Privacy Policy

We collect only the data needed to operate the services:

• Signing in or signing up with Google. Your name, email address, and profile photo from your Google account (the openid, email, and profile permissions). We do not access Gmail, Google Drive, contacts, calendars, or any other Google data.
• Signing up with email and password. Your name and email address. Passwords are stored as hashes (one-way encryption) by our authentication system, so nobody can see them, including the AI IDEA team.
• Company accounts (by invitation). The name, email address, and organization name entered by an AI IDEA admin.
• Contact form. Your name, email address, company name (optional), needs, message, and browser information (user agent) to prevent spam.
• Dashboard use. Data you create while using the services, such as learning progress, selected workflows, submitted requests, and your language preference.
• Technical data. A session cookie that keeps you signed in, a language preference cookie, and standard server logs from our hosting provider (such as IP addresses and access times).

• To create, authenticate, and secure your account.
• To display your dashboard, learning materials, and progress.
• To contact you about your requests, consultations, or important changes to the services.
• To prevent abuse, fraud, and unauthorized access.
• To improve the services based on general usage patterns.

We do not sell personal data and do not use it for third-party advertising.

Data from your Google account (name, email address, profile photo) is used only to create and display your AI IDEA account. It is not shared with other parties, not sold, and not used for advertising or to train AI models.

AI IDEA’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke AI IDEA’s access at any time in your Google account settings.

To operate the services, data is processed on our behalf by the following providers:

• Supabase — database and account authentication.
• Vercel — website and application hosting.
• Google — sign-in with a Google account.

These providers’ servers may be located outside Indonesia. We only use providers that apply appropriate security standards. We may also disclose data where required by applicable law.

We use cookies that are necessary to keep you signed in, to keep the sign-in process secure, and to remember the language you choose. We do not use advertising or third-party tracking cookies. If cookies are blocked, signing in to the dashboard will not work.

Data is transmitted over encrypted connections (HTTPS). Access to data in the database is restricted per user, so each account can read only its own data.

We keep data for as long as your account is active or as long as needed for the purposes above, and delete it when you request the deletion of your account, unless the law requires us to keep it longer.

Under Indonesian Law No. 27 of 2022 on Personal Data Protection, you have the right to:

• Obtain information about, and a copy of, your personal data.
• Correct inaccurate data — your name can be changed directly in the Settings menu.
• Request the deletion of your account and personal data.
• Withdraw your consent to data processing.

To exercise these rights, please contact us using the details at the end of this page.

AI IDEA services are intended for users aged 18 and over. Users under 18 may use the services only with the consent of a parent or guardian.

We may update this policy from time to time. The date at the top of this page shows the most recent update. For important changes, we will notify you by email or through a notice in the dashboard.

Privacy questions or requests may be sent through the contact form at ai-idea.xyz.