Privacy Policy
Last updated: June 1, 2026
1. Information We Collect
We collect: (a) Account information: name, email, company name, and role when you register. (b) Usage data: page visits, feature usage, and interaction logs. (c) Conversation data: messages between you and your customers via the chat widget. (d) Technical data: IP address, browser type, device information, and cookies. (e) Payment information: processed securely through third-party payment providers.
2. How We Use Your Information
We use your information to: provide and improve the Service, process your transactions, send service-related notifications, provide customer support, analyze usage patterns to improve features, comply with legal obligations, and protect against fraud. We do NOT sell your personal data to third parties.
3. Data Storage & Security
Your data is stored on secure servers in Indonesia. We implement industry-standard security measures including: SSL/TLS encryption for data in transit, encrypted database storage, regular security audits, access controls and authentication, and automated backup systems. We comply with UU PDP (Undang-Undang Pelindungan Data Pribadi) No. 27 Year 2022.
4. Data Sharing
We may share your data with: trusted service providers who assist in operating the Service (hosting, email, analytics), law enforcement when required by law, and in the event of a merger or acquisition. All third-party providers are bound by confidentiality agreements. We will never share your customer conversation data with third parties for marketing purposes.
5. Your Rights
Under UU PDP, you have the right to: access your personal data, correct inaccurate data, delete your data (right to be forgotten), restrict processing of your data, data portability (export your data), withdraw consent at any time, and file a complaint with the relevant authority. To exercise these rights, contact our Data Protection Officer at dpo@kinexa.id.
6. Cookies & Tracking
We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand usage patterns. You can manage cookie preferences through your browser settings. The Liqaa chat widget uses a session identifier to maintain conversation context for your website visitors.
7. Account Deletion & Data Retention
You have the right to request deletion of your account and personal data at any time (UU PDP Article 8). Upon request, a 30-day grace period applies during which you can cancel and restore your account. After the grace period, your personal data (name, email, phone, profile) is permanently anonymized. Invoice and billing records are retained for 5 years per Indonesian tax law (UU KUP). Audit logs are retained per ISO 27001 compliance requirements. Conversation data associated with your account is deleted after the grace period.
8. Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON). Your data export includes: account profile, subscription history, invoices, application access records, device and session history, and agreement acceptance records. You can request a data export through your account settings at any time.
9. Marketing Opt-out
You may opt out of marketing and promotional communications at any time through your account settings. Transactional emails (billing notifications, security alerts, service changes, and trial expiration reminders) cannot be opted out as they are essential to service delivery. Your opt-out preference is applied immediately and persists until you choose to opt back in.
Data Protection Officer: dpo@kinexa.id | General inquiries: privacy@kinexa.id