Privacy Policy

Last updated: October 18, 2026

1. Introduction

Teknopromo ("we") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.

Teknopromo is operated by PT Teknologi Milik Semua, which acts as the Personal Data Controller of your account data under Law No. 27 of 2022 on Personal Data Protection ("PDP Law"). This service is intended for business owners aged 18 years and over.

2. Information We Collect

We collect the following information:

Account Information: full name, email address, business name, password (encrypted)
Brand Information: brand name, niche, tone, colors, logo, brand guidelines
Social Media Data: usernames and profiles from connected platforms (TikTok, Instagram, Facebook, Threads, YouTube, LinkedIn, Pinterest), access tokens (encrypted)
Content: captions, hashtags, scripts, videos, carousel images, and media created through our service
Analytics Data: content performance metrics (views, likes, comments, shares, saves) collected from connected platforms
Interaction Data: comments and direct messages (DMs) from connected platforms that are displayed through the Inbox feature
Telegram Data: your Telegram chat ID, if you connect Telegram notifications. A list of content that is about to be posted (topic, time, and target platforms) is sent to that chat so that you can cancel it.
Technical Data: IP addresses and access logs, for security purposes (for example, to limit repeated sign-in attempts)
Usage Data: the dates on which you use the Service (one record per day, with no time, IP address, or pages visited), to measure and improve the Service. Deleted together with your account.

3. Use of Information

We use the information we collect to:

Provide, maintain, and improve the Service
Create and manage social media content using AI
Post content to connected social media platforms (TikTok, Instagram, Facebook, Threads, YouTube, LinkedIn, Pinterest)
Schedule content posts automatically at times set by the user
Collect and display content performance analytics from connected platforms
Display and manage comments and direct messages (DMs) through the Inbox feature
Send service-related notifications

Legal bases for processing: performance of the service agreement with you (creating, scheduling, and posting the content you request), your consent (for example, when you connect a social media account or turn on automatic scheduling), and compliance with legal obligations.

4. Social Media Platform Integrations

When you connect a social media account, we access data according to the permissions you grant:

TikTok

Basic profile information (username, avatar)
The ability to post videos on your behalf
Video analytics data (views, likes, comments, shares, saves)
Account statistics (follower, following, likes and video counts)

Instagram

Basic profile information of your Instagram business account
The ability to post Reels and carousels on your behalf
Content analytics data (impressions, likes, comments)
Reading, replying to, and deleting comments on your content
Reading and replying to Instagram direct messages (DMs)

Facebook

The list of Facebook Pages you manage
The ability to post content to the selected Page
Page and post analytics data (reactions, comments, shares, video views)
Reading, replying to, and deleting comments on Page posts
Reading and replying to Page Messenger messages

Threads

Basic profile information of your Threads account
The ability to post text, images, videos, and carousels
Analytics data (views, likes, replies)
Reading, replying to, and deleting replies on your threads

YouTube

The ability to upload Shorts videos on your behalf
Video analytics data (views, likes, comments)
Reading, replying to, and deleting comments on your videos

Basic profile information (name, profile photo)
The ability to post content on your behalf

Basic account information
Reading your list of boards and pins, and creating boards
The ability to create pins on your behalf

All access tokens are stored in encrypted form (AES-256-GCM). You can revoke access for each platform at any time from the Social Accounts page in our app, or directly through the security settings of the platform concerned.

5. Use of AI and Third-Party Processors

Content is created by AI models owned by third-party providers. To create content, we send your brand data (name, niche, products, guidelines, knowledge base), the brief you fill in, and content scripts to the following providers:

Script writing, research, and moderation: Google (Gemini, including Google Search for research), Alibaba Cloud (DashScope), TokenHarbor, Groq, OpenRouter, and NVIDIA. The providers are used in rotation: if one is unavailable, the request is routed to the next provider.
Image generation: Alibaba Cloud (DashScope) and Pixazo - only a visual description of the scene is sent.
Voice (voiceover): Google (Gemini TTS) and Microsoft (Edge TTS) - the narration text is sent.
Stock videos and photos: Pexels and Pixabay - only search keywords are sent, not your personal data.

These providers process data outside Indonesia: Google and Microsoft in their global data center networks, Alibaba Cloud (DashScope) through its international service in Singapore, and the other providers at their respective server locations outside Indonesia. We only send the data needed to create your content, we do not send passwords or social media access tokens, and we do not sell your data to anyone. The data sent is processed in accordance with each provider's terms.

Some decisions are made automatically: AI-generated content is checked for compliance by AI before it can be posted, and if you turn on automatic scheduling, content is posted at the scheduled time without approval for each piece of content. You can cancel scheduled content, turn off automatic scheduling, or request human review of an automated decision by contacting us.

6. Data Security

We take reasonable security measures to protect your information, including:

Password encryption using Argon2
Social media token encryption using AES-256-GCM
SSL/TLS-encrypted communication
Restricted and authenticated database access

In the event of a failure in the protection of personal data, we will notify you in writing no later than 3×24 hours after we become aware of the failure, in accordance with the PDP Law.

7. Data Sharing

We do not sell your personal information. We may share information with:

The social media platforms you connect (TikTok, Instagram, Facebook, Threads, YouTube, LinkedIn, Pinterest - only for posting content and retrieving analytics data with your permission)
The AI and content service providers named in section 5 (for content creation)
Infrastructure providers: Cloudflare (website network and security) and Telegram (only if you connect Telegram notifications)
Legal authorities if required by law

8. Your Rights

Under the PDP Law, you have the right to:

Obtain information about the purposes and methods of processing your data
Access and obtain a copy of your personal data
Correct or update inaccurate data
Delete your account and data, or request that processing be stopped
Withdraw consent you have given, including revoking access to social media platforms
Object to decisions made automatically

You can exercise most of these rights yourself in the app (Settings, Brand, Social Accounts). For other requests, contact [email protected]; we will respond no later than 3×24 hours after the request is received.

9. Data Deletion

You can delete your data in the following ways:

Disconnect a social media account: Open the Social Accounts page and click "Disconnect" on the platform concerned. The access token will be deleted from our servers immediately.
Delete content: Open the My Content page, select the content, and click Delete. The content and its related data (analytics, assets) will be permanently deleted.
Delete your account: Open Settings › Security, click "Delete Account", then enter your password. All of your data (brands, content, analytics, social media accounts) is permanently deleted - see section 10 for the time frames.
Deletion via the platform: If you request data deletion through your Facebook/Instagram/Threads settings, we will receive that request automatically and delete the related data from our servers.

Once deleted, data cannot be recovered. Content already posted to social media platforms is not affected by deletion in Teknopromo - you need to delete it directly on the platform concerned.

10. Data Retention

Your data is stored for as long as your account is active, with a few exceptions:

Rendered video files are deleted automatically 30 days after they are created - download any videos you want to keep.
Content creation process logs are deleted automatically after 30 days.
When you delete your account, the data in our database is erased immediately. Files and supporting data (videos, images, brand knowledge base) are swept automatically within no more than 7 days. Daily backup copies kept for disaster recovery are usually erased within the following 7 days.

Data may be retained longer only where required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with the latest update date.

12. Contact

Teknopromo is operated by PT Teknologi Milik Semua. For questions about privacy or data deletion requests, contact us at:

Email: [email protected]