Legal · UU PDP
UU PDP Compliance
Last Updated: June 2026
Our Commitment to Your Data
Jalaran is built around a simple principle: your data stays yours. This statement explains how we align with Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi — UU PDP No. 27 of 2022). We practise data minimisation, run AI on a self-hosted model rather than third-party AI clouds, and give you direct control to export or delete your data at any time.
Data Controller
The controller responsible for your personal data is [legal entity / operator name], based in Indonesia. For any privacy matter — including the rights described below — contact our data protection contact at [email protected].
Personal Data We Process
We collect the minimum needed to run your account: your email address (for authentication and support) and, if you sign in with Google, basic profile information limited to what Google's Limited Use policy permits. The content you create — notes, tasks, chat prompts, and files you upload — is stored to provide the service. We do not collect data we do not need, and we use no third-party advertising trackers.
Lawful Basis for Processing (Art. 20)
We process your personal data to perform our agreement with you (delivering the workspace you signed up for), on the basis of your consent for optional features, and for our legitimate interest in keeping the service secure and reliable. You may withdraw consent for any optional processing at any time.
AI Runs on a Self-Hosted Model
When you use AI features, your content is sent to Jalaran's own self-hosted Google Gemma model — not to a third-party AI cloud — and is processed for that single request only. Your prompts, notes, tasks, and files are never used to train external AI models.
Storage & Retention
Your account and content are stored in Supabase, encrypted in transit and at rest. We keep data only as long as it serves you: Analyze and Process jobs (with their uploads) and unsaved Feed articles are automatically purged after about 30 days, and deleting your account permanently removes your associated data from our databases. You can export or delete your data at any time.
International Data Transfer (Art. 56)
Your data may be processed on infrastructure located outside Indonesia (for example, your Supabase project region and Google's sign-in infrastructure). Where this occurs, we rely on providers that offer an adequate level of protection and appropriate safeguards. [Confirm Supabase project region and transfer mechanism.]
Your Rights Under UU PDP (Arts. 5–15)
You have the right to be informed about, access, and obtain a copy of your personal data; to correct inaccurate data; to erase or end the processing of your data; to withdraw consent; to object to decisions based solely on automated processing (profiling); to restrict processing; to port your data to another provider; and to lodge a complaint with the supervisory authority and seek compensation. To exercise any of these, email [email protected] and we will respond within the period required by law.
Security
We apply industry-standard safeguards: encryption in transit and at rest, row-level security so each user reaches only their own records, integrity-signed model artifacts, and least-privilege access for our systems. No system is perfectly secure, but we treat your data as if it were our own.
Breach Notification (Art. 46)
If a personal-data breach occurs that affects you, we will notify the affected data subjects and the relevant authority within 3×24 hours, as UU PDP requires, and explain what happened and what we are doing about it.
Children
Jalaran is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
Changes to This Statement
We may update this statement as the product, our providers, or the law evolve. We will announce material changes in-app or by email and keep the "Last Updated" date current. This statement is governed by the laws of the Republic of Indonesia.
Data Protection Contact
For any question about this statement, or to exercise your rights under UU PDP, reach us at: [email protected]