Privacy Policy

1. Introduction

Welcome to DikenalAI ("DikenalAI", "We", or the "Platform").

DikenalAI is a Software-as-a-Service (SaaS) platform that helps brand owners, businesses, agencies, and companies understand and improve their brand and product visibility on search platforms powered by artificial intelligence (AI).

DikenalAI's services include AI visibility analysis, brand mentions, citation sources, product feed management, AI commerce distribution, and integrations with third-party services, including Google Search Console and Google Merchant Center.

We are committed to protecting the privacy and Personal Data of our users. This Privacy Policy explains how We collect, use, store, process, disclose, and protect user information when using the Platform.

This policy is prepared with regard to the laws of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection (the "PDP Law"), and the Google API Services User Data Policy where users connect a Google account to the Platform.

2. Platform Operator

The DikenalAI Platform is operated by:

• Company name: PT Solusi Sistem Teknologi
• Product name: DikenalAI
• Website: https://dikenalai.com
• Office address: Ruko Prisma Kedoya A20, Jalan Taman Kedoya Raya Nomor 11, RT 001/RW 007, Kebon Jeruk, West Jakarta, DKI Jakarta 11520, Indonesia
• Contact email: [email protected]

In this Privacy Policy, the party operating DikenalAI is referred to as "We".

3. Information We Collect

We may collect and process the following categories of information:

A. Account and user information

• Full name.
• Email address.
• Company or brand name.
• Job title or user role.
• Authentication and account identification information.
• Subscription and transaction information.

B. Business and product information

• Brand name and business description.
• Website URL.
• Product and service information.
• SKU, price, availability, and product description information.
• Competitor information entered by the user.
• Catalog and product feed information.

C. Platform usage information

• User activity on the Platform.
• Assessment and analysis history.
• Prompts and AI analysis results.
• Device, browser, IP address, and system log information.
• Diagnostic and security information.

4. Google Services Integration and Use of Google User Data

DikenalAI offers integrations with Google services through Google OAuth 2.0 and Google APIs. These integrations let users connect their Google accounts directly to the Platform to access the data needed for DikenalAI features.

The Google services that can be integrated include:

A. Google Search Console (GSC)

With the user's permission, DikenalAI may access information available through the Google Search Console API, within the OAuth scopes the user approves, including:

• The list of website properties the user can access.
• Search performance information.
• Search clicks, impressions, CTR, and average position.
• Search data by query, page, country, and device, to the extent available through the API and the permissions granted.

This data is used to help users understand organic search performance, analyze their website, and generate relevant insights on the Platform.

B. Google Merchant Center (GMC)

With the user's permission, DikenalAI may access Google Merchant Center information within the approved OAuth scopes, including relevant data such as:

• Merchant Center account information.
• Product and catalog information.
• Product identifiers and SKUs.
• Product names and descriptions.
• Product prices and availability.
• Product feed information and product status, to the extent available through the API and the permissions granted.

This data is used to help users manage, analyze, and optimize product feeds and the distribution of product information.

C. Purposes for using Google User Data

Information obtained through Google APIs is used only to:

1. Provide the Google integration features the user requested and enabled.
2. Display and analyze Google data on the DikenalAI dashboard.
3. Generate reports and insights relevant to the services used.
4. Help users identify opportunities to optimize their website, search performance, and product catalog.
5. Maintain the security, stability, and function of Platform integrations.

We apply the principle of minimum necessary access and request only the OAuth permissions needed to provide the relevant feature.

5. Storage and Protection of Google User Data

Data obtained through Google APIs may be processed and stored in DikenalAI infrastructure to the extent needed to provide the features the user requested.

Authentication information and OAuth credentials are used to maintain the connection between the user's Google account and the Platform.

We strive to apply appropriate security measures, including:

• Access restrictions based on authority.
• Protection of credentials and authentication tokens.
• Use of encrypted connections.
• Monitoring of access and system activity.
• Securing infrastructure and databases.
• Security incident handling procedures.

We do not request or store users' Google account passwords. Authentication takes place through the official Google OAuth mechanism.

