Your Personal Data Rights

This page summarizes how to exercise your rights under Law No. 27 of 2022 on Personal Data Protection (UU PDP). The full details — what data we collect, who receives it, transfers abroad, how long we keep it, and security — are in our Privacy Policy.

Our role

• Account and platform usage data: TanpaKode is the data controller.
• Customer data in the apps you build: You (the app owner) are the data controller; TanpaKode is the processor that handles it on your instructions to run that app. Your app's customers should contact you. On your app's manager page (/__tk/pengelola) you can see the list of customer accounts, download one customer's data, and delete their account and data (the account disappears immediately and the data is permanently removed after 30 days); other records that only mention that customer are not deleted and you need to review them yourself. For requests you can't handle yourself, we will help.

Rights you can exercise

• Access and receive a copy of your personal data in a common format.
• Correct or update inaccurate data.
• Request deletion of your data or an end to processing, and withdraw your consent.
• Request a delay or restriction of processing.
• Object to automated decisions (for example an automatic rejection by the Content Policy checker, or a suspension imposed by the system) and ask for review by a person. To appeal an app or account suspension, use the banner in Studio or on the dashboard.

What you can do yourself

Sign in, then open the Account page (the settings icon on the dashboard):

• Download my data — a single ZIP file (JSON and CSV) with your profile, credit and payment history, conversations and app list, uploaded files, sign-in session history, and moderation and appeal records. Limited to once per hour.
• Update your profile — your name changes right away; your email changes after you confirm through the link sent to the new address (your current password is required), and the old address is notified.
• Delete your account — with your password and a confirmation phrase; this cannot be undone. Transaction records are kept without your name and email for as long as regulations require, moderation records are kept as evidence, and any remaining credit balance is forfeited. Details are in section 6 of the Privacy Policy.

You can also delete projects from the dashboard and save a copy of an app's code and data with the "Save a copy" button.

By email

For other rights (for example withdrawing consent, restricting processing, or objecting to an automated decision) and for suspended accounts (such accounts can still download their data on the Account page):

1. Send an email to [email protected] from your registered email address, with the subject "Personal Data Request".
2. State which right you want to exercise and the related project, if any.
3. We may ask you to confirm your identity; we will never ask for your password.
4. We respond within 3 x 24 hours (72 hours) of receiving a complete request, and explain the reason and the estimated time if it takes longer to resolve.

If a data protection failure occurs

We will notify the affected data subjects and the competent authority in writing within 3 x 24 hours (72 hours), stating what data was exposed, when and how it happened, and the steps taken to handle and recover from it.

Good to know

• Do not enter sensitive data into the chat. Details on how data is processed are in the Privacy Policy.
• Every staff access to your account data, deletion, and data download is recorded in an audit trail that has no edit or delete function in the app; emails and IP addresses in server logs are masked. Details are in the Privacy Policy.
• The security measures we actually apply are described as they are in the Security section of the Privacy Policy.