Privacy Policy

1. Introduction

Welcome to Kelas Drafter ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, mobile applications, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Create an Account: Name, email address, password (hashed and encrypted), phone number (optional), city (optional), birthdate (optional)
• Complete Your Profile: Photo/avatar URL, occupation, institution, bio, and other profile information you choose to share
• Enroll in Courses: Course enrollment data, lesson progress, and completion status
• Make Purchases: Transaction information, payment details processed through third-party payment processors (Midtrans, Creem.io), billing address if required
• Upload Content: Files, images, render outputs, portfolio works, and other content you upload to our Service
• Communicate with Us: Messages, support requests, feedback, and correspondence
• Use Social Features: Comments, insights, posts, and other content you publish on our platform

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Log Data: IP address, access times, pages viewed, actions taken, user agent string, and referring URLs
• Session Information: Session identifiers, authentication tokens, login timestamps, and session activity data
• Usage Data: Features used, time spent on pages, interaction patterns, and navigation paths
• Render History: Render requests, image processing data, and generated outputs stored in association with your account

2.3 Information from Third-Party Services

We may receive information from third-party services:

• Payment Processors: Transaction status, payment confirmation, and order identifiers from Midtrans and Creem.io (we do not store your full payment card details)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions, enrollments, and purchases
• Authenticate your identity and manage your account
• Track course progress, render pass balances, and service usage
• Send transactional emails (order confirmations, enrollment notifications, password resets, email verification)
• Respond to your inquiries and provide customer support
• Prevent fraud, abuse, and security threats
• Comply with legal obligations and enforce our Terms of Service
• Analyze usage patterns to improve user experience
• Process AI rendering requests and store generated outputs

4. Cookies and Local Storage

4.1 Essential Cookies

We use essential cookies and session storage to:

• Authentication: Maintain your login state and authenticate your access to the Service
• Security: Store session identifiers and validation tokens to prevent unauthorized access
• Session Management: Track your active session and enforce security policies

4.2 Local Storage

We use browser local storage for:

• Caching account balance and service usage information
• Storing referral code information for convenience
• Remembering your preferences and settings
• Temporary storage of form data

4.3 Managing Cookies

Most web browsers accept cookies automatically. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using certain features of our Service. Session storage data is automatically cleared when you log out or close your browser.

5. Third-Party Services

We work with third-party service providers to deliver our Service. These services may collect or process your information:

5.1 Payment Processors

• Midtrans: Processes payments for courses, premium products, and render pass purchases. Midtrans handles payment card information and transaction processing in accordance with their privacy policy and PCI DSS standards.
• Creem.io: Acts as Merchant of Record (MoR) for premium product purchases. As the Merchant of Record, Creem.io serves as the reseller of digital goods and services, processes payments, handles tax obligations, and compliance in accordance with their privacy policy and terms of service. When you purchase premium products through Creem.io, they act as the Merchant of Record for such transactions.

We do not store or have access to your full payment card information. All payment processing is handled by our payment processors in accordance with their privacy policies and security standards.

5.2 Cloud Storage and File Services

• Cloud Storage Providers: We use secure cloud storage services to store uploaded files, images, render outputs, course materials, and other content you upload to our Service. Files are stored securely with appropriate access controls.

5.3 Service Providers

We may use various service providers to help us operate our Service, including email delivery services, AI processing services for rendering features, and other technical services. These service providers may have access to your information only to perform services on our behalf and are obligated not to disclose or use it for any other purpose.

Important: These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they handle your information. We only share information with third parties as necessary to provide our Service to you.

6. Data Security

We implement technical and organizational measures to protect your information, including:

• Encryption of passwords using industry-standard security practices
• HTTPS/TLS encryption for data transmission
• Secure authentication and session management
• Access controls and security policies
• Secure file storage with appropriate access controls
• Regular security audits and vulnerability assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Please note that some information may remain in our backup systems for a limited period.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your account profile
• Deletion: Request deletion of your account and personal information
• Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from non-essential email communications

To exercise these rights, please contact us at info@kelasdrafter.id.

9. Children's Privacy

Our Service is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Support Email: info@kelasdrafter.id

Our customer support email is visible on our public website and is accessible to all users. We commit to responding to all inquiries within 3 business days. This email address is also displayed on email receipts that customers receive for their purchases.