Legal Document
Privacy Policy
Bolink ("we", "our platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use Bolink services at bolink.id.
1. Information We Collect
1.1 Account Information
When you sign up, we collect:
- Email address
- Workspace name
- Password (encrypted, never stored as plain text)
1.2 Usage Information
When you use the platform, we collect:
- Microsite data you create (title, content, links)
- Form and lead data collected through your microsite
- Email broadcast history
- Feature usage analytics
1.3 Lead Data (Collected on Your Behalf)
When visitors fill in forms on your microsite, we collect the data you define in the form:
- Visitor name and email address
- Phone number (if requested)
- Other information per the form fields you define
1.4 Technical Data
- IP address and browser information
- UTM and referrer data for analytics
- Session cookies for authentication
1.5 Payment Data
We do not store credit card or bank account data. All payments are processed by Protocol, a PCI DSS certified third-party payment provider. We only store transaction confirmation and payment status.
2. How We Use Your Information
We use the information collected to:
- Provide the service:Operate microsites, forms, and Bolink platform features
- Process payments:Process subscriptions and top-up quota purchases
- Service communication:Send emails about your account, billing, and service updates
- Platform analytics:Improve user experience and platform performance
- Security:Detect and prevent platform abuse
- Legal compliance:Meet legal obligations applicable in Indonesia
We do not sell your data to third parties for advertising purposes.
3. Sharing Information
3.1 Third-Party Service Providers
We may share information with the following service providers:
3.2 Legal Obligations
We may disclose information if required by Indonesian law or valid court order.
- Supabase:Database storage and authentication
- Vercel:Hosting and infrastructure
- SendGrid (Twilio):Email broadcast delivery and system notifications
- Protocol:Payment processing
- Notion/Google Sheets:Only if you voluntarily enable these integrations
4. Data Storage and Security
- Data is stored on servers located in Southeast Asia (Singapore)
- Data is encrypted in transit (HTTPS/TLS) and at rest
- Access is restricted to personnel who need it
- Automatic backups are performed regularly
- Analytics data is retained for up to 12 months
- Account data is retained while the account is active and up to 30 days after deletion
5. Your Rights
As a user, you have the right to:
- Access:Request a copy of the personal data we store about you
- Correction:Update or correct inaccurate data
- Deletion:Request deletion of your account and data
- Portability:Export your lead data in CSV format
- Objection:Object to processing for specific purposes
- Unsubscribe:Stop receiving email broadcasts from specific workspaces
To exercise these rights, contact us at privacy@bolink.id.
7. Children's Data
Bolink services are not intended for individuals under 18 years of age. We do not knowingly collect data from children.
8. User Responsibility for Lead Data
As a Bolink user collecting lead data through this platform, you are responsible for:
- Obtaining valid consent from visitors before collecting their data
- Providing clear information about how the data will be used
- Complying with applicable personal data protection laws in Indonesia, including UU No. 27/2022 on Personal Data Protection
- Respecting data deletion requests from your leads
9. Policy Changes
We may update this Privacy Policy from time to time. Significant changes will be notified via email or dashboard notification. Continued use of the service after changes constitutes your agreement.
10. Contact
For privacy-related questions:
Email: privacy@bolink.id
Website: bolink.id/privacy