Refund rights, if any, are governed by the relevant Service flow, Product Addendum, Order Documents, and applicable mandatory law. If you initiate a chargeback or payment dispute in bad faith or in a way that creates material risk for Orionex, Orionex may suspend the affected Service while the issue is reviewed.

Before a Service is terminated or expires, you are responsible for exporting or retrieving Customer Data that you need to keep, using the export features available for that Service. Where a Product Addendum specifies a grace period, Orionex will maintain access to export features during that period.

Retention and deletion rules are described in the Privacy Policy and any applicable Product Addendum. Product-specific rules may override general retention assumptions for the relevant product.

Unless Orionex expressly agrees otherwise in writing, Orionex does not guarantee restoration of deleted Customer Data for any specific account or project. Backup and recovery systems exist for disaster recovery, not as a substitute for your own retention decisions.

If your Service depends on a domain, certificate, cloud account, or third-party infrastructure, your rights may also depend on that third-party service remaining active and in good standing.

Channels for privacy requests are described in the Privacy Policy and any applicable Product Addendum.

If Orionex acts as a Processor for Client Project Data, Orionex may route the request to the relevant Controller or support that Controller in responding, depending on the applicable contract and law.

Deletion, export, or restriction requests may also be affected by legal holds, security review, fraud prevention, tax or accounting obligations, billing disputes, and other retention requirements described in the Privacy Policy, the applicable Product Addendum, or the relevant contract.

Your data-subject rights under applicable data-protection law, including UU No. 27 Tahun 2022 (Pelindungan Data Pribadi) and, where applicable, GDPR, may be exercised independently of the Service termination or offboarding process. Orionex will not delete Personal Data that is the subject of a pending, verified privacy request until that request has been resolved.

You may not use the Services for child exploitation, grooming, abuse, or any other activity that violates child-safety laws or platform rules.

The Services are not intended for users who do not meet the eligibility and age requirements described in Eligibility.

Reports relating to child-safety concerns or urgent safety issues may be sent to safety@orionex.id.

Some Orionex products and workflows rely on Shared Orionex Services such as Orionex Identity and Orionex Pay. Your use of those shared services remains subject to these Terms, the Privacy Policy, and any applicable Product Addendum.

The Services may interoperate with or rely on third-party providers, including hosting providers, email services, payment processors, identity providers, registrars, analytics tools, and AI providers. Orionex does not control every aspect of those services. A current list of service providers, including their typical purposes and locations, is maintained in the Privacy Policy.

Where specific third-party terms govern a feature or transaction, Orionex will identify them in the relevant checkout flow, order document, Product Addendum, or service workflow.

If Orionex offers AI-assisted features:

• AI Output may be probabilistic and may contain errors;
• you remain responsible for reviewing outputs before relying on them;
• you must have the right and legal basis to submit the data you provide to an AI-enabled workflow; and
• Orionex uses API-based integrations with AI providers and has configured those integrations to opt out of provider-side model training for input and output data where such configuration is available.

Unless Orionex expressly agrees otherwise, you should not submit highly sensitive, unlawful, or prohibited data into AI-enabled features or other services in a way that violates law or your obligations to others.

Orionex may update these Terms from time to time.

A change is material if it materially affects your rights, obligations, pricing, or the way a continuing or recurring Service is used.

If Orionex makes a material change, Orionex will provide reasonable prior notice before the change takes effect for the affected Service. Orionex will normally aim to provide at least thirty (30) days' prior notice where practicable, using a reasonable notice method for the affected Service, which may include website notice, email, in-product notice, or updated order documents.

Orionex may provide shorter notice where a change is reasonably required for legal compliance, fraud prevention, security, urgent service protection, or another urgent operational reason.

If you do not agree with a material change, you may stop using or not renew the affected Service before the change takes effect. For a continuing or recurring Service, you may also terminate the affected Service during the notice period in accordance with Term, Suspension, and Termination without early-termination fees caused solely by that material change, provided that any outstanding fees, usage charges, or payment obligations incurred before termination remain due.

If you continue to use the affected Service after a material change takes effect, that continued use will constitute acceptance of the updated Terms to the extent permitted by applicable law.

Non-material changes, including editorial, formatting, clarification, or operational changes that do not materially reduce your rights or materially increase your obligations, may take effect upon posting without prior notice.

This Section does not limit Orionex's right to modify, discontinue, or restructure the Services, or to introduce new terms for new features or new services, provided such actions comply with applicable law and any applicable Order Documents or Product Addendums.

Except as expressly stated in:

• signed Order Documents;
• a service level or support commitment Orionex has agreed in writing; or
• applicable mandatory law,

the Services are provided on an "as available" basis.

Orionex does not guarantee that:

• the Services will be uninterrupted at all times;
• every issue can be corrected immediately;
• every third-party dependency will remain available; or
• Beta Services will continue or operate without defects.

To the fullest extent permitted by law, neither Orionex nor its affiliates, directors, officers, employees, agents, or licensors will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including but not limited to loss of profit, loss of revenue, loss of goodwill, loss of opportunity, loss of data (except to the extent required by applicable data-protection law), business interruption, or cost of substitute services, regardless of the theory of liability and even if Orionex has been advised of the possibility of such damages.

To the fullest extent permitted by law, Orionex's total aggregate liability arising out of or related to a paid Service, whether in contract, tort (including negligence), strict liability, or otherwise, will not exceed the total amount you actually paid Orionex for the specific Service giving rise to the claim in the twelve (12) months immediately preceding the first event giving rise to the claim, unless the applicable signed Order Documents expressly provide a higher liability standard.

