Privacy Policy

Last updated: October 18, 2026

Indo Data Works ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and your rights under GDPR (EU), CCPA (California), and UU PDP (Indonesia).

1. Data We Collect

When you use our API service, we collect:

• API request data: URLs you scrape, request parameters, response status
• Technical data: IP address, user agent, request timestamp
• Payment data: Transaction IDs via x402 protocol (we do not store payment credentials)

We do not collect personal names, email addresses, or physical addresses unless you voluntarily provide them (e.g., when contacting support).

2. Why We Collect Data

• Service delivery: Process your API requests and deliver responses
• Analytics: Monitor usage patterns, improve performance, detect errors
• Fraud prevention: Detect abuse, enforce rate limits, prevent unauthorized access
• Legal compliance: Meet regulatory obligations (tax, data protection)

3. Data Retention

• API logs: Retained for 30 days for debugging and fraud detection, then deleted
• Analytics data: Aggregated and retained indefinitely (no personal identifiers)
• Payment records: Retained for 7 years per Indonesian tax law

4. Your Rights

GDPR (EU Users)

• Right to access your data
• Right to rectification (correct inaccurate data)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

CCPA (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

UU PDP (Indonesia Users)

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data
• Right to withdraw consent

To exercise any of these rights, email us at hello@indodataworks.asia. We will respond within 30 days.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting (for API infrastructure), payment processors (for x402 transactions)
• Legal requirements: If required by law, court order, or government regulation

All third-party providers are contractually bound to protect your data.

6. Data Breach Notification

In the event of a data breach that affects your personal data, we will notify you within 3×24 hours (72 hours) as required by UU PDP and GDPR. Notification will include:

• Description of the breach
• Types of data affected
• Likely consequences
• Steps we are taking to address the breach

7. Cookies

We use cookies for session management and analytics. See our Cookie Policy for details.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.

9. International Transfers

Your data may be processed in Indonesia and other countries. We ensure appropriate safeguards (Standard Contractual Clauses for EU data) are in place.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

11. Contact Us

If you have questions about this privacy policy or your data rights:

Email: hello@indodataworks.asia
Data Protection Officer: Available upon request