Privacy Policy
1. What we collect
Website visitors: the contact details and needs you send us through the website form, by email or by message, and connection data such as the IP address your browser sends when you visit. No advertising trackers, no sign-up, and never card details, ID documents or ERP keys.
Clients: users’ names, emails and login records; journals, invoices, payments and similar data provided by file or read-only API, plus the questions asked and answers given; plan, amount and payment status. Card details are handled by the payment provider; we never see them.
2. What we use it for
Enquiries: only to reply and arrange a demo; never for marketing. Business data: only to provide the service to you. Usage records that contain no business content (such as question counts, login times and response times) are used for billing, security and improving the service. We never use your data to train public models or make it available to other clients. We do not share your information with third parties, except the service providers in section 4 that are needed to run the service, and where the law, a court or a regulator requires it.
3. How ERP data is handled
Read permission only. Figures are computed by our own code. Where a language model reads questions or phrases answers, it is a model we host ourselves on our own servers, with no calls to external model APIs; even so, real customer, vendor and staff names are replaced with codes first, while amounts, dates and currencies stay as they are. Each client’s data is stored separately.
4. Service providers and data location
Servers and storage: the software and clients’ business data are kept on servers we own and manage, located in Indonesia.
Network: access to the website and the software passes through Cloudflare’s network for encryption and protection; Cloudflare processes connection data such as IP addresses.
Language models: open models from DeepSeek and Qwen, hosted by us on our own servers. We do not use these model providers’ external APIs, and no data is sent to them.
Payments: we are applying to use Lemon Squeezy for online payments; it is not active yet. Once it is, card and other payment details are handled directly by Lemon Squeezy, and we receive only the order and payment status.
Email: website demo requests are forwarded by FormSubmit to our Gmail inbox (Google); support email is sent and received through Gmail and Zoho Mail.
Fonts: the website’s fonts are provided by Google Fonts, so your browser requests the font files from Google when you open a page.
Cloudflare, Google, FormSubmit and Zoho may process this information outside Indonesia. We give each provider only what it needs to perform its service.
5. Retention
Enquiries: 12 months after the enquiry closes. Business data: during the period, plus 30 days so you can resume, then deleted or exported at your request. Logs and backups: rolling 30 days. Where the law requires longer retention, we keep records for as long as it requires.
6. Deletion, export and security
You can ask in writing to export or delete your business data; we usually act within 7 working days, except order and financial records we must keep by law. We take reasonable technical and organisational measures to protect data, including encryption in transit, encrypted storage of ERP credentials, and access limited to the people who need it to provide the service, with access logged. No system can be guaranteed completely secure; if a security incident affects your data, we will notify you as the law requires.
7. Your rights
Under applicable law, including Indonesia’s Personal Data Protection Law, you can ask to see, correct or delete personal data we hold about you, or withdraw consent. We may need to verify your identity first, and after consent is withdrawn or data is deleted we may be unable to continue the related service. Contact [email protected].
8. Changes to this policy
We may update this policy; new versions are published on this website with their version and take effect when published.