Skip to content
KonekSip
id Sign in

Legal

Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data KonekSip ("KonekSip", "we", "us") collects, why, who it is shared with and what choices you have. It follows the principles of Indonesia's Personal Data Protection Law (Law No. 27 of 2022). If you only want the short version: we collect what we need to run the service, we do not sell personal data, and your organization's conversation data belongs to your organization.

1. Our role: controller and processor

  • Your account and billing data. For the data about the people who sign in and pay, we decide why and how it is used. We act as the data controller.
  • Your organization's conversations and customers. For the messages, contacts and customer records that an organization handles in KonekSip, the organization decides why and how they are used, and we process them on its behalf as a processor. If you are a customer of a business that uses KonekSip, please contact that business first about your data.

2. What we collect

  • Account. Name, email address, language, and, if you sign in with Google, your Google account identifier and profile name.
  • Sessions and security. When you sign in we record the browser or device, the IP address and an approximate location (city and country) worked out from that IP, so that you can see and end your active sessions.
  • Organization. Organization name, members, roles, departments, plan, usage counters, settings and business hours.
  • Channels. The channel name and number or address, and what is needed to run it: the access tokens Meta gives us when you connect a WhatsApp number, a Page or an Instagram account with Facebook, the SMTP and IMAP settings of an email channel, and the channel's API key. These are stored in our database.
  • Conversations. Messages and their media, contact numbers, names and email addresses, group names, timestamps and delivery status, as they pass through your channels, and the latest AI summary of a conversation when someone asks for one. For a number that is also used in the WhatsApp Business app (coexistence), the contacts and recent chats from that app are copied once when you connect it.
  • Customer records. Customers, their identities on each channel, notes, follow-up tasks, segments, phonebooks and campaign results that you create.
  • Billing. Plan, invoices, amounts and payment status, and for numbers managed by KonekSip the wallet balance, its top-ups and their receipts, and the category and price of each message and each AI use charged. Payment credentials are handled by Midtrans and are not stored by us.
  • Support and technical data. Emails you send to support, error reports and server logs.
  • Browser data. A session cookie to keep you signed in and a security token. Your theme choice is kept in your browser. Our website and app serve their own fonts. The live chat widget on a website that uses it keeps a random visitor ID in the visitor's browser (local storage) and, if the visitor typed them, the name and email, so the chat continues on the next visit.

3. How we use it

  • To provide the service: sign you in, connect channels, deliver and receive messages, run campaigns and automations, and apply plan limits.
  • To take payments, issue invoices and send service emails such as sign-in links, invitations, trial reminders and payment confirmations.
  • To keep the service secure, prevent abuse and fix errors.
  • To answer support requests and improve the product.
  • To meet legal obligations.

The grounds we rely on are your consent where we ask for it, performing our contract with you, our legitimate interest in running a secure service, and legal obligations.

4. Who we share it with

We do not sell personal data. We share it only with providers that help us run the service, and only as needed:

  • Meta (WhatsApp, Messenger, Instagram), when you connect one of these channels, because messages travel through Meta's platforms.
  • Your email provider, when you connect an email channel, through the SMTP and IMAP servers you configure.
  • Shopee, when you connect a Shopee shop, because the chat between you and your buyers travels through Shopee's platform and the app you created.
  • Midtrans, to process QRIS payments.
  • Google, for Google sign-in.
  • Hosting and storage providers, which run our servers and store uploaded and received media.
  • An IP geolocation service, which receives the IP address of a sign-in to return an approximate location.
  • An error monitoring service, which receives technical error reports.
  • The AI provider KonekSip uses, if your organization turns on AI replies or asks for a conversation summary. The message content needed to answer or to summarize is sent to that provider through KonekSip's own account.

We may also disclose data when the law requires it or to protect the rights, safety and security of our users and the service. Some of these providers operate outside Indonesia, so your data may be processed in other countries. We choose providers carefully and expect them to protect data appropriately.

5. How long we keep it

  • Conversations, send logs and AI summaries are kept for the history period of the organization's plan. Older messages, media and summaries are deleted automatically, after a 30-day grace period when the limit becomes shorter.
  • Deleting an organization permanently removes its data, including its stored media.
  • Account data is kept while your account is active.
  • Invoices and payment records are kept for as long as accounting, tax and legal duties require.
  • Deleted data can remain in backups for a limited time before it is overwritten.

6. Security

Each organization's data is kept separate from other organizations, access is controlled by roles (owner, admin and agent), channels have their own API keys, and the service is served over HTTPS. No system is completely secure. If a breach affects your personal data we will notify you and the authorities as the law requires.

7. Your rights

Under the Personal Data Protection Law you can ask to access your personal data, correct it, delete it, withdraw your consent, object to certain processing and receive a copy of your data. To use these rights for your account data, write to [email protected]. We will answer within the time the law sets. If your data was collected by a business that uses KonekSip, contact that business, which decides how its customers' data is handled.

8. Children

KonekSip is for businesses and is not meant for people under 18. We do not knowingly collect their data for our own purposes.

9. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will notify you of material changes by email or in the app.

10. Contact

Questions about privacy: [email protected].