6. Google API Services Limited Use Disclosure

Specifically:

1. We use Google User Data only to provide or improve features that are visible and relevant in the DikenalAI user interface.
2. We do not sell Google User Data to third parties.
3. We do not use Google User Data for advertising, retargeting, or selling data.
4. We do not use Google User Data to determine creditworthiness or for lending purposes.
5. We do not use Google User Data to train, develop, or improve generative AI/ML models or general machine learning models.
6. We do not allow humans to read Google User Data unless the user gives affirmative consent for specific access, it is necessary for security or abuse investigations, it is required by law, or it is permitted under applicable Google terms.
7. We do not share Google User Data with others except as permitted by the Google API Services User Data Policy, including with service providers needed to provide features the user requested and within the limits of that policy.

Use of Google User Data is limited to the purposes described in this Privacy Policy.

7. Use of AI Technology and Third Parties

DikenalAI may use third-party technology services to support Platform operations, including cloud infrastructure, database, security, and AI service providers.

Business information and other information provided directly by users may be processed by AI providers to generate assessments, analyses, recommendations, and insights.

However, Google User Data obtained through Google APIs will not be sent to AI model providers for model training or for processing beyond the use permitted under the Google API Services User Data Policy.

Third-party service providers are given access only to the extent needed to perform the relevant service functions and must comply with appropriate confidentiality and data protection obligations.

8. Disclosure and Sharing of Information

We do not sell or rent users' Personal Data.

User information may be disclosed on a limited basis to:

• Infrastructure and hosting providers.
• Technology service providers that support Platform operations.
• Payment providers, where relevant.
• Authorities where required by law.
• Parties involved in a corporate transaction, in accordance with applicable law and data protection obligations.

We do not share Google User Data for commercialization, third-party marketing, or the sale of databases.

9. Data Transfers Outside Indonesia

In providing the services, We may use technology infrastructure or service providers located outside Indonesia.

Where Personal Data is processed or transferred across borders, We will apply the requirements and safeguards for transferring Personal Data under Article 56 of the PDP Law and its implementing regulations.

We strive to ensure that Personal Data remains protected during such transfer and processing.

10. Data Retention

We retain user information only as long as needed to:

• Provide the DikenalAI services.
• Fulfill the processing purposes described.
• Meet contractual obligations.
• Meet legal obligations.
• Resolve disputes and maintain Platform security.

When a user disconnects a Google integration, We will stop access through that connection and delete or deactivate the related credentials.

Stored data will be deleted at the user's request or in accordance with the applicable retention policy, while observing legal obligations and legitimate retention needs.

Data that is no longer needed will be deleted or destroyed in accordance with applicable provisions.

11. Your Rights as a Personal Data Subject

Under the PDP Law, users have rights over their Personal Data, including:

1. To receive information about Our identity and the purposes of processing Personal Data.
2. To complete, update, and correct Personal Data.
3. To access and obtain a copy of Personal Data.
4. To request that processing of Personal Data stop, as provided by law.
5. To withdraw consent to the processing of Personal Data.
6. To request deletion or destruction of Personal Data, as provided by law.
7. To restrict or postpone the processing of Personal Data, as provided by law.
8. To object to decisions based solely on automated processing where the legal conditions are met.
9. To file a complaint or lawsuit in accordance with applicable law.

Requests relating to these rights can be sent to [email protected].

We will respond to requests within the deadlines and requirements set by law.

12. Revoking Google OAuth Access

Users can revoke DikenalAI's access to their Google account at any time through their Google account security settings.

Once access is revoked:

• DikenalAI can no longer retrieve data through the revoked authorization.
• Features that depend on the integration may stop working.
• Users can request deletion of related data through DikenalAI's official contact.

Revoking Google access and requesting deletion of stored data are two separate actions. Users can make both requests if needed.

13. Data Security and Incident Handling

We apply reasonable technical and organizational measures to prevent unauthorized access, use, alteration, disclosure, or destruction of Personal Data.

If a Personal Data protection failure occurs that meets the requirements of the PDP Law, We will give written notice to the affected data subjects and the competent authority within 3 x 24 hours, as required by law.

14. Cookies and Tracking Technologies

The Platform may use cookies or similar technologies to:

• Maintain user sessions.
• Manage authentication.
• Remember user preferences.
• Improve Platform performance and security.
• Analyze Platform usage.

Users can manage cookies through their browser settings. Note that restricting certain cookies may affect how the Platform works.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in services, technology, or legal requirements.

Material changes affecting the use of Personal Data will be notified to users through the Platform or relevant communication channels before they take effect, as required by law.

16. Governing Law

This Privacy Policy is interpreted and applied under the laws of the Republic of Indonesia.