Privacy Policy

Last updated: 14 October 2026

1. Introduction

Welcome to Konektor (Konektor.id), a service operated by PT Global Raya Oris Wijaya. We are committed to protecting your privacy and ensuring your personal data is handled securely and responsibly. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

We collect several types of information to provide and improve our services:

  • Account Data: Name, email address, and other contact information when you register.
  • Message Content and Customer Contacts: Names, phone numbers, messages, and media that you and your customers send through channels you connect to the Inbox, such as WhatsApp, Instagram, and Messenger, and social media comments such as TikTok. We encrypt message content before we store it.
  • Tracking Data: Click IDs (GCLID, FBCLID, TTCLID), IP address, browser type, and ad interaction data.
  • Conversion Data: Information about your website transactions or events.
  • Enhanced Matching: Identity data (email/phone) hashed (one-way encrypted) to improve attribution accuracy on Google & Meta platforms.
  • Payment Information: Transaction data processed through secure third-party payment providers.

3. Third-Party Services & Infrastructure

To operate Konektor, we use infrastructure and services from third-party providers. Their use of data is subject to their respective privacy policies:

4. Data Sharing, Transfer, and Disclosure

We may share, transfer, or disclose user data, including Google user data, only for the following purposes:

  • Ad Platform Integrations: Google Ads, Meta, TikTok, and OpenAI (ChatGPT Ads) to send conversion data and enhanced matching based on your configuration.
  • Message Channels: Meta (WhatsApp Business) and the messaging partners you choose (Kapso, Kirimdev, Qontak, Repliz) receive and send messages for the channels you connect. Message data goes only to the partners you choose.
  • Google Authentication: When you choose Google login, we use basic Google account data for authentication and session management, and tokens to access the APIs you authorize.
  • Payment Providers: Tripay and Creem process payment transaction data.
  • AI Providers: OpenRouter processes text for AI features. The AI Processing section gives the details.
  • Infrastructure & Security: Cloudflare runs our infrastructure, databases, file storage, email delivery, and security layer. MXroute stores the email that you send to our support team.
  • AI Demo: Anam processes your voice and name when you use the AI video call demo on our site.
  • Legal Obligations: Disclosure may occur if required by law or a valid authority request.

We do not sell personal data. Data sharing is limited to operating the services you use.

Card payments through Creem

Card payments are available through Creem. This section explains data processing when you use that option.

Creem acts as merchant of record, the recorded seller for card transactions. Creem processes payments, issues transaction receipts, and handles applicable transaction taxes.

Konektor sends your account email address, selected plan, and account and subscription references to connect the payment with your service. You enter card details and your billing address on the Creem payment page. Konektor receives payment status and transaction details needed to manage your subscription. Konektor does not store full card numbers or card security codes.

Creem acts as a data controller for payment data processing within its responsibilities. Konektor manages Konektor account and service data. Deleting a Konektor account does not automatically delete payment records that Creem must retain for legal obligations.

Read the Creem privacy notice.

5. Konektor Connector for Claude

When you connect Konektor to Claude, you authorize Konektor to send requested tool results from one selected workspace to Anthropic.

  • Data sent: Konektor sends a result only after Claude invokes a tool that you enabled. Results can include workspace profile and usage data, aggregate metrics, conversion-feedback identifiers, a bounded lead list, or one selected lead. Lead data can include names, email addresses, phone numbers, and other personal data stored in the workspace.
  • Authorization and metadata retention: Konektor removes expired authorization requests and codes after 24 hours. Konektor retains expired or revoked access hashes for up to 30 days. Konektor retains a revoked consent record for up to 90 days when no access record references it.
  • Access revocation: You can disconnect the connector from Customize > Connectors in Claude or revoke the grant from Developer Settings > Claude in Konektor. Konektor rejects the next call after revocation.

Anthropic processes and may retain tool results under its separate policies. Konektor retention schedules do not delete data from Claude systems or conversation history. Open the Anthropic Privacy Center.

6. AI Processing

Some features use AI: the Wulan assistant, reply suggestions in the Inbox, and AI auto-replies that you turn on.

  • AI provider: Konektor sends the text that a feature needs to AI models through OpenRouter. We set OpenRouter to use only AI providers that do not collect that data.
  • Phone numbers: Before AI reads a customer message, Konektor replaces the phone numbers in that message with a placeholder.
  • Model training: Konektor does not train AI models on your customer messages.

7. Data Retention and Deletion

We retain data only as long as needed for service purposes and legal obligations. Key details:

  • Account Data: Retained while your account is active. You may request deletion at any time via email.
  • Integration Data & Google Tokens: Retained while integrations are active. After integration revocation or account deletion, this data is removed from active systems within 30 days.
  • Operational & Security Logs: Retained temporarily for fraud prevention, audits, and security, then periodically deleted or anonymized.
  • System Backups: Cloudflare keeps a 30-day history of database changes for recovery. The Konektor team also keeps separate backup copies. Data deleted from active systems can remain in those copies until they are replaced or deleted.

Deletion requests are processed within 30 days of receipt, unless retention is required by law.

8. Your Data Rights

You can ask us to:

  • Access: Give you a copy of the personal data that we keep about you.
  • Correction: Correct data that is wrong or incomplete.
  • Deletion: Delete your personal data, except data that the law requires us to keep.
  • Export: Give you your data in a machine-readable format, such as CSV or JSON.

Send your request to privacy@konektor.id. We answer within 30 days after we verify your identity. You can also export leads and conversations yourself from the dashboard.

If you are a customer of a business that uses Konektor, send your request to that business first. We help that business answer your request.

9. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Konektor platform.
  • Receive, store, and send messages for the channels you connect.
  • Send conversion data to Meta, Google, TikTok, and OpenAI (ChatGPT Ads) based on your configuration.
  • Run the AI features you use, such as reply suggestions and auto-replies.
  • Process transactions and send payment-related notifications.
  • Detect, prevent, and address technical issues or fraud.

10. Data Security

Your data security is our priority. We use SSL/TLS encryption through Cloudflare and implement industry-standard security practices to protect your information from unauthorized access.

11. Contact Us

If you have questions about this Privacy Policy, please contact us via email at privacy@konektor.id or mail to the operational address of PT Global Raya Oris Wijaya.