Privacy Policy

1Data We Collect

Account data

• Name and email address.
• Password, which is stored only as a hash and never in plain text.

Transaction data

• History of top ups, AI credit conversions, purchases, and service renewals.
• Invoices and QRIS payment notification data used to match payments.

Domain owner data

• The name, email, phone number, and address you enter when registering a domain, as required by the registry.

API usage data

• Request time, model, token count, cost, and duration for each request.
• Our panel does not store the content of prompts or model responses.

Technical data

• IP address and last login time.
• Records of important account activity, such as API key creation and settings changes.
• Image attachments you upload to support tickets.

2Use of Data

Your data is used to:

• Provide, manage, and improve the services.
• Process payments, balance deductions, and billing.
• Send service-related information, such as order status, renewals, and suspensions.
• Answer questions and requests for help.
• Detect and prevent misuse of the services.
• Comply with legal obligations.

3Storage and Security

• Data is stored on servers with restricted access and encrypted connections (HTTPS).
• Passwords are stored as hashes. Sensitive credentials, such as third-party service keys, are stored encrypted.
• API keys are shown only when created. We store only their hash, prefix, and last four characters.
• Forms are protected with CSRF tokens, and login sessions end when the password is changed.
• Data is kept for as long as the account is active or as long as needed to meet legal and bookkeeping obligations.

4Data Within Your Services

5Sharing Data with Third Parties

We do not sell your personal data. Data is shared only as far as necessary with:

• Infrastructure providers and reseller partners, to create and manage the VPS, domains, and hosting you order.
• Domain registries and registrars, for registering and managing domains under the applicable rules.
• AI model providers and Daily API pass partners, which receive the content of API requests for processing.
• Banks or e-wallet providers, limited to QRIS payment data.
• Law enforcement authorities, when required by regulation or court order.

6Cookies and Browser Storage

• We use a session cookie to keep you signed in. This cookie is required for the panel to work.
• Display preferences, such as dark mode and sidebar position, are stored in your browser.
• We use two first-party analytics cookies (sh_vid and sh_sid) to count visits to the public pages anonymously. They hold only a random code, contain no personal data, and are not shared with anyone. Your IP address and browser identification are not stored, and browsers with Do Not Track or Global Privacy Control enabled are not recorded. Visit data is deleted automatically after about 13 months.
• We do not use third-party tracking cookies for advertising.

7Your Rights

As the data owner, you have the right to:

• View your account data on the Account page in the panel.
• Update your data, including changing your password, through the panel or by contacting support.
• Request deletion of your account and personal data through a support ticket, subject to the obligation to retain transaction records.
• Request a copy of your personal data by contacting the support team.

8Policy Changes

• This policy may be updated at any time, and the latest version is always available on this page.
• Changes take effect upon publication. By continuing to use the services, you are deemed to accept the updated policy.

9Legal Basis

This policy follows the laws of the Republic of Indonesia, including Law Number 27 of 2022 on Personal Data Protection and its implementing regulations.