Privacy Policy

This site (oxra.dev) is run by OXRA, a web studio based in Indonesia (“we”, “us”, “our”). This policy explains what personal data we collect, why, and the rights you have under Indonesia's Personal Data Protection Law (UU No. 27 of 2022, “UU PDP”). For this data, we are the data controller (Pengendali Data Pribadi). Questions? Email hello@oxra.dev.

What we collect

We only collect what you choose to send us through the site:

• Your name
• Your email address
• Your phone / WhatsApp number (only if you give it)
• Your city or location (only if you give it)
• Your business name and type
• Your current website or Instagram, if you share it
• Anything you write in the message or notes fields

That's it. There is no account or login, and no tracking cookies. The only analytics we use (through Vercel) count visits in aggregate, without cookies and without identifying you.

If you use the chat assistant, the messages you type there are sent to Anthropic (the AI provider behind it) to generate a reply. We don't store those conversations, and they aren't used to identify you.

Why we collect it (lawful basis)

We use your details to reply to your message, give you a quote or a free consultation, and to provide the service if you decide to hire us. The lawful basis is your consent (given when you submit a form) and, once we agree to work together, the performance of our agreement.

Who handles your data

When you submit a form, your details are delivered by email through Resend (an email delivery provider) and land in our Google (Gmail) inbox. The site is hosted on Vercel, and the chat assistant is powered by Anthropic. These providers process data on our behalf under their own security and privacy terms, and may store it on servers outside Indonesia. We do not sell your data or share it with anyone else.

How long we keep it

We keep inquiries only as long as needed to respond to you. If we work together, we keep your details for the duration of the project plus a reasonable period for our records. You can ask us to delete your data at any time.

Your rights

Under UU PDP you can ask us to:

• See the personal data we hold about you
• Correct it if it's wrong
• Delete it
• Withdraw your consent
• Object to how it's used

Email hello@oxra.devand we'll action it. You also have the right to complain to the relevant Indonesian data protection authority.

Children

This service is intended for people aged 18 and over. We don't knowingly collect personal data from children.

Security

We take reasonable steps to keep your data safe, but no method of transmission or storage is completely secure.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.