Privacy Policy

1. Introduction

Giwangan Studio ("we", "us", "our") operates the Webjoz platform, accessible at webjoz.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

We act as a data controller and process your personal data in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection("PDP Law") and its implementing regulations.

By using Webjoz, you agree to the practices described in this policy.

2. Data We Collect

• Account Data: Name, WhatsApp number, and/or email address you register with.
• Business Data: Business information you provide to generate a website (business name, description, contacts, etc.).
• Payment Data: Transaction information is processed through Midtrans. We do not store your credit/debit card data directly.
• Usage Data: Activity logs, IP address, device type, and browser for security and analytics purposes.
• Cookies: Session cookies for authentication and user preferences.

3. Use of Data

We use your data to:

• Provide and improve the Webjoz services.
• Process subscription payments.
• Send important notifications related to your account and our services.
• Analyze platform usage to improve the product.
• Comply with applicable legal obligations.

4. Legal Basis for Processing

Your personal data is processed on the following legal bases:

• Contract performance — to provide the services you subscribe to (PDP Law, Article 20).
• Your consent — for example, for marketing notifications sent separately (PDP Law, Article 20).
• Compliance with legal obligations — for example, transaction and tax records (PDP Law, Article 21).

We do not process sensitive personal data (such as health or biometric data) without your explicit consent, except where required by law.

5. Data Sharing

We do not sell your personal data to third parties. Data may be shared with:

• Midtrans — for payment processing.
• Google — for Google OAuth authentication.
• Cloudinary — for storing images you upload.
• Legal authorities when required by law.

The parties above act as data processors (sub-processors) bound by contract and confidentiality obligations. If your personal data is transferred outside Indonesia, we ensure an equivalent level of protection in accordance with the PDP Law (Articles 56–57).

6. Data Security

We apply reasonable technical and organizational security measures, including HTTPS encryption, short-lived JWT tokens, and restricted database access. However, no system is 100% secure.

In the event of a personal data breach that could cause harm to you, we will notify you and the relevant authorities within 3×24 hours (72 hours) of becoming aware of the breach (PDP Law, Article 46).

7. Your Rights

Under the PDP Law, you have the right to:

• Access and download your personal data.
• Request correction of inaccurate data.
• Request restriction of processing of your personal data.
• Request deletion of your personal data.
• Request data portability (receive or transfer data in a readable format).
• Raise an objection to data processing.
• Withdraw consent to data processing (this may result in account closure).
• Submit a claim or complaint regarding a personal data protection violation.

To submit such a request, contact us at cs@webjoz.com. We respond to every request within 30 (thirty) days of receipt.

8. Data Retention

We keep your account data for as long as your account is active. After account deletion, data is removed within 30 working days, unless longer retention is required by law. Financial transaction and bookkeeping records are retained in accordance with applicable tax regulations (generally 10 years).

9. Cookies

Webjoz uses essential cookies for session authentication. We do not use third-party tracking cookies for advertising purposes. You can disable cookies through your browser settings, although some features of the service may not work properly.

10. Children's Data

The Webjoz service is intended for users aged 18 and older. We do not knowingly collect personal data of children under 18 without parental or guardian consent. If you become aware that we have collected a child's data without such consent, please contact us so we can delete it promptly.

11. Policy Changes

We may update this policy from time to time. Significant changes will be communicated by email or through notifications on the platform. The date of the last update is shown at the top of this page.

12. Contact

If you have questions, data subject requests, or complaints regarding this privacy policy, please contact: