Vantenza AI Privacy Policy

The ai.vantenza.com site and the Vantenza AI service are run by PT Vantenza Teknologi Indonesia ("Vantenza", "we", or "us"), a sole-founder limited company (PT Perorangan) with NIB 0310260019605. For the personal data described in this policy, Vantenza is the controller of that personal data: we decide what it is processed for and how. "You" means anyone who opens this site, buys or uses Vantenza AI, or contacts us.

This policy covers visits to this site, buying quota through Lynk.id, redeeming redeem codes on the redeem page, checking usage on the Check usage page, using API keys, the chat on this site, and your communication with us by email or phone.

This policy supplements the Data and privacy section of the Vantenza AI Terms & Conditions and explains it in more detail. The payment page on Lynk.id is subject to Lynk.id's own terms and privacy policy. Privacy questions can be sent to cs@vantenza.com. Our address and full contact details are in the Contact section at the end of this policy.

The data we process depends on how you use this site and service:

• When you open the site: usage and technical data recorded by Vantenza CMS, our own measurement system, such as a random visitor ID, the pages you open, clicks, campaign source, IP address, and browser. The full list is in the Cookies and measurement section.
• Server security logs: IP address, time, the page requested, and browser. Cloudflare, our network and security provider, also processes the IP address and request data of every visit.
• When you buy quota through the Vantenza store on Lynk.id: the order data Lynk.id sends us, including name, email address, phone number, order number, payment amount, and other data that Lynk.id sends with the order. The card or account details you use to pay are processed by Lynk.id and are not stored by us.
• When you redeem a redeem code: the redeem code and the API key linked to your order, and the IP address when the code is redeemed or when someone tries to enter an invalid code.
• When you use an API key: usage records for each API key, in the form of token counts and costs, which are also shown on the Check usage page. Vantenza AI servers do not store the content of the requests you send through your API key. Request content is forwarded to the AI provider for processing, and is handled under that provider's policies.
• When you use the chat: the content of your messages, and any name, email address, or phone number you write in the chat. Chat messages may be answered by AI or by our team. To prepare answers, chat messages are processed by third-party AI providers that may be located outside Indonesia.
• When you email or call us: your email address or phone number, your name, and the content of your message or what you tell us. We send redeem codes by email to the address you entered on Lynk.id.
• When you request a refund: the data asked for in the Vantenza AI Refund Policy, such as the order number, the email address used for the purchase, proof of payment, and the reason for the refund, and bank account or e-wallet details that we use only to send you the refund.
• Internal notifications: the name, email, and IP address related to an order, a code redemption, or a suspicious code redemption attempt are sent to our team through Telegram.

Do not send sensitive data such as passwords, PINs, OTP codes, card numbers, full bank account numbers, or other people's personal data to the AI or through the chat. Anonymize data before sending it to the AI.

We use your data to:

• process purchases: receive order data from Lynk.id, send redeem codes, and show API keys;
• forward your requests to AI providers, calculate quota usage, and show it on the Check usage page;
• help you by chat, email, and phone, including resending codes and handling refunds;
• keep transaction records required by law;
• keep the service secure, detect bots, and prevent abuse, such as attempts to guess redeem codes;
• measure how this site is used and which campaigns bring visitors;
• measure and improve our ads, as described in the Ads and ad platforms section;
• improve the site.

The legal bases for processing under the UU PDP:

• Your consent: measurement for ads and analytics in countries whose rules require consent. You can withdraw your consent at any time.
• Performance of a contract, including steps you ask for before a contract is made: buying quota, sending and redeeming redeem codes, using API keys and checking usage, refunds, and replying to your chats, including answers prepared by AI.
• Legal obligation: keeping transaction records.
• Legitimate interests: security and abuse prevention, including bot detection (such as recording IP addresses at redemption, Google reCAPTCHA, and internal notifications); measurement with an option to refuse in countries that allow it; and improving the site.

To measure visits and ads, this site uses Vantenza CMS, a measurement system we built and run ourselves. A small script on each page sends data to an address on the same site domain (under /_vz/). That data is handled by our own server (cms.vantenza.com), not by a third party.

