Privacy Policy — Jiwa AI

1. Introduction

Jiwa AI ("we," "us," or "our") is a product operated by CV Kudapan Anak Bangsa (doing business as Imaji AI / Jiwa AI), registered in Indonesia with NIB 1211250010614, located at Jl. Boulevard Raya Blok 19 No. 1, 3, Desa/Kelurahan Pegangsaan Dua, Kec. Kelapa Gading, Kota Adm. Jakarta Utara, Provinsi DKI Jakarta 14250, available at jiwa-studio.space. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered influencer content platform.

By using Jiwa AI, you consent to the data practices described in this policy. If you have questions, contact us at vintatan@jiwa-studio.space.

2. Data We Collect

Account Data

When you sign in with Google OAuth, we collect:

Name
Email address
Profile image URL

Business Data

When you onboard a business, we collect and generate:

Website URL (user-provided)
Scraped website content (title, description, text, images — up to 2,000 characters)
Business name, description, industry, and target audience
Brand tone, keywords, colors, and visual theme (AI-analyzed)

Instagram Data

When you connect your Instagram Business account, we request the following permissions (scopes) via the Instagram Graph API:

instagram_business_basic — We access your Instagram profile information (username, biography, website, follower count, media count, profile picture URL) and recent posts (captions, media URLs, like counts, comment counts, timestamps, and permalinks).
instagram_business_content_publish — We publish content (feed posts, stories, and reels) to your Instagram account on your behalf, after you review and approve the content.

TikTok Data

When you connect your TikTok Business account, we request the following permissions (scopes) via the TikTok for Business API:

video.publish — We publish video content to your TikTok account on your behalf, after you review and approve it.
user.info.basic — We access your TikTok profile information (username, avatar, follower count) to personalize content generation.

Product Data

Product names, descriptions, and highlight angles (user-provided)
Product images (user-uploaded)

Phone Number

If you opt in to WhatsApp notifications, we collect your phone number in international format (e.g., +62xxx). This is optional.

Payment Data

When you purchase content packages, we store transaction IDs, package names, amounts, and transaction status. All card and billing information is handled directly by Airwallex, our PCI-compliant payment processor. We do not store your card details.

3. How We Use Your Data

Brand Analysis — Your website content and Instagram profile data are sent to Anthropic's Claude AI to analyze your brand strategy, tone, target audience, and products.
Content Generation — We use Claude AI to generate captions and hashtags, and Fal AI to generate images, using your brand, product, and influencer style data.
Instagram Publishing — Approved posts, stories, and reels are published to your connected Instagram Business account via the Instagram Graph API.
WhatsApp Notifications — If you opt in, we send post previews, onboarding confirmations, and dashboard links to your WhatsApp number via the Fonnte API.
Payment Processing — Credit package purchases are processed through Airwallex.

4. Third-Party Services

We share your data with the following third-party services, solely for the purposes described above:

Anthropic (Claude AI) — Receives business descriptions, Instagram profile data, and product information for brand analysis and caption generation.
Fal AI — Receives text prompts, product image URLs, and influencer style data for AI image generation.
Meta / Instagram Graph API — OAuth authentication, profile and media retrieval, and content publishing on your behalf.
TikTok for Business API — OAuth authentication, profile retrieval, and video content publishing on your behalf.
Google — OAuth authentication only.
Supabase — Database hosting (PostgreSQL) and image/video file storage.
Airwallex — Payment processing for content credit purchases.
Fonnte — WhatsApp message delivery for notifications.

5. Instagram Data Usage

Data retrieved from your Instagram account is used solely for content generation and publishing on your behalf. We do not sell, rent, or share your Instagram data with any third party for advertising or marketing purposes unrelated to our service.

Instagram access tokens are stored for up to 60 days (the duration of a long-lived token) and are used exclusively to interact with the Instagram Graph API on your behalf.

You may revoke Jiwa AI's access to your Instagram account at any time by visiting Instagram > Settings > Apps and Websites and removing Jiwa AI.

6. TikTok Data Usage

Data retrieved from your TikTok account is used solely for content generation and publishing on your behalf. We do not sell, rent, or share your TikTok data with any third party for advertising or marketing purposes unrelated to our service.

You may revoke Jiwa AI's access to your TikTok account at any time by visiting TikTok Settings > Privacy > Apps and Websites and removing Jiwa AI.

7. Data Storage & Security

Your data is stored on Supabase-hosted PostgreSQL databases and object storage.
All data is transmitted over HTTPS (TLS encryption in transit).
Sessions are managed via JWT tokens (NextAuth).
We implement reasonable technical and organizational measures to protect your data, but no method of electronic storage is 100% secure.

8. Data Retention

Instagram access tokens — Stored for up to 60 days (tokens auto-expire).
Business and post data — Retained until you request deletion.
Payment records — Retained as required by applicable law (typically 5–7 years for tax purposes).

9. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (see Section 10 below).
Disconnect your Instagram or TikTok account at any time.
Withdraw consent to data processing by ceasing use of the service.

To exercise any of these rights, contact us at claudiajasminewidjaja@gmail.com.

10. Data Deletion

To request deletion of your data, email claudiajasminewidjaja@gmail.com with the subject line "Data Deletion Request."

When we delete your business data, the following are permanently removed:

Your business profile and all associated settings
All generated posts, captions, and images
All product data and uploaded product images
Your Instagram account connection and stored access tokens

We will process deletion requests within 30 days. Note that data already published to Instagram remains on Instagram's servers and is subject to Meta's Privacy Policy.

11. Cookies & Tracking

We use functional session cookies (via NextAuth JWT) to keep you signed in. We do not use third-party analytics, advertising trackers, or marketing cookies.

12. Children's Privacy

Jiwa AI is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Your continued use of Jiwa AI after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Company: CV Kudapan Anak Bangsa (doing business as Jiwa AI)

Website: https://jiwa-studio.space

General inquiries: vintatan@jiwa-studio.space

Data privacy & deletion requests: claudiajasminewidjaja@gmail.com