Privacy Policy

Effective Date: February 14, 2026

Last Updated: February 14, 2026

PT AIRA TEKNOLOGI INDONESIA ("Company", "we", "us", or "our") operates Clip, accessible at clip.bikinkonten.ai ("Service"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use the Service.

We are committed to complying with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable data protection regulations.

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you register, we collect your name, email address, and profile picture (if using Google OAuth).
• Payment Information: When you subscribe to a paid plan, payment details are collected and processed by our payment partner, Xendit. We do not store your credit card numbers directly.
• User Content: YouTube URLs you submit, caption edits, style preferences, and exported clips.
• Communications: Messages you send to us via contact forms, email, or business inquiries.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, clips generated, processing minutes consumed, and session duration.
• Device Information: Browser type, operating system, device type, screen resolution, and language settings.
• Log Data: IP address, access timestamps, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies and local storage for authentication tokens, user preferences, and analytics (see Section 5).

1.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google.
• YouTube: We access publicly available video data (titles, captions, thumbnails) based on URLs you provide. We do not access your YouTube account or channel.

2. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To process videos, generate clips, render captions, and deliver the features you request.
• Account Management: To create and manage your account, authenticate your identity, and maintain session security.
• Payment Processing: To process subscriptions, generate invoices, and manage billing through Xendit.
• Communication: To send important service notifications, account updates, billing confirmations, and respond to your inquiries.
• Improvement: To analyze usage patterns, fix bugs, improve features, and develop new functionality.
• Security: To detect and prevent fraud, abuse, and unauthorized access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. AI Processing

3.1 How We Use AI

The Service uses Google Gemini AI to analyze video transcripts and identify trending segments. During processing:

• Video transcripts are sent to Google Gemini API for analysis
• AI generates clip suggestions, virality scores, and caption text
• AI-generated outputs are associated with your account

3.2 Data Retention for AI

• Transcript data sent to Google Gemini is processed in accordance with Google's API data policies
• We do not use your content to train our own AI models
• Processed clip data is stored in our systems as part of your project data

4. How We Store and Protect Your Information

4.1 Storage

• Database: Account data and project metadata are stored in MongoDB.
• Cloud Storage: Processed video clips and assets are stored on Google Cloud Storage (GCS).
• Temporary Files: During processing, temporary files are stored on our servers and automatically deleted after upload to cloud storage.
• Location: Our servers and cloud infrastructure may be located outside Indonesia. By using the Service, you consent to the transfer of your data to these locations.

4.2 Security Measures

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure token-based authentication (JWT)
• Access controls and role-based permissions
• Regular security reviews and updates
• Secure credential storage (hashed passwords where applicable)

4.3 Data Retention

• Account Data: Retained for as long as your account is active. Upon deletion, we remove your data within 30 days, except where retention is required by law.
• Project Data (clips, captions): Retained as long as your account is active. You may delete individual projects at any time.
• Payment Records: Retained for a minimum of 5 years as required by Indonesian tax regulations.
• Log Data: Retained for up to 12 months for security and debugging purposes.

5. Cookies and Local Storage

5.1 What We Use

| Type | Purpose | Duration | |------|---------|----------| | Authentication Token | Keeps you logged in securely | Session / until logout | | User Preferences | Stores language, theme, and editor settings | Persistent | | Analytics | Helps us understand usage patterns | Up to 12 months |

5.2 Managing Cookies

You can manage or delete cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service, particularly authentication.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

6.1 Service Providers

We share information with trusted third-party service providers who assist in operating the Service:

• Xendit: Payment processing (payment details, billing info)
• Google Cloud / Gemini API: AI video analysis (transcript data)
• Google Cloud Storage: Cloud storage (processed video clips)
• Email Service Provider: Transactional emails (email address, name)

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with applicable laws or legal processes
• Protect the rights, property, or safety of the Company, our users, or the public
• Detect and prevent fraud or security issues

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

7. Your Rights

Under Indonesian data protection law (UU PDP) and other applicable regulations, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may request correction of inaccurate or incomplete personal data.
• Right of Deletion: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time by deleting your account or contacting us.
• Right to Data Portability: You may request your data in a structured, commonly used format.
• Right to Object: You may object to certain types of data processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that we have collected information from a child under 16 without parental consent, we will delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Indonesia, including countries where our cloud infrastructure is located. By using the Service, you consent to such transfers. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated Privacy Policy on the Service
• Update the "Last Updated" date at the top of this page
• Send an email notification for significant changes

Your continued use of the Service after the changes take effect constitutes your acceptance of the updated Privacy Policy.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Indonesia, including:

• Law No. 27 of 2022 on Personal Data Protection (UU PDP)
• Law No. 1 of 2024 on Electronic Information and Transactions (UU ITE)
• Government Regulation No. 71 of 2019 on the Organization of Electronic Systems and Transactions (PP PSTE)

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

PT AIRA TEKNOLOGI INDONESIA Email: [email protected] Website: clip.bikinkonten.ai

By using Clip, you acknowledge that you have read and understood this Privacy Policy.