Rekomen AI · Legal
Privacy Policy
What personal data Rekomen AI collects, why, who processes it, how long we keep it and your rights under UU PDP No. 27 of 2022.
1. Controller
PT REKOMEN D TEKNOLOGI, Jl. Tukad Balian No. 99x, Sidakarya, Denpasar Selatan, Kota Denpasar, Bali 80227, Indonesia. Questions or requests: [email protected].
2. What we collect
- Free check: business name, business type, area, category, the email or WhatsApp number you give, language, and your IP address (to stop abuse).
- Check results: the score, public information we found about the business and the AI answers we received.
- Agency accounts: name, email, password (stored only as a secure hash), agency brand details, area, languages, payout details, certification answers and job messages.
- Marketplace orders: what was ordered, payment status and messages between customer and partner (contact details in messages are hidden).
3. Why we use it
- To run the check and send you the result (performing the service you ask for).
- To follow up once about your result, and to run the agency platform and marketplace (contract and legitimate interest).
- To prevent abuse and keep the service secure (legitimate interest).
- To meet legal duties such as tax records (legal obligation).
We do not sell personal data.
4. Who processes it for us
- Cloudflare: hosting, database and bot check.
- OpenAI and Google (Gemini): we send the business name, type, area and category to get AI answers. We do not send your email or WhatsApp number.
- Resend: sending result emails.
- WhatsApp (Meta): only when you choose WhatsApp to receive your result or contact us.
- Partner agencies: when you use a partner’s checker, or when a marketplace job is matched to a partner, that partner receives what it needs for the job.
These services may store data outside Indonesia. We use providers that protect data to a standard at least equal to UU PDP.
5. How long we keep it
Check results and contact details: up to 3 years after your last check or order. Agency account data: while the account is open and up to 5 years after, as tax and contract law require. You can ask us to delete earlier.
6. Your rights
Under UU PDP you may ask to see, correct, complete, update or delete your personal data, withdraw consent, object to processing and ask for a copy. Write to [email protected]; we answer within 3 x 24 hours as UU PDP requires and act on the request as the law sets out.
7. Cookies
We use only necessary cookies: a login cookie for agency accounts, a preview cookie for our own team and the bot check. We do not use advertising or tracking cookies.
8. Security and breaches
Data travels over encrypted connections and passwords are hashed. If a breach puts your data at risk, we tell you and the authorities within 3 x 24 hours, as UU PDP requires.
9. Children
The service is for businesses and is not meant for children.
10. Changes
The date at the top shows the current version. Published in Bahasa Indonesia and English; if they differ, the Bahasa Indonesia version applies.