For Beta Services or Services provided without charge, Orionex does not apply a separate nominal liability cap under these Terms that would reduce any non-waivable rights you may have under applicable law. The exclusions in Excluded Losses and the mandatory protections in Mandatory Protections still apply.

Nothing in this Section excludes or limits liability that cannot lawfully be excluded or limited under applicable mandatory law, including:

• liability for fraud or intentional misconduct;
• personal injury or death caused by negligence;
• obligations under applicable data-protection law, including UU No. 27 Tahun 2022 (Pelindungan Data Pribadi), that cannot lawfully be limited by contract; and
• other non-excludable statutory rights under applicable consumer-protection or other mandatory law.

To the extent any jurisdiction requires a minimum liability standard that exceeds the cap in Liability Cap for Paid Services, that minimum standard applies for claims arising under the law of that jurisdiction.

This Section is intended to allocate risk in a reasonable and proportionate way for the relevant Service and will be interpreted subject to applicable law, the nature of the Service, and any applicable signed Order Documents.

Orionex is not liable for delay or failure caused by events outside Orionex's reasonable control, including infrastructure failures, internet disruption, government action, natural disaster, pandemic, war, riot, cyberattack, or labor disruption. If a force majeure event continues for more than sixty (60) days, either party may terminate the affected Service.

To the extent permitted by applicable law, you agree to indemnify and hold harmless Orionex and its affiliates, directors, officers, employees, and agents from and against third-party claims, demands, actions, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Customer Data, files, instructions, or other materials you submit that infringe, misappropriate, or violate a third party's intellectual property, privacy, publicity, confidentiality, or contractual rights;
• products, services, websites, or content you publish, sell, host, or distribute using the Services in violation of applicable law or third-party rights; or
• your intentional misuse of the Services or material breach of these Terms that directly causes the third-party claim.

To the extent permitted by applicable law, Orionex will be responsible for third-party claims, damages, losses, and reasonable legal costs to the extent directly caused by Orionex's material breach of these Terms, negligence, willful misconduct, fraud, or failure to comply with applicable data-protection law, subject to the liability limitations in Limitation of Liability. This Section does not create a separate indemnification procedure in favor of you unless Orionex expressly agrees otherwise in applicable signed Order Documents, but it acknowledges Orionex's responsibility under applicable law, including Indonesian consumer-protection law (UU No. 8 Tahun 1999) and data-protection law (UU No. 27 Tahun 2022).

If Orionex seeks indemnification, Orionex will provide reasonable notice of the claim to you. You will cooperate with Orionex in the defense of the claim. Orionex may participate in the defense at its own expense. You may not settle a claim in a way that imposes obligations on Orionex or admits fault on behalf of Orionex without Orionex's prior written Consent.

This Section does not apply to the extent a third-party claim results from Orionex's own service defect, security failure under Orionex's control, fraud, willful misconduct, or breach of applicable law.

These Terms apply from the time you first access or use the Services and continue until terminated.

Orionex may suspend or restrict access where reasonably necessary for:

• breach of these Terms;
• non-payment;
• fraud or security risk;
• urgent legal compliance;
• protection of Orionex, other users, or the Services.

Where practicable, Orionex may give notice before suspension, but Orionex may act immediately if required by law, safety, fraud-prevention, or service integrity concerns.

You may stop using a Service and terminate it in accordance with the applicable Product Addendum, Order Documents, or service workflow. Orionex may terminate a Service if a legal, security, abuse, or payment-related basis justifies termination.

Post-termination data access, retention, export, and deletion are governed by Data Access, Retention, and Service Transition, the Privacy Policy, and any applicable Product Addendum.

Provisions that by their nature should survive termination will survive, including confidentiality, payment obligations, intellectual property, limitation of liability, dispute provisions, and privacy/security obligations that continue by law or contract.

These Terms are governed by the laws of the Republic of Indonesia, unless a signed contract expressly states otherwise.

The parties will first attempt to resolve disputes through good-faith discussion. If a dispute is not resolved, it may be brought before the courts specified in the applicable signed contract or, if there is no such contract, the competent court in South Jakarta.

Nothing in these Terms waives non-waivable statutory or consumer rights. Orionex may seek injunctive or equitable relief where reasonably necessary to protect intellectual property, confidential information, or service security.

These Terms are issued in English and Indonesian. The Indonesian version is accessible at https://orionex.id/id/terms-of-service. In the event of any conflict or inconsistency between the English and Indonesian versions, the English version shall prevail and be the controlling version.

If Orionex designates another official language version as controlling for a specific jurisdiction or use case, Orionex will state that in the relevant document or accompanying notice.

You agree that Orionex may use electronic records and communications for operational, contractual, and evidentiary purposes to the extent permitted by law. Orionex records are not made conclusive or unchallengeable solely by these Terms.

You may not assign these Terms without Orionex's prior written Consent, except where applicable law prevents such a restriction. Orionex may assign these Terms as part of a reorganization, financing, merger, asset transfer, or similar corporate event.

If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in effect. A failure to enforce a provision is not a waiver of that provision.

These Terms do not create rights for any third party except where a third-party provider or authority has rights under applicable law or an applicable contract.

For general legal, compliance, or privacy-related questions about the Services, contact:

PT Orionex Solusi Digital Email: legal@orionex.id Address: Gedung Wirausaha, Jalan H. R. Rasuna Said Kav. C No. 5, Setiabudi, Jakarta Selatan, 12920, Indonesia.

For product-specific contacts, see the applicable Product Addendum.