terpadi.by vyber.id

Privacy Policy

Version 2026-11-03

This Privacy Policy explains what personal data Terpadi collects when you use terpadi.com, the Terpadi app at terpadi.com/app, the Terpadi apps for iOS and Android, the Terpadi extension for Chrome, and the Terpadi Agent program you can install on your computer. It covers what we do with that data, who else receives it, how long we keep it, and the choices you have. We wrote it to match how Terpadi actually works today, so it is specific rather than general.

Terpadi is operated by PT VYBER ASIA CLOUD, Jl. Pondok Raya No.9, Sanggrahan, Condongcatur, Kec. Depok, Kabupaten Sleman, Daerah Istimewa Yogyakarta 55281 ("Terpadi", "we", "us"). We are the data controller for your personal data under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP"). If you are in the European Economic Area (EEA) or the United Kingdom, the GDPR or UK GDPR also applies (see section 12). You can reach us at [email protected].

1. The short version

2. Data we collect

From your Google account. When you sign in: your name, email address and Google account ID. We do not keep your Google profile photo. At sign-up, if you allow it, Google also gives us your birth date and gender so we can fill them in for you (Google asks you first).

From your Apple ID. If you sign in with Apple: your Apple user ID and email address. If you choose "Hide My Email", we receive Apple's private relay address, not your real email. We do not keep your name from Apple. Until you enter a name in your profile, we use the first part of your email address as a temporary name.

Your birth date and gender. You must give your birth date when you sign up on the web or in the current apps, and we refuse sign-up if it shows you are under 18. Gender is optional. Both are private: only you see them, on your own profile settings.

Your profile. Username (and your previous usernames, so old links keep working), display name, bio, profile photo, language, plan, level, badges and title, the avatar items you own, and account status.

Your phone number. If you add a WhatsApp number, we store it and send a one-time verification code to it over WhatsApp. We keep codes only in hashed form, and they expire after 10 minutes. We keep a record of which numbers were sent a code for 2 days, to prevent abuse.

Your location. Terpadi asks your device for your precise location. You can say no: Terpadi still works, but the Area map and other location features stay off, and the app will ask you again from time to time. While Terpadi is open and visible, the app sends your position (latitude, longitude, and where available heading, speed and accuracy) whenever you move about 20 metres, or every 15 seconds. On the web, we do not collect location in the background when Terpadi is closed or hidden.

In the iOS app, the same rule applies while the app is open on screen. When Battery saver is on and the Area map is not open, it sends your position once every 5 minutes at lower accuracy instead. With the "While Using the App" permission, location is collected only while the app is open on screen. If you choose "Always" and location sharing is on, the app also sends your position in the background about once every 5 minutes, at about 100 metres accuracy, including after the app is closed.

In the Android app, the same rule applies while the app is open. If you choose "Allow all the time" and location sharing is on, the app keeps sending your position after you leave or close it. With Battery saver on (the default), it sends a network-based position (from Wi-Fi and mobile cells, not GPS) about once every 5 minutes, and Android may space these out further. With Battery saver off, it keeps using GPS like the open app, and Android shows a notification while it does. Before Android asks for this permission, the app explains what it is for, and you can decline.

Background location stops when you turn location sharing off, sign out, or change the permission to "While Using the App" / "Allow only while using the app", or to "Never" / "Don't allow".

We use your location to show what's around you, to share your position with friends if your setting allows, to label posts with a place, to show your position on a live you start or co-host, and to give Terpadi AI a rough idea of your area.

What you post. Photos, videos, captions, hashtags, mentions, the friends you tag, the place of each post and its coordinates, event details (time, capacity, the informational price you enter), places you create, and emoticon packs you publish.

Photo and video metadata. Many phones embed metadata in photos and videos, which can include where they were taken. When you post a photo or video, our server removes this metadata, including location, before the file is stored and shown. Photos and videos posted before 21 October 2026 were stored as uploaded and may still contain it. Chat photos are re-encoded on your device before upload, which removes it too. Profile photos are redrawn in your browser or app before upload, which also removes it.

Messages. The text, photos, voice notes and videos you send in friend chats, group chats, community channels, anonymous chats and event group chats, plus who is in each chat and what has been read. For anonymous chats, the other person sees only a short alias. We still record who actually sent each message, so we can act on reports.

