Kebijakan Privasi

1. Definitions

• "User" means any individual or legal entity that accesses or uses the Services of Tenta.id.
• "Personal Data" means any information relating to an identified or identifiable individual.
• "Services" means all digital products, features, systems, integrations, artificial intelligence solutions, and software platforms provided by Tenta.id.
• "Third Parties" means entities outside Tenta.id that support the Services, including but not limited to cloud providers, AI model providers, CDN services, payment gateways, and integration platforms.
• "End-User Data" means data belonging to the User's customers that flows into Tenta.id systems through integrated third-party platforms.

2. Information Collected

2.1 Personal Data Provided by User

Tenta.id may collect Personal Data, including but not limited to:

• Name, email address, phone number, and business information.
• Account information (username, encrypted password, API tokens, and integration credentials).
• Transactional information relating to User's subscription and use of Tenta.id.

2.2 Technical and Usage Data

Collected automatically for operational, security, and system improvement purposes, including:

• IP address, device information, operating system, browser type.
• Log activities, cookies, session identifiers, and other tracking technologies.

2.3 Data from Integrated Platforms

Upon connecting third-party accounts, Tenta.id may collect:

• Customer WhatsApp numbers.
• Customer names.
• Message content, metadata, timestamps, and conversation history.
• Media files such as photos, videos, and documents.
• Customer labels/tags and CRM-related information.

2.4 Payment Data

• Subscription history, payment records, and invoice information.
• Tenta.id does not store credit card numbers or other highly sensitive financial data.

3. Legal Basis for Processing

Tenta.id processes Personal Data based on:

• Explicit consent from the User.
• Contractual necessity to deliver the Services.
• Legitimate interests in maintaining and improving the Services.
• Compliance with legal obligations.

4. Data Processing for Artificial Intelligence (AI)

Tenta.id processes data for AI-related purposes, including:

• Training a customized AI model exclusively for the User.
• Generating automated responses to the User's customers.
• Improving AI performance based on usage patterns.

5. Purpose of Data Use

Personal Data and End-User Data are used to:

• Provide, operate, and enhance the Services.
• Store customer conversations and integration activities.
• Run automation features, broadcast tools, and campaign systems.
• Conduct audits, ensure security, and prevent misuse.
• Deliver notifications, updates, and legal communication.

6. Data Storage and Retention

• Data is stored throughout the period in which the User's account remains active.
• After account deactivation, data will be retained for 1 (one) year.
• Backup data will be permanently deleted within 30 (thirty) days after the retention period.
• Data is stored on international cloud infrastructure (AWS, GCP, Azure, DO, or equivalent).

7. Disclosure to Third Parties

Tenta.id may grant controlled access to Third Parties for purposes such as:

• Cloud hosting and data storage.
• Integrations with WhatsApp Cloud API, Instagram Messenger API, Facebook Page Messaging, Telegram API, and Email Integration.
• AI model processing (e.g., OpenAI or other AI providers).
• CDN services (e.g., Cloudflare).
• Payment processing.

Tenta.id does not sell Personal Data to any party.

8. International Data Transfer

Due to the use of international cloud servers, AI systems, and global CDN networks, Personal Data may be transferred outside of Indonesia. Tenta.id ensures that such transfers comply with the PDP Law and international standards.

9. Cookies and Tracking Technologies

Tenta.id uses cookies for:

• Session management.
• Authentication security.
• Analytics and User experience optimization.
• Storing User preferences.

Users may disable cookies, but certain features may become limited.

10. User Rights

Users are entitled to:

• Access their Personal Data.
• Request correction or updates.
• Withdraw consent.
• Request deletion of Personal Data.
• Restrict or object to certain processing activities.
• File complaints with relevant authorities.

Requests may be submitted through the official contact provided in Section 17.

11. Children's Data

The Services are not intended for individuals under 18 years old. Tenta.id does not knowingly collect children's data. If discovered, such data will be deleted permanently.

12. Data Security

Tenta.id implements technical and organizational security measures, including:

• Data encryption.
• Firewalls and restricted access.
• Intrusion detection and monitoring.
• Regular audits and security assessments.

However, Users acknowledge that no system is entirely free from risks.

13. Communications and Marketing

Tenta.id may send service-related updates, announcements, feature introductions, and promotional materials. Users may opt out of promotional messages at any time.

14. Processing of End-User Data

In this context:

• The User is the Data Controller of their customer data.
• Tenta.id is the Data Processor, processing data solely according to the User's instructions.
• The User bears full responsibility for ensuring that the collection of End-User Data complies with applicable laws.

15. Data Breach Incidents

In the event of a data breach, Tenta.id will:

• Conduct an internal investigation.
• Notify the User and/or competent authorities as required.
• Implement corrective measures to prevent recurrence.

16. Policy Changes

This Policy may be updated periodically. Significant changes will be communicated through the website or other official channels. Continued use of the Services constitutes acceptance of the updated Policy.

17. Contact & Data Protection Officer (DPO)

For questions or requests regarding this Policy:

• Email: support@tenta.id
• Address: Jl. Taman Tenera Indah No.22 Blok AA, Deli Tua, Namorambe, Deli Serdang Regency, North Sumatra 20356
• WhatsApp: 082166512623
• DPO: Nanda Rusmana

18. Effective Date & Revision History

• Effective Date: December 1, 2025
• Last Updated: December 1, 2025