Privacy Policy

The personal data controller is PT Dewata Artificial Intelligence (Perseroan Perorangan), the Indonesian individual company that operates the DagangkuAI service, based in Denpasar, Bali, Indonesia. The company is officially incorporated and registered with the Directorate General of Legal Administration, Ministry of Law (view certificate). For privacy-related questions or data-subject requests, contact us at gungdeweida8@gmail.com.

We collect the following data on a minimal basis:

• Account data: name, email address, profile photo (from Google OAuth if you sign in with Google).
• Business data: business name, business type, location (city), and time zone you provide during onboarding.
• Transaction data: records of income, expenses, products, and categories you enter through chat or forms.
• Conversation data: the contents of your chat with the AI, used to provide relevant context and answers.
• Technical data: IP address, device type, browser, and access logs for security and aggregate analytics.

Your data is processed for the following purposes:

• Providing transaction recording and financial analysis services.
• Personalizing AI responses based on your business context.
• Processing subscription payments via Midtrans.
• Sending important notifications (payment confirmations, account changes) by email.
• Maintaining service security, preventing misuse, and resolving technical issues.
• Complying with legal obligations and lawful requests from authorities.

We do not use your data to train third-party AI models, and we do not sell your data to anyone.

Your data is processed based on the consent you give when registering and using the service, and to fulfill the contractual obligations between you and DagangkuAI, as regulated under the PDP Law.

Account and transaction data are stored for as long as your account is active. There are two ways to delete it, both in Settings:

• Delete Business Data: the data is marked deleted and you can still restore it for 30 days. After that it is permanently deleted. Your login account remains.
• Delete Account Permanently: the account and all of its data are deleted immediately, with no restore window.

The exception is data we must retain for legal compliance. Payment records that form part of our tax bookkeeping are retained for the period required by tax regulations, which is longer than the personal data deletion described above.

AI chat history has its own limit: on the free plan it is deleted automatically after 90 days of inactivity, and on paid plans after 1 year. You can also delete your entire chat history at any time from Settings.

In accordance with the PDP Law, you have the right to:

• Know the type and purpose of the processing of your data.
• Access and obtain a copy of your data (data portability).
• Correct inaccurate data.
• Delete your data or withdraw your consent at any time.
• Restrict the processing of your data in certain circumstances.
• Object to automated processing.
• File a complaint with the supervisory authority.

To exercise these rights, send a request to gungdeweida8@gmail.com. We will respond within the time limit set by the Personal Data Protection Law. Do not send data deletion requests through WhatsApp; use the email above so your request is recorded and handled properly.

We use the following sub-processors to run the service. Each one processes data only for the purpose listed:

• Supabase (database & authentication), servers in Singapore.
• Vercel (hosting & networking). Our application functions run in the Singapore region.
• Vercel AI Gateway (routing requests to AI model providers).
• Google, Gemini models (AI processing for the “Cepat” model, which is the default).
• Anthropic, Claude models (AI processing for the “Pintar” and “Ahli” models).
• Midtrans (payment gateway), regulated by OJK Indonesia.
• Resend (transactional email).
• PostHog (product analytics), servers in the United States.
• Sentry (application error monitoring).
• Meta (Facebook), advertising-effectiveness measurement via the Meta Pixel. On by default, and can be turned off with the Tolak (Reject) button on the cookie banner.

AI processing happens outside Indonesia. We never sell your data. We access models through the providers’ business APIs, which under their terms of service do not use customer inputs to train their models.

We implement technical and organizational security measures in line with industry standards:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Row Level Security on the database: each user can only access their own data.
• Authentication via OAuth 2.0 and JWT with a limited validity period.
• Webhook signature verification for payments.
• Logging of security events: account deletion, financial data reset, chat-history deletion, and data export.

This service does not have two-step verification yet. We are working on it. Until then, please keep the Google account you sign in with secure.

If a data breach occurs that could harm you, we will notify you and the relevant authorities within no more than 72 hours, in accordance with the standards of the PDP Law.

We use essential cookies for session authentication and display preferences (dark mode, language). We also use third-party advertising-measurement cookies (the Meta Pixel) so we can tell which ads bring people to sign up. Those advertising cookies are on by default when you open the site. Click Tolak (Reject) on the cookie banner to turn them off at any time, and tracking stops immediately. You can also manage cookies through your browser settings.

Primary data is stored on Supabase servers in the Singapore region. Our application functions also run in the Singapore region.

When you use the AI features, the contents of your conversation are sent to model providers (Google and Anthropic) that process them outside Indonesia, and the answer is returned and stored in Singapore. The full explanation is on our security page.

Our service is intended for users aged 18 years and over. We do not knowingly collect data from minors. If you become aware that this has occurred, contact us for immediate deletion.

We may update this policy from time to time. Significant changes will be notified by email or in-app notification. The latest version is always available on this page.

Questions, complaints, or requests related to personal data can be sent to:

See also our Terms & Conditions.