Privacy Policy

This Privacy Policy explains how Havetap ("we") collects, uses, and protects your data when you use the Havetap platform — whether as a creator building a page (link-in-bio, products, payment links) or as a visitor browsing a creator's page.

We collect the following data, depending on how you use Havetap:

• Account data — name, email address, password (encrypted), and profile information you provide.
• Page content — titles, descriptions, images, links, and other content blocks you create on your page.
• Transaction data — order and payment details processed through payment links, including payment method (QRIS, e-wallet, bank transfer, credit card).
• Technical & analytics data — IP address, device/browser type (user agent), pages visited, referrer, and approximate city-level location (from IP address) for visit statistics.
• Connected app data — if you connect Havetap to a third-party app (e.g. ChatGPT) via OAuth, we record the access scopes you approved and the actions that app takes on your behalf.

• Providing and operating the Havetap service, including building and rendering creator pages.
• Processing transactions and payments between visitors and creators.
• Showing visit and click statistics to the creator who owns the page.
• Sending notifications about your account, transactions, or service updates.
• Preventing abuse, fraud, and violations of our Terms of Service.
• Carrying out actions you request through a connected app (e.g. creating a product or page via ChatGPT), strictly limited to the scopes you approved.

We do not sell your personal data. We share data as necessary with third-party service providers who help us run the platform, including:

• Payment providers (e.g. Xendit) — to process transactions and payment links.
• File/cloud storage (e.g. Cloudflare) — to store images and files you upload.
• Email service (e.g. n8n) — to send notifications and transactional email.
• IP geolocation services (e.g. ipinfo.io, ipwho.is) — to estimate visitor location for visit statistics.
• Apps you connect yourself (e.g. a ChatGPT Custom GPT) — only access data within the OAuth scopes you approved, and you can revoke that access at any time.

We may disclose data where required by law applicable in Indonesia, including official requests from law enforcement.

We use cookies and similar technologies to keep you logged in, remember preferences (such as display theme), and measure page performance. You can disable cookies through your browser settings, though some features may not work properly as a result.

We apply reasonable technical and organizational measures to protect your data, including password encryption and restricted internal access. Connected-app access tokens are stored as hashes, never as plain text. That said, no system is entirely risk-free — we encourage you to keep your account credentials confidential.

Under Indonesia's Personal Data Protection Law (UU PDP), you have the right to:

• Access and request a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your account and personal data, except data we're legally required to retain (e.g. transaction history).
• Withdraw consent to certain data processing, including revoking a connected app's access at any time.

To exercise these rights, please contact us using the details at the bottom of this page.

We retain your data for as long as your account is active, or as needed to fulfill the purposes described in this policy, including legal, accounting, and reporting obligations.

We may update this Privacy Policy from time to time. Significant changes will be communicated through this page or an in-app notification.

If you have questions about this Privacy Policy or want to exercise your rights over your personal data, contact us at support@havetap.com.