Privacy Policy
Last updated: March 16, 2026
1. Introduction
PT. Namulaki Eusibia Teknologi ("Company", "we", "us") operates the Astapa platform. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
Account Information
When you create an account, we collect your email address, display name, and authentication credentials. If you sign in via OAuth (Google, GitHub), we receive your profile information from those providers.
Usage Data
We collect information about how you use the Service, including API call counts, login timestamps, and feature usage for analytics and service improvement.
End-User Data
As a platform provider, we process end-user data on behalf of builders (our customers). This includes end-user email addresses, authentication records, and subscription entitlements as configured by the builder.
3. How We Use Your Information
- To provide and maintain the Service
- To authenticate you and manage your account
- To process payments and manage subscriptions
- To send transactional emails (verification, password reset)
- To monitor and improve Service performance
- To detect and prevent fraud or abuse
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers who assist in operating the platform (hosting, email delivery)
- Law enforcement when required by law
5. Data Storage and Security
Your data is stored on servers we operate. We use encryption in transit (TLS) and at rest. Passwords are hashed using bcrypt. We implement rate limiting and access controls to protect your data.
6. Data Retention
We retain your account data for as long as your account is active. Upon account deletion, your data is permanently removed within 30 days. Login attempt records are retained for rate limiting purposes and automatically expire.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data
To exercise these rights, contact us at hello@astapa.com.
8. Cookies
We use session cookies for authentication. We do not use third-party tracking cookies or advertising cookies.
9. Data Processing for Builders
When builders use Astapa to manage their end-users, we act as a data processor on their behalf. Builders are responsible for obtaining appropriate consent from their end-users and complying with applicable privacy laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.
11. Contact
Questions about this policy? Contact us at hello@astapa.com.