DesainerkuThis policy describes how Desainerku.idn, based in Yogyakarta, Indonesia, handles personal data as the data controller. It covers our website, guest and account orders, Customer Service, and optional design features. Contact [email protected] for privacy questions or requests.
Data we collect
- Account and profile. We process your name, verified email, date of birth and country or region where required for your profile, optional photo, saved delivery addresses, verification and session records, and communication preferences. If you use Google sign-in, we receive your verified email and basic profile information such as your name.
- Order and delivery. We collect the buyer’s or recipient’s name, email, WhatsApp number, delivery address and selected courier, plus product specifications, order number, and status. Order history in an account matches confirmed website orders to the verified email address.
- Artwork and support. We receive briefs, brand names, notes, files, reference images, and messages that you submit. The contact form prepares a draft in your email application. Your message reaches us when you send it from that application. If you contact us on WhatsApp, we receive the information you choose to share there.
- Payment and credits. We process the amount, selected payment method, transaction and review status, and any proof you upload. A receipt can show the payer’s name, bank, account details, transaction reference, and date. A preview top-up may require the payer’s name and WhatsApp number, and we keep the associated wallet balance and credit history.
- Technical data. Hosting, security, and account functions may process your IP address, session identifiers, verification attempts, and request or error logs to operate the website and prevent misuse.
Provide the required account or checkout fields for the service you request. Your profile photo, marketing choice, and optional design features are separate choices. If you share a recipient’s data, use only what is needed and obtain permission where required. For a project involving a child’s personal data, we require consent from a parent or legal guardian before processing it.
Why we use your data
- To provide the service. We use data to verify your account, prepare quotes, handle checkout, verify payment, create and approve designs, produce and deliver orders, show order progress, and answer requests. This supports our agreement with you or steps you request before entering it.
- To meet legal obligations. We retain records needed for bookkeeping, tax, electronic transactions, complaints, and other duties under applicable law.
- To operate and protect the site. We use necessary technical and transaction information to keep the site working, detect misuse, manage incidents, and resolve disputes, taking your rights into account.
- With your consent. We use consent for optional marketing and other processing that requires it. You can withdraw your consent by emailing us. Messages needed for orders, payment, account verification, or support may still be sent for those purposes.
AI-assisted support and design
When AI-assisted Customer Service is enabled, a configured KoboiLLM service may process messages and relevant text history or a summary from that conversation. Support image attachments are stored for review. The current AI chat uses text context and may include a count of attached images.
When you request an AI design or Live Preview, we send the brief, relevant product options, and the reference images needed for that request to the configured service, such as KoboiLLM for Design Studio or OpenAI for Live Preview. Generated results, job information, and credit activity may be stored so you can retrieve the result and we can handle support or credit issues.
Use the regular upload and ordering flow or contact our team if you prefer to discuss the project directly. Include personal data in a prompt or design file only when it is needed and you have authority to share it.
How long we keep data
- Account details. We keep your profile and saved addresses while the account is active, subject to deletion requests and legal obligations. Deleting your account removes the account and its associated profile and sessions. Order, payment, and complaint records can be retained separately.
- Checkout and design files. Unpaid checkout without submitted proof expires after 24 hours and is cleared by routine cleanup. Customer design files uploaded to our checkout file storage are scheduled for deletion 60 days after upload. Copies submitted through other channels follow the retention for those channels.
- Support. Ordinary guest chat sessions start with a 30-day expiry. Expired conversations without associated orders are eligible for cleanup. Conversations linked to an order or top-up, and records needed for an open case, may be kept longer.
- AI. Design Studio generation jobs are available for seven days and scheduled for cleanup after expiry. A result attached to an order follows that order’s file handling. Live Preview wallet, proof, and job records may remain available to support the feature, verification, and dispute handling. Provider copies may follow separate retention rules.
- Required records and logs. Where required by law, financial records such as bookkeeping and payment records are kept for 10 years, and other required e-commerce records such as order and complaint records for five years. Operational logs follow hosting and security settings. We keep specific records longer where necessary for legal obligations, open complaints, or disputes.
How we protect data
We use access controls, verification and session safeguards, and restrictions on staff tools and file access. Website order lookup uses the order number to show product details and progress. Keep that number and verification codes private. When uploading payment proof, share enough to verify the transaction and omit unrelated information.
Your rights and choices
Under applicable law, you can ask what personal data we hold, request access or a copy, correct inaccurate information, withdraw consent, and request restriction, cessation, or deletion. You may also exercise rights to data portability and object to decisions based solely on automated processing where applicable. Some records may need to be retained for a legal duty or to resolve a dispute.
You can update profile details or saved addresses and request account deletion in Profile where available. To exercise privacy rights, email [email protected]. Describe what you want us to review. We may ask for information needed to verify your identity and will respond within the applicable legal deadlines.
If a personal data breach triggers a notification duty, we will notify affected individuals and the relevant authority in writing within the applicable statutory period, which is 72 hours under Indonesia’s Personal Data Protection Law.
Contact and policy updates
For privacy or account questions, use [email protected] or Contact Us. We publish updates with a new effective date and notify you of material changes when required. If a new use requires consent, we will request it before that processing starts.