Privacy Policy

1. Who we are and how to reach us

Gabia Studio is a creative software house in Indonesia that builds websites, web apps, design and social media content for businesses.

For anything about your personal data, message us on WhatsApp at +62 851-1710-0214. Write "Privacy" at the start of your message so it reaches the right person.

2. What we collect and why

Chats with Gaby. When you write to Gaby, we receive your messages, Gaby's replies, a random conversation number, the language you wrote in and the time. We use them to answer you, and later to see which questions visitors ask so we can improve our answers and services. Gaby works without your name or phone number; please don't share sensitive information such as ID numbers, health details or bank details in the chat. Legal basis: your consent, which you give by sending a message.

How the website is used. Our own visitor statistics record which pages are viewed, which buttons are clicked, where a visit came from (for example Instagram or Google, or a campaign tag in the link), whether the device is a phone or a computer, and a random visit number that your browser keeps for one day. They use no cookies and store no IP address, so they cannot tell us who you are. Legal basis: our legitimate interest in understanding how the site is used.

Messages on WhatsApp. When you tap a WhatsApp button, WhatsApp opens with a draft message. Nothing is sent until you send it. The conversation then takes place on WhatsApp, and we see your WhatsApp name and number and what you write.

Project and billing details. If you become a client, we keep your name, business name, contact details and address, the project details, and the quotations, invoices and receipts we issue to you. Legal basis: the agreement between us, and our legal obligation to keep financial records.

Security. To stop abuse of the chat, the server briefly holds your IP address in memory to limit how many messages one connection can send per minute. It is not stored.

3. What stays in your browser

The 3D version of the site saves the adventurer name and character you choose, and whether you turned the sound on, in your own browser. This never reaches us, and you can remove it by clearing your browser's site data.

4. How long we keep it

• Chats with Gaby: 6 months, then deleted automatically.
• Visitor statistics: 24 months, then deleted automatically. They contain no data that identifies you.
• WhatsApp conversations: for as long as we work together, and up to 12 months after the last message if no project follows.
• Quotations, invoices, receipts and the project details in them: 10 years, the period Indonesian tax law requires us to keep financial records.

5. Who else handles your data

We do not sell your data, and we do not use it for advertising. These services handle it on our behalf, or because you chose to use them:

• Google (Gemini API) receives the messages you write to Gaby so its AI model can write Gaby's reply.
• Vercel hosts this website and processes the technical data any website receives, such as IP addresses, to deliver pages and protect the site. It also provides cookie-free, aggregated visit statistics.
• PT Awan Data Teknologi provides the server in Indonesia where our internal system stores Gaby chats, visitor statistics and project records.
• WhatsApp (Meta) carries the conversations you start with us there, under WhatsApp's own privacy policy.
• Discord carries our team's internal notifications. These name projects, clients and amounts, but not contact details.

Google, Vercel, Meta and Discord may process data on servers outside Indonesia. We use them under their published data protection terms, and by using the chat or WhatsApp you agree to this transfer.

6. AI in our work

Gaby is an AI assistant, not a person. Its answers are general information and can contain mistakes; the price and scope of a project are only final once our team sends you a written quotation. Gaby makes no decisions about you.

Our team also uses AI to help draft blog articles and to read the receipts for our own expenses. We do not put client data into these AI tools.

7. Your rights

Under Law No. 27 of 2022 you can ask us to:

• tell you what data we hold about you and how we use it, and give you a copy of it;
• correct data that is wrong or incomplete;
• delete your data, or stop or pause using it;
• withdraw the consent you gave, for example for your Gaby chats;
• send you your data in a format you can take elsewhere.

Message us on WhatsApp as described in section 1. Because Gaby chats carry no name, tell us roughly when you chatted and what you asked so we can find the conversation. We answer requests within 3 × 24 hours, as the law requires. We may keep financial records we are legally required to keep, and we will tell you if that applies.

If you are not satisfied with our answer, you can complain to the personal data protection authority in Indonesia.

8. How we protect it

The website and our internal system only use encrypted connections. Only our team can open the internal system, each with their own account and two-step verification, and every action is logged. Backups are encrypted.

If personal data is ever exposed, we will tell the people affected and the authority in writing within 3 × 24 hours: what was exposed, when and how, and what we are doing about it.

9. Children

Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you think a child has given us their data, tell us and we will delete it.

10. Changes to this policy

When we change this policy, we update it on this page with a new date before the change takes effect. If a change affects how we use the data of current clients, we tell them directly.