Privacy Policy

Updated: 2026-10-14T00:00:00.000Z

Draft. Must be reviewed before release. Controller details […] must be filled in.

1. Data controller

[BUSINESS / OWNER NAME], [ADDRESS], contact: [EMAIL].

2. Data we collect

• Account: email address, password (stored as a hash by Supabase Auth), sign-up time.
• Transactions: product, duration, amount, status and payment reference. We do not store card or e-wallet numbers; Midtrans handles those.
• Technical: basic server logs (IP address, browser type) for security and troubleshooting.

3. Purposes

Running your account and Premium access, processing payments, sending transactional email (confirmations, expiry reminders), preventing abuse, and meeting legal obligations.

4. Third parties

Supabase (authentication and database), Midtrans (payments), Cloudflare (hosting and security), and a transactional email service [SERVICE NAME]. We do not sell personal data.

5. Retention

Account data is kept while the account is active. Transaction records are kept as required for accounting and tax.

6. Your rights

You may request access, correction or deletion of your personal data by contacting us. Deletion does not cover data we are legally required to keep.

7. Cookies

We use local storage only for your login session. There are no advertising or third-party tracking cookies.

8. Changes

Policy updates will be posted on this page with a new date.