1What we collect
Account data: name, email address, password (stored as a hash, never as text), and your language preference.
Billing data: invoices, payments and balance history. Your card or bank details do not pass through our systems — Midtrans handles those.
Usage data: which services you run, their size and location, and technical metrics such as CPU, memory and traffic.
Technical records: IP address and time when you sign in or use the console, used for security and rate limiting.
Your app's content: we operate the storage where it lives, but do not read it except where needed for support or a security investigation — and every such access is logged.
Support conversations: the messages you send our team and their attachments.
2Why we use it
To run the service you bought, bill it, tell you when something needs your attention, prevent abuse, and meet legal obligations including tax bookkeeping.
We do not sell your data, and we do not use it for advertising.
3Who else receives it
Midtrans — payment processing.
Email provider (such as Amazon SES or Mailgun) — verification email, invoice reminders and alerts.
Infrastructure providers hosting our servers.
Each receives only what its job requires.
4How long we keep it
Account data is kept while your account exists.
The data volume of an ended service is held for 7 days, then permanently deleted.
Billing records are kept for as long as tax and accounting rules require.
Technical records (access logs, audit trail) are kept as long as security needs require.
Support conversations are kept as long as needed to handle your request and meet legal obligations, then deleted or anonymised.
5Your rights
You may ask for access to your personal data, correction, deletion, withdrawal of consent, and a machine-readable copy.
Write to [email protected] from your account's email address. We answer within 14 working days.
Some data cannot be deleted while the law still requires us to keep it — billing records in particular.
6Security
Passwords are stored hashed. Sessions can be revoked immediately. Staff accounts require two factors, and every staff action on a customer account is recorded with its reason.
Each customer service runs apart from its neighbours: its own network, storage and share of the machine.
If a personal data breach affects you, we notify you and the authorities as the rules require.
7Contact
Questions or complaints about personal data: [email protected].