Vantenza CMS may record: a random visitor ID; the pages you open and the page you came from (referrer); clicks on contact, chat, and purchase links, and similar actions; campaign parameters in the page address (utm_*) and ad click IDs (gclid, gbraid, wbraid, fbclid, ttclid, twclid, li_fat_id, msclkid, ScCid, epik, rdt_cid); IP address; browser and device type (user agent); page language; the country Cloudflare determines from the IP address; the Global Privacy Control signal; whether you have interacted with the page; and your consent choice.

Email addresses or phone numbers from purchases or from prospective customers (leads) are stored only as a one-way hash (SHA-256), never in plain text, and only when ads consent applies.

Vantenza CMS uses the following first-party cookies, set by our server on this site's domain:

• _vz: random visitor ID. Expires after 90 days. This cookie can only be read by the server (HttpOnly).
• _vzc: your consent choice for ads and analytics. Expires after 180 days.
• _fbp and _fbc: browser identifier and ad click identifier in Meta's format. Both expire after 90 days. Used only to match conversions with Meta when sending data to Meta is turned on.

If we turn on the Google tag for remarketing or Google Analytics, that tag may set the _ga cookie and similar Google cookies. The Google tag loads only after you interact with the page and only with ads consent.

We also use Cloudflare Web Analytics, which only produces aggregate visit statistics and uses no cookies. Cloudflare may also set the __cf_bm security cookie to tell visitors apart from bots, which lasts at most 30 minutes. The chat feature keeps a conversation identifier in your browser storage so that the chat stays connected.

Google reCAPTCHA on the redeem page and the Check usage page may use cookies and your browser data under Google's privacy policy.

How we ask for consent depends on your country, which we determine from your IP address:

• Indonesia, Malaysia, the Philippines, and other countries without specific rules: we show a notice with an option to refuse. Measurement for ads and analytics runs until you refuse.
• Thailand, European Union and European Economic Area countries, the United Kingdom, and Switzerland: no measurement for ads or analytics until you agree.
• United States: a notice with an option to refuse. We treat a Global Privacy Control signal from your browser as a refusal for ads.
• Vietnam: no measurement at all.

The consent banner appears after your first interaction with the page, such as scrolling, tapping the screen, or pressing a key. Your choice is stored in the _vzc cookie. To change it, delete this site's cookies in your browser settings so that the banner appears again, or email cs@vantenza.com.

To measure and improve our ads, our server may send conversion events, such as a consultation request or a purchase, directly to ad platforms. This runs from server to server, and only for visitors whose ads consent applies under the country rules in the Cookies and measurement section.

The ad platforms we use or may use include Meta (Facebook, Instagram), Google (Google Ads, Google Analytics), and TikTok. The data sent is a hash of the email address or phone number, the IP address, user agent, ad click ID, and the event itself. We never send email addresses or phone numbers in plain text.

Ad platforms process that data under their own terms and privacy policies, and may process it outside Indonesia.

We do not sell your personal data. You can refuse measurement for ads through the consent banner.

To run this site and service, your data may be received or processed by the following parties:

• DigitalOcean: our server provider, with a data center in Singapore.
• Cloudflare: network, security (protection from DDoS attacks and bots), DNS, and Cloudflare Web Analytics. Cloudflare processes IP addresses and request data on its network in many countries.
• Lynk.id: processes payments and sends us order data.
• Third-party AI providers: process the content of the requests you send through your API key, and chat messages.
• Email delivery services: send redeem codes and other email from us, and carry your email to us.
• Google reCAPTCHA: protection from bots on the redeem page and the Check usage page.
• Telegram: internal notifications for our team, containing the name, email, and IP address related to an order, a code redemption, or a code redemption attempt.
• Ad platforms, such as Meta, Google, and TikTok: only when ads consent applies, as described in the Ads and ad platforms section.

The chat feature on this site uses LiveChat AI, which Vantenza runs itself at chat.vantenza.com. Vantenza CMS is also our own system, not a third party.