Calls, voice channels and lives. Voice and video calls, voice channels and live videos travel through Cloudflare's real-time media service. We do not record them. We keep a call history: who called whom, when, how long, the result (for example missed), and technical quality data about the connection and devices. For a live you host or co-host we keep its title and category, start and end times, viewer counts, the gifts sent, and your position rounded to about 110 metres (see section 4).

Activity. Likes, comments, saves, shares, event joins, friend requests and friendships, blocks, reports you make, gifts you send and receive, and when you were last active (your friends see "Active now" or "Seen 1h ago").

Terpadi AI and Ask AI. The messages you send the assistant and its answers, files you attach, which tools it used, memories it keeps to personalise answers, and how much you've used against your plan's limits. Files you save or the assistant creates are kept in your Penyimpanan (storage).

Terpadi Office. When you ask Terpadi Office to do something for you, we keep the task, its steps and results, the approval cards you answered, and any auto-approve rules you set. Terpadi Office works in a browser we run in the cloud (on Cloudflare). We keep:

The cloud browser gives the websites it opens your position rounded to about 100 metres, so they can show results near you. Those sites see the browser's network address, which is ours, not yours.

Terpadi extension for Chrome. If you install the extension, it works only in the tabs it opens in its own window. From those tabs it sends Terpadi the page address and title, page text, the page's buttons and fields, and screenshots. It masks passwords, one-time codes and card numbers before anything is sent. It can open and upload files you choose, such as your CV, to the sites you ask it to. It runs in your own browser, so the sites see your own sign-ins and network address.

A computer you connect (Terpadi Agent). If you pair a computer, Terpadi Office can run the commands and edit the files you allow, at the access level you choose. We keep the commands, encrypted, and what the assistant needs from the results and the files it reads.

Credits, gifts and withdrawals. Your credit balance and its history (top-ups, vouchers, purchases, gifts). If you receive gifts: your Gift earnings, withdrawal requests, and the bank account you save for withdrawals (bank, account number and account holder name).

Search. The search terms you enter. We keep them without your user ID, to improve search.

Payments. For each order: what you bought, the amount and currency (Rupiah, or US dollars with the exchange rate used), the payment method type (for example "QRIS" or "BCA virtual account"), status, times, order and invoice numbers, and the payment notifications Midtrans sends us. We never receive or store card numbers, bank credentials or e-wallet PINs. Midtrans handles those.

Payments in the iOS and Android apps. In the iOS app, subscriptions (Terpadi Gold, Terpadi Diamond) and credit purchases are processed by Apple through In-App Purchase. Where Google Play billing is offered in the Android app, Google processes them. We receive only transaction information from Apple or Google: the product, status, transaction ID or purchase token, date and subscription period. We do not receive your card or payment account details. Store subscriptions renew automatically, and you manage or cancel them in your Apple ID or Google Play settings. Payments on the web, and in the Android app in Indonesia, are processed by Midtrans.

Notifications. To send push notifications, we keep a token for each device you use, its platform and app version. A notification can contain part of the message or activity it is about.

Technical data. Our servers and our network provider, Cloudflare, process your IP address and browser details to deliver the service and protect it from abuse. Our application uses your IP address only in memory, for rate limiting. Our web server's logs, which include IP address and browser, are kept for up to 14 days.

3. Why we use your data, and our legal basis

We do not use your data for advertising, and we do not sell it. We do not use your content or conversations to train AI models. We use your email address only for your account and sign-in, and for service or transaction notices (for example invoices). We do not use it for advertising, marketing or analytics.

4. Who can see what

5. Service providers and other recipients

We share personal data only with the providers below, and only as far as each needs to do its job:

Search embeddings, which let search understand meaning, are computed on our own server. No text is sent to a third party for this. Fonts are served from our own server.

We may also disclose data when the law requires it, for example in response to a lawful order from a court or authority, or to protect someone's life or safety.

Search engines and AI services read the public business pages and the public business data (section 4). That data holds no member's personal data beyond the contact details an owner chose to show.

6. Transfers outside Indonesia

Several providers above (including Cloudflare, Anthropic, Google, Apple, Serper and LocationIQ) process data outside Indonesia, including in the United States. Where UU PDP requires it, we make sure these transfers have adequate protection, for example through the provider's contractual data protection commitments. For data from the EEA or the UK, see section 12.

