Privacy Policy

What personal data arizu.id collects, why we collect it, who receives it and how you can control it.

Version
1.0
Effective
Last updated

Arizu Studio ("we", "us", "our") runs the website https://arizu.id, including its blog and free online tools, sells software products, publishes Android apps and builds websites and apps for clients. This Privacy Policy explains what personal data we collect, why, who receives it, how long we keep it and what you can do about it.

We handle personal data in line with Indonesian Law No. 27 of 2022 on Personal Data Protection ("UU PDP") and Law No. 11 of 2008 on Electronic Information and Transactions as amended ("UU ITE"). Where the law of your country gives you further rights, such as the GDPR in the European Union or privacy laws in the United States, we honour them as described in section 12.

1. Who we are

The personal data controller for the services in this policy is Arizu Studio, Grand Depok City, Depok, Jawa Barat 16412, Indonesia.

2. What this policy covers

This policy applies to:

  • the website https://arizu.id, including the blog at /blog and the free tools at /tools;
  • messages you send us through the contact form, by email or by WhatsApp;
  • emails we send, such as replies, product updates and promotions;
  • software products we sell through marketplaces such as Envato (CodeCanyon) and lynk.id;
  • Android apps we publish under the Arizu Studio name, such as Flipbonk, on Google Play, the Amazon Appstore and HUAWEI AppGallery.

Some products, such as Money Tracker, have their own privacy policy. Where a product or app links to its own policy, that policy applies to it instead of this one. When we build a website or app for a client, the client decides how the data on that site is used and their own privacy policy applies.

3. Information we collect

3.1 Information you give us

  • Contact form and enquiries. Your name, email address, phone number if you add it, the service you are interested in and your message. The form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending it.
  • Project work. When you hire us, the details needed to quote, deliver and invoice the work, such as your company name, contact person, address and the content you send for the project.
  • Files and text you give our tools. Some tools work entirely in your browser. Others send the file, link or text you enter to our server, or to the service the tool depends on, to produce the result you asked for.
  • Blog comments. Comments on the blog are provided by Disqus. When you comment, Disqus collects the details of your Disqus account and your comment under its own privacy policy.

3.2 Information collected automatically

When you visit the website, our servers and the analytics and advertising services listed in section 6 receive technical data such as your IP address, browser and device type, operating system, language, the pages you visit, the page you came from and the time of your visit. Some of these services use cookies and similar technologies. Our Cookie Policy explains them.

The session recording services (Microsoft Clarity and Contentsquare) never load on tools that handle identity documents, such as the KTP image reader.

3.3 Purchases through marketplaces

When you buy one of our products on Envato or lynk.id, the marketplace handles the payment. We receive the details the marketplace shares with sellers, such as your username or name, email address, purchase code and the product you bought. We use them to verify your licence and give you support.

3.4 Our Android apps

Our apps do not ask you to create an account and do not ask for your name or email address. Apps that show ads use Google AdMob, and on HUAWEI devices may use Petal Ads. These ad networks can collect your device's advertising ID, IP address, device and app information, and how you interact with ads, in order to show, measure and limit ads. The app stores also give us aggregated statistics and crash reports.

3.5 Emails we send

For every email we send, we keep a delivery record with the recipient address, the subject, when it was sent and whether it was delivered. Product update and promotional emails include an unsubscribe link. If you use it, we record that your address has opted out, so we do not email it again with that type of message.

4. How we use your information

  • To answer your questions and send the quote or information you asked for.
  • To deliver, support and invoice the work, products and licences you bought.
  • To run the tools you use and return their results.
  • To keep the website and our systems secure, stop spam and abuse, and fix errors.
  • To understand how the website is used and improve its pages, tools and articles.
  • To show ads on the blog, the tools and our apps, and to measure our own advertising.
  • To send product updates and promotions, only where you agreed to receive them or where the law allows it, with a way to unsubscribe in every message.
  • To meet our legal, tax and accounting obligations.

Under UU PDP, and the GDPR where it applies, we rely on:

  • your consent, for example for optional analytics and advertising cookies and for marketing email. You can withdraw consent at any time;
  • a contract with you, or steps you ask us to take before one, such as a quote or a purchase;
  • a legal obligation, such as keeping invoices for tax purposes;
  • our legitimate interests in running, securing and improving the website and our services, where those interests are not outweighed by your rights.

6. Services we use

These providers process data on our behalf or as independent controllers. Each has its own privacy policy:

7. Cookies

We use cookies and similar technologies for the website to work, to remember your choices, to measure traffic and to show ads. Optional cookies load only after you allow them in the cookie banner, where the law requires it. You can change your choice at any time. The Cookie Policy lists them and explains how to turn them off.

8. Sharing

We do not sell your personal data. We share it only:

  • with the providers in section 6, for the purposes described there;
  • with people who work on your project, under a duty of confidentiality;
  • when the law, a court or a government authority requires it, or to protect the rights, safety and property of Arizu Studio, our users or others;
  • with a buyer or successor if our business, or part of it, is sold or reorganised. We will tell you before your data falls under a different privacy policy.

9. International transfers

Several providers in section 6 store or process data outside Indonesia, including in the United States and the European Union. When data leaves Indonesia we rely on the safeguards UU PDP allows, such as the provider's own data protection commitments and contractual terms, and we only use providers that offer them.

10. How long we keep data

  • Contact form messages and enquiries: as long as needed to answer you and follow up, normally no longer than 12 months, unless they lead to a project.
  • Project and invoice records: as long as Indonesian tax and accounting law requires.
  • Email delivery records: as long as needed to show what was sent and to handle problems with delivery.
  • Unsubscribe records: as long as we send email of that type, so we can keep honouring your choice.
  • Files sent to our tools: only as long as needed to produce the result, unless the tool page says otherwise.
  • Analytics, advertising and comment data: according to each provider's retention settings and policy.

11. Security

The website uses HTTPS. In our own database we encrypt the email addresses, IP addresses and other personal details we store, and we keep passwords and tokens only as one-way hashes. Access to our systems is limited to the people who need it and protected with strong passwords, limits on failed sign-ins and two-step sign-in for admin accounts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will tell you and the authorities without undue delay if a data breach puts your data at risk, as UU PDP requires.

12. Your rights

Under UU PDP, and the GDPR or other laws where they apply to you, you can:

  • ask what personal data we hold about you and receive a copy;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data, or to stop or limit processing it;
  • withdraw consent you gave earlier, without affecting what we did before;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • ask for your data in a commonly used electronic format;
  • complain to the data protection authority in your country.

Write to ariefzufar@arizu.id to use any of these rights. We may ask you to confirm your identity first. The Data Deletion page explains deletion requests step by step.

13. Children

The website and our services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, write to us and we will delete it.

14. Changes to this policy

When we change this policy, we publish the new version on this page with a new version number and effective date. If a change materially affects how we use data we already hold, we will also tell you in a reasonable way, for example by email or with a notice on the website.

15. Contact

Questions about this policy or about your data: ariefzufar@arizu.id, +62 877-7174-9217, or by post to Arizu Studio, Grand Depok City, Depok, Jawa Barat 16412, Indonesia.

This is version 1.0 of the Privacy Policy, effective 3 November 2026.

Questions about this document? Write to ariefzufar@arizu.id.