Privacy Policy

1. Who We Are

Strategift ("we," "us") is operated by PT Tirtajaya Gemilang Interiorku, a company incorporated in Indonesia (NIB 0706220066636), registered at Jl. Kesehatan No. 6, RT 5/RW 11, Kel. Gedong, Kec. Pasar Rebo, Jakarta Timur, DKI Jakarta 13760, Indonesia. This Policy explains how we collect, use, disclose, and protect your information when you use our services at app.strategift.com and strategift.com and its subdomains.

By accessing or using our services, you consent to the collection and use of information as described in this Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Email address and password (for account registration)
• WordPress site URL and API credentials, so we can publish content on your behalf
• Brand information, keywords, and content preferences
• Content data you enter into the dashboard

2.2 Information from Google Services

When you connect Google Search Console, we receive:

• Name, email address, and profile photo (from Google Sign-In)
• Clicks, impressions, CTR, average position, top queries, and top pages from Google Search Console

2.3 Information Collected Automatically

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Cookies and similar tracking technologies

3. How We Use Your Information

• Providing, maintaining, and improving our SEO automation services
• Authenticating your identity and managing your account
• Displaying Google Search Console data in your dashboard
• Generating AI-based SEO content using your brand data and keywords
• Sending service-related emails (account confirmations, important updates)
• Monitoring and analyzing usage patterns to improve performance
• Detecting and preventing fraud, abuse, or security incidents
• Complying with legal obligations

We do not use Google user data to serve ads, share it with third parties for their own purposes, or use it for anything beyond providing the Strategift service.

4. Payment and Transaction Data

Subscription payments are processed through Doku Payment (PT Nusa Satu Inti Artha), a Bank Indonesia-licensed payment service provider, and, as it becomes available, Stripe for other markets. We do not store your full card or bank account details on our servers; our payment processors handle that data directly under their own security standards (e.g., PCI-DSS).

We only store: invoice number, transaction amount, payment status, and transaction date, for subscription management purposes.

5. Data Sharing and Disclosure

We may share your information with the following third parties, solely to provide the Service:

We do not sell your personal data. We do not rent or trade your personal information to any third party. We disclose personal data to government authorities only where required by applicable law, court order, or valid legal process.

6. International Data Transfers

Because our infrastructure and service providers may be located outside Indonesia, your data may be transferred to and processed in other countries. Where required, we take reasonable steps to ensure such transfers are protected consistent with applicable data protection law.

7. Cookies

We use cookies to maintain your session and preferences:

• Essential cookies: required for authentication and keeping you signed in
• Performance cookies: help us understand aggregate usage
• Functional/preference cookies: remember your dashboard settings (e.g., theme)
• Analytics cookies: help us improve the product

You can control cookies through your browser settings; disabling essential cookies may affect core functionality.

8. Data Retention

We retain your personal data while your account is active or as needed to provide the Service. If you close your account, we delete or anonymize your personal data within 90 days, except data we are required to keep longer for legal or tax purposes. Under Indonesian tax law, financial and billing records may be retained for up to 10 years. You can request deletion of your account and related data at any time by contacting us at smile@strategift.com.

9. Data Security

• All data is transmitted via HTTPS/TLS encryption
• Database access is protected by Supabase Row Level Security (RLS)
• API keys and credentials are stored encrypted
• Regular security reviews and updates
• HMAC-SHA256 webhook signature verification for payment transactions

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your data using industry-standard practices.

10. Your Rights

Consistent with Indonesia's Personal Data Protection Law (UU No. 27/2022) and, where applicable, other data protection laws such as the GDPR, you may request to:

• Access: a copy of the personal data we hold about you
• Correction: correction of inaccurate personal data
• Deletion: deletion of your personal data, subject to our legal retention obligations
• Portability: a transfer of your data to another service
• Objection: object to certain processing of your personal data
• Withdraw consent: revoke Google OAuth access at any time via your Google Account settings at myaccount.google.com/permissions

To exercise any of these rights, contact us at smile@strategift.com. We aim to respond within 30 days.

11. Children's Privacy

Strategift is a business tool and is not directed at, or intended for use by, children. We do not knowingly collect personal data from anyone under 16. If we learn we have done so, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice before the change takes effect, consistent with our Terms of Service. Continued use of our services after that date constitutes acceptance of the updated Policy.

13. Contact Us