English and Bahasa Indonesia summaries are provided for product demonstration. This material is not legal advice and must be reviewed by qualified Indonesian counsel before production use.
What we process / Data yang kami proses
A submitted email, phone number or corporate domain is processed only to create the requested exposure report. Personal checks require the user's confirmation that the data is their own or that they have authorization. Corporate checks require confirmation of authority.
What we do not retain
Raw breach records, passwords, password hashes, cookies, tokens, session identifiers, banking data and other sensitive source values are not stored. If an upstream source returns such a value, the production adapter must immediately discard it before any response is sent to the browser.
Analytics and enquiries
Product analytics are limited to anonymous aggregates and provider timing. Security briefing requests store business contact details and the selected business need. No webhook notification is sent unless an administrator explicitly configures one.
Retention and rights / Retensi dan hak Anda
Business enquiries and administrative settings should be retained only as long as operationally necessary. A verified individual may request access, correction or deletion through the Data Removal Request page.
Indonesia
The intended production service must be reviewed against UU No. 27 Tahun 2022 on Personal Data Protection and the contractual terms of every data provider. This MVP does not claim legal compliance without that review.