Our servers are in a DigitalOcean data center in Singapore, so your data is stored outside Indonesia. AI providers, Cloudflare, Google reCAPTCHA, Telegram, and ad platforms may also process data outside Indonesia.

We transfer personal data outside Indonesia in line with the UU PDP: to countries with an equal or higher level of personal data protection, with adequate and binding personal data protection, or with your consent.

We keep data for the following periods:

• Visit data in Vantenza CMS, namely events (including IP address and user agent), visitor records, and campaign data: 90 days.
• Logs of events sent to ad platforms: 30 days.
• Records of consent choices: 2 years, as proof of consent.
• Cookies: for the expiry periods given in the Cookies and measurement section.
• Server security logs: for a limited period, then deleted on a regular basis.
• Order data, transaction records, and refund data: as long as needed for the purposes above, and to meet legal obligations.
• API key usage records, IP addresses at redemption, and data from chat, email, and phone: as long as needed for the purposes they are processed for, and to meet legal obligations.
• Content of the requests you send through your API key: not stored on Vantenza AI servers.

Data already received by ad platforms or other service providers is kept under those parties' own policies.

We protect your personal data in ways that include the following:

• Google reCAPTCHA protects the redeem page and the Check usage page from bots;
• we record the IP address of invalid code attempts, and our team is notified of suspicious attempts;
• the content of the requests you send through your API key is not stored on Vantenza AI servers;
• email addresses and phone numbers for ad measurement are stored only as one-way hashes;
• the visitor ID cookie can only be read by our server (HttpOnly);
• Cloudflare protects the site from DDoS attacks and bots;
• we use server security logs to detect and handle incidents;
• staff actions in Vantenza CMS are recorded in an audit log that is kept for 2 years, without visitor data.

Redeem codes and API keys are like passwords: anyone who has them can use your quota. Do not share them, and do not send your full redeem code or API key by email. If your code or API key is leaked, contact cs@vantenza.com right away.

We never ask for your card number, PIN, password, or OTP code. We only ask for bank account or e-wallet details by email from cs@vantenza.com if your refund is approved. No system is completely secure. If a personal data protection failure affects your data, we will notify you and the competent authority as required by the UU PDP.

Under the UU PDP, you have the right to:

• get information about the processing of your personal data, including its purpose and basis;
• access and get a copy of your personal data;
• correct and update your personal data;
• request the deletion or destruction of your personal data;
• withdraw your consent at any time;
• object to processing for direct marketing or profiling, and to decisions based solely on automated processing;
• delay or restrict the processing of your personal data;
• get your personal data in a commonly used format, as far as the UU PDP provides;
• file a complaint with the authority responsible for personal data protection.

To exercise your rights, email cs@vantenza.com and describe your request. Include your Lynk.id order number and the email address you used when buying, but do not send your full redeem code or API key. To protect your data, we may verify your identity before acting on your request. We respond to requests within the time limits set by the UU PDP. Data we are required by law to keep, such as transaction records, is kept for as long as that obligation applies.

For measurement and ads, you can also refuse directly through the consent banner, or change your choice as described in the Cookies and measurement section.

This site is not meant for children. If you are under 18 years old, using services that require personal data must be done with the consent of a parent or guardian. A parent or guardian can contact us at cs@vantenza.com to ask for their child's data to be deleted.

We may update this Privacy Policy, for example because of changes to the site, services, service providers, or regulations. The latest version is always available on this page, with the update date at the top. Changes apply from that date and do not apply retroactively.

This document is written in Indonesian. Translations into other languages are provided for convenience. If the content of the Indonesian version and a translation differ, the Indonesian version prevails.

Questions and requests about this Privacy Policy and your personal data can be sent to cs@vantenza.com.

• Email: cs@vantenza.com
• Phone: 0811-6884-2424
• Address: Dsn Gisikan RT 002 RW 005, Desa Banjarsari, Kec. Bandarkedungmulyo, Kab. Jombang, Jawa Timur 61462

All the ways to contact us are on the Contact Us page.