Privacy policy

Who is responsible

The controller of your personal data (pengendali data pribadi) is Inazda, a software studio run by Muhammad Rizqan Nur Adjie Adzani in Banjarbaru, South Kalimantan, Indonesia. For anything about your data, write to [email protected].

What we collect

When you buy a product

Checkout is handled by a payment provider (currently Mayar). The provider collects your payment details under its own privacy policy and sends us the order: your name, email address, the product and licence tier, the amount, the date and the order number, and sometimes your country and the type of payment method. We don't receive your full card, bank account or e-wallet numbers.

When you write to us

Your email address, name, message and anything you attach, for example a brief for a Studio project.

When you visit the site

• Cloudflare Web Analytics. We count visits with Cloudflare Web Analytics, which is cookieless and doesn't build a profile of you. It reports totals such as page views, referring sites, browser type and country.
• Hosting. The site is served by Cloudflare. Like any web host, it processes technical data such as your IP address to deliver pages and protect the site from abuse. Cloudflare may set a strictly necessary security cookie if it needs to tell people from automated traffic.
• Your browser's storage. The site remembers your theme (light, dark or system), your cart and whether you paused the hero video, in your own browser's local storage. That stays on your device; we never receive it.

What runs only in your browser

• Studio scope builder. Your choices are worked out on the page and turned into an email draft that you decide whether to send. Nothing is sent to us until you send that email yourself.
• Computer vision demo. The detection model runs on your device. The photo you choose is read locally and never uploaded. To run, the demo downloads the model files from our site and the TensorFlow.js library from the jsDelivr CDN; like any download, that request reaches the CDN, but your image does not.

We don't use advertising trackers, social media pixels or third-party fonts.

Why we use it

Under UU PDP we need a lawful basis for each use. Ours are:

• To fulfil your order or answer your request (performing a contract, or steps you asked for before one): delivering files, resending downloads, support, refunds, and Studio proposals and projects.
• To meet legal obligations: keeping sales records for tax and accounting.
• Legitimate interests: keeping the site secure and understanding, in totals, which pages people use.
• Consent, if we ever offer something optional such as a newsletter. You can withdraw consent at any time.

We don't sell personal data, and we don't use it for automated decisions about you.

Who we share it with

• Our payment provider (currently Mayar), to take payments and issue refunds.
• Cloudflare, which hosts the site and provides the cookieless analytics.
• Our email provider, which stores the messages sent to [email protected].
• Authorities, only when Indonesian law requires us to.

Some of these providers process data outside Indonesia. When that happens we rely on providers that protect personal data to a standard at least equal to UU PDP, as the law requires for transfers abroad.

How long we keep it

• Order records: as long as Indonesian tax and accounting rules require, currently up to 10 years.
• Emails: up to 2 years after our last message, unless they belong to an order, refund or project record, which follows that record.
• Analytics: only as totals, kept by Cloudflare under its own retention rules.

When data is no longer needed, we delete it or make it anonymous.

Your rights under UU PDP

You have the right to:

• get clear information about how your data is used (this page);
• see and get a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• have your data deleted or destroyed, unless the law requires us to keep it (for example, order records for tax);
• withdraw consent you gave;
• object to, or ask us to pause or limit, how we use your data;
• receive your data in a common format and have it sent to another controller, where it applies;
• object to decisions made only by automated processing (we don't make any);
• claim compensation if your data is used in breach of the law.

To use any of these rights, email [email protected]. We may ask you to confirm it's you, for example by writing from the email address on your order. We answer within 3 × 24 hours, as UU PDP sets for most requests, and tell you if a request needs longer or can't be met and why.

If you're not happy with our answer, you can complain to Indonesia's personal data protection authority, or to the Ministry of Communication and Digital Affairs (Komdigi) until that authority is in place.

Security and breaches

We keep the data we hold to a minimum and limit access to the people who need it to serve you. If a breach puts your personal data at risk, we will tell you and the authority in writing within 3 × 24 hours of finding out, as UU PDP requires, with what happened and what we are doing about it.

Children

The site isn't aimed at children. If you are under 18, please ask a parent or guardian to buy on your behalf. If you think a child has sent us personal data, write to us and we'll delete it.

Changes to this policy

When we change this policy, the version number and effective date at the top change too. If a change affects how we use data we already hold, we'll tell people affected by email where we can.

Contact

[email protected]. Inazda, Banjarbaru, South Kalimantan, Indonesia.