In short
- We collect only what we need to answer you, deliver what you order and run our services.
- We never sell your personal data, and we do not use data from Facebook, Instagram or WhatsApp for anything other than the purpose you shared it for.
- You can ask us to see, correct or delete your data at any time — see User Data Deletion.
1. Who we are
This Privacy Policy explains how Astakara (“Astakara”, “we”, “us”) handles personal data when you visit astakara.id, use our free check-up tools, buy our digital products, contact us, or interact with us through Meta platforms — including our Facebook Page, Instagram account, WhatsApp Business number, Messenger, and any Meta app we operate (together, the “Services”).
Astakara is the controller of your personal data for the Services. We process personal data in accordance with Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, “PDP Law”) and Meta’s Platform Terms and Developer Policies.
2. Information we collect
Information you give us
- Orders: your name, email address, optional phone/WhatsApp number, the product you order, and the payment proof (transfer receipt image or PDF) you upload.
- Messages: what you send us by email, WhatsApp, Messenger, Instagram Direct or forms, including your name and contact details.
- Lead and sign-up forms: the answers you submit, for example in a Facebook or Instagram lead form.
Information collected automatically
- Technical data: IP address, browser and device type, pages requested and the time of the request, recorded in our server logs to keep the Services secure and working.
- Preferences: your language choice, stored in your own browser (see section 7).
Information we do not collect
The answers you enter in the Founder Check-Up, Business Check-Up and Simple Financial Model are processed in your browser and are not sent to our servers. We do not store your bank account or card details — you pay by bank transfer from your own bank.
3. Data from Meta platforms
When you interact with Astakara through Facebook, Instagram, WhatsApp or Messenger, or sign in to or connect with our Meta app, we may receive the following data, only with the permissions you grant:
- Your public profile: name, profile picture, and the app-scoped or page-scoped ID Meta assigns to you.
- Your email address, if you allow it.
- Messages, comments and attachments you send to our Page, account or WhatsApp number, and the time they were sent.
- Answers you submit in our lead forms.
We use this data only to reply to you, provide the service you asked for, and keep a record of our conversation. We do not:
- sell, license or rent Meta platform data;
- use it to build profiles for advertising, or to decide eligibility for credit, employment, housing or insurance;
- share it with anyone except the service providers in section 6, who process it only on our instructions;
- request permissions we do not need for the feature you are using.
You can remove our app’s access at any time from your Facebook settings (Settings & privacy → Settings → Apps and websites), and you can ask us to delete the data we already received — see User Data Deletion. Meta’s own handling of your data is covered by the Meta Privacy Policy.
4. How we use information
- To process your order, verify your payment, issue invoices and receipts, and send your download link.
- To answer your questions and messages, including on Facebook, Instagram, WhatsApp and Messenger.
- To send service emails about your order. We send marketing messages only if you have agreed, and you can opt out at any time.
- To keep the Services secure: preventing fraud, abuse and spam, and investigating incidents.
- To understand, in aggregate, which content and tools are useful, so we can improve them.
- To meet our legal obligations, such as tax and accounting records.
5. Legal basis
Under the PDP Law we process personal data on the basis of:
- Performance of a contract — to deliver a product or service you order or request;
- Your consent — for example when you grant permissions to our Meta app, submit a lead form, or agree to receive updates. You can withdraw consent at any time;
- Legal obligation — for example keeping transaction records required by tax law;
- Legitimate interests — keeping the Services secure and improving them, balanced against your rights.
6. How we share information
We do not sell personal data. We share it only with:
- Service providers that host our website and database, deliver email, and store files, under contracts that require them to protect the data and use it only to serve us;
- Meta Platforms, when you contact us through Facebook, Instagram, WhatsApp or Messenger — Meta processes those messages under its own terms;
- Banks, only to the extent needed to match your transfer to your order;
- Authorities, when the law requires it or to protect the rights, safety and property of Astakara, our users or others;
- A successor, if Astakara is merged or acquired — the successor remains bound by this policy.
7. Cookies & local storage
Our marketing pages, articles and check-up tools set no cookies. Your browser stores your language choice (astakara-lang) in local storage on your own device. The order, payment and download pages use two essential cookies — a session cookie and a security (CSRF) token — so forms work safely; they expire after a short time.
We do not use advertising cookies. If we add analytics or the Meta Pixel in the future, we will update this policy first and, where required, ask for your consent.
8. How long we keep data
- Order and payment records (invoice, receipt, amount, buyer name and email): for as long as Indonesian tax and accounting rules require, generally up to 10 years.
- Payment proof files: kept with the order record they belong to, for the same period.
- Download links: expire after a single use or a limited number of days.
- Messages and Meta platform data: as long as needed to handle your request, and no longer than 12 months after our last conversation, unless you ask us to delete it sooner.
- Server logs: a short rolling period, after which they are overwritten.
When data is no longer needed we delete it or make it anonymous.
9. Security
We use HTTPS throughout the site, restrict access to personal data to the people who need it, protect our admin area with authentication and role-based permissions, store payment proofs in private storage that is never publicly accessible, and use single-use, time-limited download links. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as required by the PDP Law.
10. International transfers
Some service providers, including Meta, may process data outside Indonesia. When that happens we make sure the transfer meets the requirements of the PDP Law and that the data receives a comparable level of protection.
11. Your rights
Under the PDP Law you have the right to:
- get information about how we process your data and access a copy of it;
- correct data that is inaccurate or incomplete;
- have your data deleted or destroyed;
- withdraw consent you have given;
- object to or limit certain processing, including automated decisions;
- receive your data in a commonly used format and have it transferred to another controller;
- file a complaint with the competent personal data protection authority.
To use any of these rights, email info@astakara.id. We may ask you to confirm your identity before acting on a request, and we respond within the time limits set by law.
12. Deleting your data
You can ask us to delete your personal data — including data we received from Facebook, Instagram or WhatsApp — at any time. Step-by-step instructions are on our User Data Deletion page. We complete verified requests within 30 days and confirm by email.
13. Children
The Services are meant for founders and business owners and are not directed at children. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy when our Services or the law change. The “Last updated” date at the top shows the latest version. If a change materially affects how we use your data, we will tell you through the website or by email before it takes effect.
15. Contact us
Questions or requests about privacy: info@astakara.id. You can also message us on our Facebook Page, Instagram or WhatsApp — we will reply through the same channel.