Introduction
Welcome to REPYST (“we”, “us”, “our”), operated from Surabaya, Indonesia. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, mobile web experience, and AI assistant products (collectively, the “Services”). By accessing or using the Services, you agree to this Policy. If you do not agree, please discontinue use.
Information We Collect
We collect information in three primary ways:
- Information you provide directly: name, email, password, billing details (processed by trusted payment partners), documents/files you upload (PDF, CSV, etc.), prompts/chats, and feedback.
- Information collected automatically: device & browser info, OS, IP address, approximate location, pages visited, feature usage, and crash/diagnostic logs.
- Information from third parties: if you connect external services (e.g., cloud storage), we receive only the data required to enable that integration, according to permissions you grant.
How We Use Your Information
- Operate, maintain, and improve the Services and user experience.
- Process your prompts/files and return AI‑generated results.
- Personalize content and remember preferences.
- Send service updates, security alerts, and respond to support requests.
- Analyze usage trends to build new features and ensure reliability.
- Comply with Indonesian laws and enforce our Terms of Service.
Legal Basis & Compliance (Indonesia)
We process personal data in accordance with Indonesian regulations, including but not limited to:
- Law No. 27 of 2022 on Personal Data Protection (UU PDP).
- Law No. 11 of 2008 on Electronic Information and Transactions (UU ITE) and its amendments, and Government Regulation No. 71 of 2019 (PP 71/2019).
Our legal bases include:
- Consent: When you sign up, upload data, or enable integrations, you consent to processing for those purposes.
- Contractual necessity: Processing needed to provide and maintain the Services you request.
- Legitimate interests: Improving security, preventing fraud, and enhancing features—balanced with your rights.
- Legal obligations: Fulfilling duties required by Indonesian law.
Data Retention
We keep personal data only as long as necessary to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. You can request deletion; we will comply unless retention is required by law or legitimate business purposes.
Security
We implement administrative, technical, and physical safeguards to protect your data. However, no method of transmission or storage is fully secure; we cannot guarantee absolute security.
Your Rights & Choices
Under UU PDP and related Indonesian laws, you may have the right to:
- Access and obtain a copy of your personal data.
- Correct or update inaccurate data.
- Delete or anonymize data in certain circumstances.
- Withdraw consent for processing based on consent.
- Delay or restrict specific processing activities.
- Complain to the Indonesian data protection authority once formally established.
To exercise these rights, contact us via the email below. We may verify your identity before fulfilling requests.
Children’s Privacy
Our Services are not intended for individuals under 13 years old (or under 18 without parental/guardian consent). We do not knowingly collect data from children. If we discover such data, we will delete it.
International Transfers
Your data may be stored or processed outside Indonesia. By using the Services, you acknowledge and consent to these transfers. We take reasonable steps to ensure your data receives adequate protection in line with Indonesian law and industry standards.
Changes to This Policy
We may update this Policy from time to time. We will revise the “Last updated” date and, if changes are material, notify you via email or in‑app notice.
Contact Us
Questions or requests? Contact Us
REPYST
Surabaya, East Java, Indonesia