What we collect
We collect only what we need to answer you and to keep the website safe. We do not sell personal data, use it for advertising, or use it to train AI models.
| Data | When | Why |
|---|---|---|
| Name, work email, company (optional), topic, budget range (optional) and your message | You send the contact form | To reply to you and discuss a possible project |
| Country of the request, as reported by Cloudflare | You send the contact form | To reply in the right time zone |
| IP address and browser signals checked by Cloudflare Turnstile | You open or send the contact form | To block automated spam |
| Emails you send us and their contents | You email us | To reply to you |
| Technical request data: IP address, user agent, time | Every visit | To deliver the website and protect it from attacks |
We process contact-form data on the basis of your consent, which you give with the checkbox on the form. We process technical request data on the basis of our legitimate interest in running a secure website.
Cookies
The website sets no cookies and uses no analytics, advertising or tracking scripts. Cloudflare Turnstile loads only on the contact page, and only when the form comes into view.
Who else processes data
These providers process personal data on our behalf, under their own data-processing terms.
| Provider | What they do | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, Turnstile spam protection, the database that stores contact messages, and email forwarding | Global network; database primarily in Western Europe |
| Telegram | Notifies our team that a new message has arrived, including its contents | Global |
| Google LLC (Gmail) | The mailbox where email to our simplicode.ai.id addresses and contact-form copies are delivered | Global |
Because these providers operate internationally, your data may be processed outside Indonesia. We only use providers that commit to protection comparable to UU PDP.
How long we keep it
| Data | Retention |
|---|---|
| Contact-form messages in our database | Deleted automatically 12 months after we receive them |
| Message notifications in our team chat and email | Up to 12 months |
| Messages that lead to a project | As part of the project records, for as long as the contract and Indonesian tax law require |
| Technical request data | Kept by Cloudflare under its own retention rules; we keep no access logs of our own |
Your rights
Under UU PDP and, where it applies, the GDPR, you can ask us to:
- tell you what personal data we hold about you and give you a copy,
- correct data that is wrong or incomplete,
- delete your data or stop processing it,
- withdraw the consent you gave on the contact form, and
- transfer your data to you in a common format.
Send your request to privacy@simplicode.ai.id. We answer within the time limits set by UU PDP. You can also complain to the personal data protection authority in Indonesia, or to the supervisory authority in your own country.
Security
The website is served over HTTPS only, with TLS 1.2 or newer. Contact messages are stored in an encrypted database, and only our team can read them. Spam protection is checked on our server, not only in your browser.
Children
The website and our services are meant for businesses. We do not knowingly collect personal data from anyone under 18.
Changes
When we change this policy, we update the date at the top of this page. If a change affects how we use data you already sent us, we tell you by email before it takes effect.
Contact
Privacy questions: privacy@simplicode.ai.id. Everything else: contact@simplicode.ai.id. See also our terms and conditions.