1. Information We Collect
1.1 Personal Information
We collect information that you provide directly to us, including:
- • Full name and contact information (email, phone number)
- • Company information (company name, job title, address)
- • Account information (username, hashed passwords)
- • Communication preferences and account settings
1.2 Usage Information
We automatically collect information about how you use our services:
- • Activity logs and interactions with AI agents
- • Performance data and usage metrics
- • Device and browser information
- • IP address and general geographic location
1.3 Business Data
Data that you input into our AI system for processing:
- • Documents and files uploaded
- • Queries and commands to AI agents
- • Analysis results and generated outputs
- • Workflow configurations and automations
2. How We Use Information
2.1 Service Provision
- • Operating and maintaining the AI platform
- • Processing your requests and queries
- • Providing customer support
- • Sending important service notifications
2.2 Service Improvement
- • Analyzing usage patterns for optimization
- • Developing new features and capabilities
- • Conducting AI research and development
- • Improving security and system performance
2.3 Communication
- • Sending product updates and announcements
- • Providing tips and best practices
- • Sending newsletters (with consent)
- • Responding to inquiries and support requests
3. Information Sharing
3.1 No Data Sales Policy
We do not sell, rent, or trade your personal information to third parties for commercial purposes.
3.2 Limited Sharing
We only share information in the following situations:
- • With your explicit consent
- • To service providers who assist our operations
- • To comply with legal obligations
- • To protect user rights and security
3.3 Service Providers
We work with trusted service providers who help us with:
- • Cloud hosting and infrastructure
- • Analytics and monitoring
- • Payment processing
- • Customer support
4. Data Security
4.1 Encryption
- • End-to-end encryption for sensitive data
- • TLS/SSL for all data transmissions
- • Encryption at rest for database storage
- • Secure key management
4.2 Access Control
- • Multi-factor authentication (MFA)
- • Role-based access control (RBAC)
- • Audit trails for all data access
- • Regular access reviews and revocation
4.3 Monitoring
- • 24/7 security monitoring
- • Anomaly and intrusion detection
- • Incident response plan
- • Regular security assessments
5. Your Rights
5.1 Access and Portability Rights
- • Access personal data we store about you
- • Obtain a copy of your data in a readable format
- • Transfer your data to another service provider
- • Get information about data processing
5.2 Correction and Deletion Rights
- • Correct inaccurate data
- • Update outdated information
- • Delete personal data (right to be forgotten)
- • Restrict processing of certain data
5.3 Control Rights
- • Object to processing for specific purposes
- • Withdraw consent at any time
- • Manage communication preferences
- • File complaints with authorities
6. Cookies and Tracking
6.1 Types of Cookies
- • Essential cookies: Required for basic website functionality
- • Performance cookies: Help us understand website usage
- • Functional cookies: Remember preferences and settings
- • Marketing cookies: Used for relevant advertising
6.2 Cookie Control
You can control cookies through:
- • Browser settings to block or delete cookies
- • Cookie consent banner on our website
- • Account settings for tracking preferences
- • Opt-out tools from analytics providers
7. Data Retention
7.1 Retention Periods
- • Account data: While account is active + 2 years after closure
- • Transaction data: 7 years for audit purposes
- • System logs: 1 year for troubleshooting
- • Analytics data: 2 years in aggregated form
7.2 Automatic Deletion
We automatically delete:
- • Temporary data after processing completion
- • Backup data according to retention schedule
- • Data no longer needed
- • Data upon deletion request
8. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information to us, we will promptly delete such information.
If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us immediately.
9. Policy Changes
We may update this privacy policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons.
Change Notifications
- • Email notifications for material changes
- • Website notifications for 30 days
- • Updated "last modified" date
- • Previous versions available upon request
10. Contact Us
If you have questions about this privacy policy or want to exercise your rights, please contact us:
Data Protection Officer
Email: privacy@kirim.ai
Phone: +62-851-7120-0271
Office Address
Kirim AI, Inc.
Bandung, Indonesia
We will respond to your request within 30 days in accordance with applicable regulations.