1.Who we are
Intura Pte. Ltd., 32 Pekin Street, #05-01, Singapore 048762, is the controller of the personal data described in this policy. Our affiliate PT. Kelinci Teknologi Kreatif, Jakarta, provides support, invoicing and payment collection in Indonesia and processes personal data for those purposes.
This policy covers the website at intura.co, your account and library, download keys and the downloads made with them (together, the Service). Other Intura products, such as Data AI Search by Intura at dataaisearch.com, have their own privacy policy.
2.Data you process with our products
Models run on infrastructure you control, and extensions run in your browser. Text, files, posts and results you process with them stay on your devices: they are not sent to us, and we do not see them. For any personal data in that content, you are the controller, as described in the Product Terms and the Acceptable Use Policy.
3.What we collect
- Account data: your email address and name, your workspace and, if you sign in with Google, the basic profile Google shares with us. We sign you in with one-time email links or Google Sign-In; we do not store passwords.
- Form security: when you request a sign-in link, send an enquiry or send feedback, Cloudflare Turnstile checks that the request comes from a person. We keep session records with the time and device information needed to keep you signed in and to detect misuse.
- Purchases and billing: what you bought or claimed and when, the price and currency, the payment reference Airwallex or Xendit gives us, how you paid (for example QRIS or a bank name) and, for a rupiah payment, the exchange rate it was charged at. Your card and account details are entered on Airwallex's or Xendit's page and never reach us.
- Acceptance records: each time you accept the Terms of Service, the Product Terms or a product acknowledgement, we record your account, the document and its version, the time, your IP address, your browser's user agent, where you accepted and, where relevant, the product and the purchase.
- Downloads: which product and version you downloaded, when, and whether you used the website or a download key.
- Download keys: a name you give the key, a one-way hash of it (never the key itself), when it was created, revoked and last used, and the IP address it was last used from.
- Your library and courses: what you own and your progress through course lessons.
- Cart: the products you put in your cart while signed in.
- Support, feedback and enquiries: the messages you send through your account, the feedback form or the enterprise enquiry form, with the details you give us, such as your name, company and phone number.
- Notifications: which notifications you have seen and your notification settings.
- Website usage: pages visited and controls used, with device, browser and approximate location derived from your IP address, collected through Amplitude and Google Analytics only if you accept analytics cookies. These events never contain what you type.
Cookies and similar technologies are described in the Cookie Policy.
4.How we use it
- to provide the Service: sign you in, deliver what you bought and run your library, downloads and download keys;
- to take payments, issue receipts, and meet tax and accounting obligations;
- to keep a record of the terms you accepted, as proof of what was agreed and to establish, exercise or defend legal claims;
- to secure the Service and detect and prevent abuse, fraud, misuse of free offers and breaches of the Terms;
- to provide support, answer feedback and enquiries, and send service messages such as sign-in links, receipts, notifications and notices of changes;
- to understand how the website is used and improve it.
Our team follows account activity, such as sign-ups, purchases and downloads, through internal notifications so we can help customers; these never include keys, IP addresses or payment details. We do not sell personal data and we do not use it for advertising.
5.Legal bases
We process personal data where it is necessary to perform our contract with you, to comply with a legal obligation, for our legitimate interests in securing, operating and improving the Service and in proving what was agreed, where those interests are not overridden by your rights, or with your consent, as for analytics cookies. These correspond to the bases in Article 20 of the UU PDP and to the consent, deemed consent and legitimate interests provisions of the PDPA. Where we rely on consent, you may withdraw it at any time.
6.How long we keep it
- Account data, library and download records: while your account is open and for a reasonable period after it is closed, unless you ask us to delete them sooner and we are not required to keep them.
- Acceptance records: for the life of your account and afterwards for the period in which a claim about the agreement could be brought under the applicable limitation period.
- Billing records: for as long as tax and accounting laws require.
- Support messages, feedback and enquiries: for as long as needed to deal with them and keep a record of them.
- Analytics data: under the retention settings of Amplitude and Google Analytics.
You may ask us to delete your data at any time by writing to [email protected]. We may keep what the law, or the defence of a legal claim, requires us to keep.
8.International transfers
We operate from Singapore and Indonesia, and our service providers may process data in other countries, including the United States. When personal data is transferred outside Indonesia or Singapore, we take the steps required by Article 56 of the UU PDP and the transfer limitation obligation of the PDPA, including contractual safeguards that give the data a comparable standard of protection.
9.Security
We protect personal data with encryption in transit, encryption at rest provided by our cloud infrastructure, access controls limited to the people who need access, and monitoring. Download keys are stored only as a one-way hash. No system is completely secure. If a personal data breach occurs, we will notify affected individuals and the relevant authorities as required by applicable law.
10.Your rights
Subject to the conditions and exceptions in applicable law, you have the right to:
- be informed about how your personal data is processed;
- access your personal data and obtain a copy;
- correct inaccurate or incomplete data;
- have your data deleted or its processing ended;
- withdraw consent you have given;
- object to decisions based solely on automated processing that have significant effects on you;
- restrict or suspend processing, and receive your data in a commonly used format where the law provides for it.
To exercise a right, write to [email protected]. We may need to verify your identity before acting on a request, and we will respond within the period required by applicable law. You may also complain to the data protection authority in Indonesia or to the Personal Data Protection Commission in Singapore.
11.Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.
12.Changes to this policy
We may update this policy. We will publish the new version on this page with a new date and, for material changes, notify account holders by email or on the website.
13.Contact
For questions or requests about personal data, contact us:
- Intura Pte. Ltd., 32 Pekin Street, #05-01, Singapore 048762.
- PT. Kelinci Teknologi Kreatif, Gedung Wirausaha Lt. 1 Unit 104, Jl. HR Rasuna Said Kav. C-5, Jakarta Selatan 12920, Indonesia.
- Email: [email protected]
- Phone: +62 819-7712-1092