Privacy Policy
Back to app

Privacy Policy

Effective date: [[EFFECTIVE DATE]] · Last updated: [[LAST UPDATED]]

Draft — pending legal review; not legal advice. This document is a working draft and may change before launch.

This Privacy Policy explains what personal data AlphaFlow, operated by [[LEGAL ENTITY NAME — e.g. PT Klinik Penyesalan / sole proprietor]] ("AlphaFlow", "we", "us"), collects when you use the service, how we use it, who we share it with, and the choices you have. It applies to the AlphaFlow website and app.

1. Data we collect

We collect the following categories of data:

  • Account and identity data — handled by our authentication provider, Clerk. This typically includes your email address, name or username, and a unique user identifier. Depending on how you sign in (for example with Google), Clerk may also share basic profile information with us.
  • Usage and analytics data — how you interact with the service, such as pages and features viewed, tickers analysed, actions taken, approximate device and browser type, and log data like IP address and timestamps. We use this to operate, secure, and improve the product.
  • Payment metadata — provided by our payment processor, Midtrans, when you subscribe. This includes data such as a transaction ID, payment status, payment method type, amount, and timestamp. We never collect or store your full card number, CVV, virtual-account number, or bank credentials.
  • Data you provide directly — for example watchlists and preferences you create, and any messages you send us for support.

2. How we use your data

We use personal data to:

  • Provide, maintain, and secure the service and your account.
  • Process subscriptions and payments, grant access, and reconcile billing against Midtrans settlement records.
  • Understand usage and improve features, performance, and reliability.
  • Communicate with you about your account, changes to the service, and support requests.
  • Detect, prevent, and address fraud, abuse, and security incidents, and comply with legal obligations.

3. Third parties we share data with

We do not sell your personal data. We share it only with service providers that help us run AlphaFlow, and only as needed:

  • Clerk — authentication and account management.
  • Midtrans — payment processing. Your payment is also subject to Midtrans’ own privacy policy.
  • Hosting and infrastructure providers — to host and deliver the application.
  • Analytics providers — to measure and improve usage of the service.
  • Legal and safety — where required by law, court order, or to protect our rights, users, or the public.

Some of these providers may process data on servers outside Indonesia. Where that happens, we take reasonable steps for the data to remain protected consistent with this policy.

4. Data retention

We keep personal data for as long as your account is active and as needed to provide the service. After you close your account, we delete or anonymise your data within a reasonable period, except where we must retain certain records — such as payment and transaction records — to meet legal, tax, accounting, or security obligations.

5. Your rights and choices

Subject to applicable Indonesian data-protection law (including Law No. 27 of 2022 on Personal Data Protection), you may request to access, correct, update, or delete your personal data, and may withdraw consent or object to certain processing. You can manage much of your account and profile data directly through Clerk, or contact us at [[CONTACT EMAIL — e.g. legal@alphaflow.id]] to exercise your rights. We may need to verify your identity before acting on a request.

6. Cookies and similar technologies

We and our providers use cookies and similar technologies (such as local storage) to keep you signed in, remember preferences like your language choice, secure the service, and measure usage. You can control cookies through your browser settings; blocking some cookies may affect how the service works (for example staying logged in).

7. Children

AlphaFlow is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date above and, where appropriate, notify you in-app or by email. Continuing to use AlphaFlow after changes take effect means you accept the updated policy.

9. Contact

For privacy questions or requests, contact [[LEGAL ENTITY NAME — e.g. PT Klinik Penyesalan / sole proprietor]] at [[CONTACT EMAIL — e.g. legal@alphaflow.id]].

Questions?

If you have any questions about these terms or our privacy practices, contact us at [[CONTACT EMAIL — e.g. legal@alphaflow.id]].