Privacy Policy
Last updated: May 2025
Awal Studio ("we", "us") operates awalstudio.com. This policy explains what personal data we collect, why, and your rights over it.
1. Data we collect
| Data | When collected | Purpose |
|---|---|---|
| Name, email address | Account registration or Google Sign-In | Account creation, license delivery, course access, transactional emails |
| Billing name and address | Checkout | Invoice generation, tax compliance |
| Purchase and license records | On purchase | License management, support, legal obligations |
| IP address, browser type | Every request | Security, fraud prevention, server logs |
We do not collect payment card numbers. Card processing is handled entirely by our payment providers (see Section 4).
2. Legal basis for processing
- Contract performance — to deliver licenses, courses, and services you purchase.
- Legal obligation — to retain transaction records as required by Indonesian tax law.
- Legitimate interest — to keep the platform secure and prevent fraud.
- Consent — for optional communications; you may withdraw consent at any time.
3. How we use your data
- Deliver font license files, course access, and project deliverables
- Send order confirmations, invoices, and license keys
- Respond to support and licensing enquiries
- Maintain account security
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-party processors
| Processor | Purpose | Privacy policy |
|---|---|---|
| Google (OAuth) | Sign-in authentication | policies.google.com/privacy |
| Xendit | Payment processing (Indonesia) | xendit.co |
| Cloudflare | CDN, DDoS protection, DNS | cloudflare.com |
5. Data retention
- Account data — retained while your account is active, or until you request deletion.
- Transaction records — retained for 5 years to comply with Indonesian tax regulations.
- Server logs — retained for 90 days, then automatically deleted.
6. Your rights
Under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and, where applicable, the EU GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent at any time without affecting prior processing
- Data portability (receive your data in a structured format)
To exercise any right, Contact Us. We respond within 14 business days.
7. Security
We use HTTPS (TLS) for all data in transit. Passwords are hashed using PBKDF2-SHA512. Access to production data is restricted to authorised personnel only.
8. Children
Our services are not directed at children under 13. We do not knowingly collect data from minors. Contact us immediately if you believe a minor has provided data.
9. Changes to this policy
We may update this policy periodically. Material changes will be announced via the website. Continued use after the effective date constitutes acceptance.
10. Contact
Data controller: Awal Studio, Indonesia.
Email: Contact Us