7. How long we keep data

8. Security

All traffic is encrypted in transit (HTTPS). Access to data is limited by permissions, and staff actions and views of attendee phone numbers are logged. Verification codes are stored hashed. Card details and bank credentials never reach us. Terpadi Office sign-in sessions, approvals and connected-account tokens are encrypted at rest. Commands for a connected computer are encrypted.

No system is perfectly secure. Messages are not end-to-end encrypted, and media is served by link as described in section 4. If a data breach affects your personal data, we will notify you and the authorities as the law requires.

9. Your rights and choices

Under UU PDP you have the right to information about how your data is used. You can access and get a copy of your data, correct it, delete it, withdraw your consent, object to certain processing, and restrict it. You can also complain to the supervisory authority. If you are in the EEA or the UK, see also section 12.

We will answer requests within the time the law requires (under the GDPR, within one month). We may need to confirm your identity first.

10. Children

Terpadi is not for anyone under 18. We ask for your birth date at sign-up and refuse it if you are under 18. We do not knowingly collect data from children. If you believe a child is using Terpadi, contact us and we will delete the account. To report a child at risk, see terpadi.com/child-safety.

11. Data stored in your browser or on your device

Terpadi does not set its own cookies. The web app stores these items in your browser's local storage: your sign-in session (valid 30 days), your language, the last map view, draft and not-yet-uploaded posts, your recent searches, your current Terpadi AI conversation, and whether you have seen certain notices. Signing out clears your session. You can clear the rest in your browser settings.

In the iOS and Android apps, similar data is stored in the app's storage on your device. Your sign-in session is kept in the iOS Keychain or Android's encrypted storage and is removed when you sign out. So the app opens quickly, a temporary copy of your chats, notifications and settings stays on the device after you sign out, for up to 3 accounts. All of this is removed when you delete the app. Any session left in the iOS Keychain after the app is deleted is cleared when the app is installed again.

The Chrome extension stores its link to your Terpadi account and its settings in Chrome's extension storage, until you remove the extension.

Cloudflare may set a cookie for security and bot protection. Google may set cookies during sign-in. Their own policies govern those.

12. If you are in the EEA or the United Kingdom

When the GDPR or UK GDPR applies, the legal bases in section 3 are: performance of a contract (Art. 6(1)(b)) for providing Terpadi, Terpadi Office and payments; consent (Art. 6(1)(a)) for sharing your location, background location and the Google birth date and gender permission; legitimate interests (Art. 6(1)(f)) for safety, fraud prevention, age checks and improving search; and legal obligation (Art. 6(1)(c)) for financial records and lawful requests. Where we rely on legitimate interests, we have weighed them against your rights, and you can object.

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time without affecting earlier processing. You can complain to the data protection authority where you live or work, or where an infringement happened. In the UK, that is the Information Commissioner's Office.

Your data is processed in Indonesia and, through our providers, in the United States and other countries. Where these countries do not have an adequacy decision, transfers from our providers rely on safeguards the law accepts, such as the European Commission's Standard Contractual Clauses and the UK addendum in their data processing terms, or the EU-U.S. Data Privacy Framework where a provider is certified.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Some safety measures are automatic. For example, a post is hidden while we review it once enough separate reports are made about it, or after a single report of an intimate image shared without consent or of a child at risk, and abusive use of Terpadi AI can be refused automatically. You can ask a person to review these at [email protected].

13. If you are in the United States

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We use precise location and other sensitive data only to provide the features you ask for, as described above. You can ask to know, access, correct or delete your personal information by emailing [email protected]. We will not discriminate against you for using these rights.

To report an intimate image shared without consent, or other content you want removed, see terpadi.com/report-content. For copyright, see terpadi.com/copyright.

14. Changes to this policy

When we change this policy, we will publish the new version here. The version is the date at the top of this page. If a change significantly affects how we use your data, we will tell you in Terpadi before it applies, and ask for your consent again where the law requires it.

15. Contact

Questions, requests or complaints: [email protected], or write to PT VYBER ASIA CLOUD, Jl. Pondok Raya No.9, Sanggrahan, Condongcatur, Kec. Depok, Kabupaten Sleman, Daerah Istimewa Yogyakarta 55281.

← Back to home