Privacy Policy

1. Scope

This policy explains how we process the personal data of Tampil Online users and visitors to public posts, in line with Law No. 27 of 2022 on Personal Data Protection.

2. Data we collect

Account data: name, email, password (stored as a hash), or your Google profile if you sign in with Google.

Content: product photos, character reference photos, prompts, generated results, posts, and affiliate links.

Payments: the pack purchased, the amount, and the payment status. Card or account details are processed by the payment gateway, not by us.

Visitors to public posts: an anonymous "vid" cookie used to count views and clicks, IP address, and device type. We do not ask visitors for a name or email.

3. Photos of real people

A reference photo showing a real person may only be uploaded with that person's consent, or their parent's or guardian's consent if they are under 18. Reference photos are kept in private storage, can only be opened through signed links, and metadata such as GPS location is removed when they are processed.

4. Why we process data

To run the Service (image generation, public posts, affiliate redirects, analytics), process payments, moderate content and keep the Service secure, prevent abuse, and contact you about your account.

5. Data processors

We use the following providers to run the Service: AI providers (OpenAI, and optionally Google or Black Forest Labs) for image generation and moderation; Cloudflare for image storage and delivery; server hosting providers; Resend for email; a payment gateway for payments; and Sentry for error monitoring. Some providers process data outside Indonesia with equivalent protection.

We do not sell personal data.

6. Retention

Account data and content are kept while your account is active. Raw view and click events are kept for 13 months. Content flagged by moderation is kept for 30 days for review and then deleted. Payment transaction records are kept for as long as tax regulations require.

7. Your rights

You have the right to access, correct, and delete your personal data, and to withdraw consent. You can delete your account yourself from the Settings page, or by emailing us. Deleting your account removes your stored content, public posts, and photos.

8. Security

Connections are encrypted with HTTPS, data access is limited per workspace, and private files can only be opened through signed links that expire.

9. Contact

Questions or requests about personal data can be sent through the Contact page. We respond within 3 business days.