Privacy Policy

This Privacy Policy explains how Karyaku.space (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use the platform for building web works, portfolios, and landing pages.

By registering for or using the Service, you agree to the practices described here, which form an integral part of our Terms & Conditions.

Karyaku.space is a technical platform. We are not the publisher of User Content on Tenant Sites; responsibility for content you publish remains with you, as explained in the Terms & Conditions.

Data Controller: for data related to accounts, authentication, subscriptions, payments, customer support, and Service operational logs (e.g. name, email, plan status).

Data Processor: for User Content on Tenant Sites that contains third-party personal data you enter or publish. In this case you act as Data Controller of that content, and we process it only as needed to provide the Service on your instructions (store, render, publish, CDN/cache).

Data subject rights requests relating to data on a Tenant Site should first be submitted to the Tenant Site owner. We may assist technically or to the extent required by law.

Account data: name, email address, and encrypted password when you register.

Work / User Content data: text, images, media, and site settings you upload or write to build and publish your work.

Transaction data: information related to subscriptions and payments processed by payment partners (e.g. Lynk.id, iPaymu, or bank transfer); we do not store full sensitive payment instrument numbers in our systems.

Technical data: IP address, device/browser type, and reasonable access logs for security and service improvement.

Work analytics data (certain plans): estimated page visits on published works, without third-party tracking cookies from work visitors.

AI Enrichment feature data (if you use it): files or text you upload for analysis, and suggestion outputs generated for you.

Google Sign-In data (if you choose to sign in/register with Google): email address, name, and Google subject identifier verified from the Google identity token. We do not receive or store your Google password.

To provide, secure, and improve the Service (including Tenant Site publication and object storage).

To send transactional email (OTP, billing notifications, support replies).

To process subscriptions and verify payments through designated partners.

To run the AI Enrichment feature at your request, including sending materials you upload to AI providers to generate content suggestions.

To authenticate accounts via Google Sign-In when you choose that option (token verification on our servers).

To prevent abuse, fraud, and security violations; and to respond to infringement reports to a reasonable extent.

To comply with legal obligations applicable in Indonesia.

We do not sell your personal data and do not use your User Content to train Karyaku.space’s own AI models.

Data may be processed by infrastructure and service providers that help operate the Platform, including: hosting/servers (e.g. cloud VPS providers), object storage (Cloudflare R2), edge/CDN (Cloudflare), transactional email (SMTP), payments (Lynk.id, iPaymu, or other designated partners), AI providers (Google Gemini / related Google services) when you use AI Enrichment, and Google as an identity provider when you use Google Sign-In.

Those providers receive data only as needed for their role and are expected to apply reasonable confidentiality and security.

We may disclose data when required by law or to protect the rights, security, and integrity of the platform.

Some sub-processors may process data outside Indonesia (for example Google for Sign-In / AI Enrichment, or global infrastructure).

By using the Service — including features that involve those sub-processors — you understand that processing may involve cross-border transfers with reasonable safeguards consistent with our capabilities, the UU PDP, and agreements with providers.

Content you publish on a platform subdomain or custom domain is generally publicly accessible and may be indexed by search engines.

You are responsible for ensuring you have a lawful basis to publish third-party personal data on your Tenant Site.

Visitors to your Tenant Site interact with you as the site owner; your own privacy policy (if any) may apply alongside the Platform Privacy Policy for Karyaku.space account data.

If you upload documents or text to the AI Enrichment feature, that material is processed to generate content suggestions for you.

Material may be sent to third-party AI providers. Avoid uploading data you do not have rights to, or highly sensitive data, unless you have a clear lawful basis.

We store results or files related to this feature only as needed to provide the feature and Service security; we do not sell that data.

You are responsible for reviewing AI outputs before publishing them to a Tenant Site.

Account data is retained while the account is active and as needed for operational purposes or legal obligations after account closure (e.g. transaction records).

Tenant Site content is retained while you maintain publication/account, unless deleted by you or acted upon under the Terms & Conditions (including content takedown).

We implement reasonable technical and organizational measures (transit encryption, access controls, password hashing). No system is 100% secure; contact us promptly if you suspect unauthorized access.

You may request access to, correction of, or deletion of account data through the in-app help channel, with reasonable identity verification.

You may unsubscribe from marketing email if any; transactional email related to account and billing may still be sent.

For data on another User’s Tenant Site, contact that site’s owner first.

The Service is intended for users aged at least 17 or who have permission from a parent/legal guardian, consistent with the Terms & Conditions.

The marketing site may use Google Analytics to understand aggregate usage. You can limit tracking via browser settings.

The studio application uses authentication sessions necessary to keep you signed in.

We may update this Privacy Policy. Material changes will be marked with a new effective date on this page. This version is effective as of 21 July 2026.

For privacy questions, contact us through the Help feature in the Karyaku.space application (app.karyaku.space) or email: karyaku.space@gmail.com.