Privacy Policy

When you use Ibraa Agency's services, we may collect the following types of information:

• Account Information: Name, email address, and profile picture when you sign up via Clerk authentication.
• Contact Details: Phone number and WhatsApp number that you provide for project communication and invoice notifications.
• Project Data: Information you submit through our platform, including project descriptions, requirements, and communication with our team.
• Payment Information: Invoice records and payment history. We do not store full credit card numbers. Payments are processed through secure bank transfer or third-party payment gateways.
• Usage Data: Automatically collected data such as IP addresses, browser type, pages visited, and time spent on our platform. This is collected through Cloudflare Analytics and is anonymized.

Your information is used solely for the purpose of providing and improving our services:

• To create and manage your account
• To process and track your projects and orders
• To generate and send invoices to your WhatsApp or email
• To communicate with you regarding project updates, support requests, and service announcements
• To improve our platform's performance and user experience
• To comply with legal obligations and prevent fraud

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We take the security of your data seriously. Here's how we protect it:

• Authentication: We use Clerk for secure authentication. Your passwords are never stored on our servers.
• Database: Application data is stored in Convex, a secure real-time database with encryption at rest and in transit.
• File Storage: Uploaded files and documents are stored in Cloudflare R2, with server-side encryption and access control.
• CDN & DDoS Protection: Our platform is served through Cloudflare's global network, providing built-in DDoS protection, SSL/TLS encryption, and Web Application Firewall (WAF).
• Hosting: Our application is deployed on Vercel with automatic HTTPS and secure environment variables.
• Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3.

Ibraa Agency uses minimal cookies and tracking:

• Essential Cookies: Required for authentication (Clerk session tokens) and core platform functionality. These cannot be disabled.
• Analytics: We use Cloudflare Web Analytics, which is privacy-first and does not use cookies or collect personal data. It provides anonymized traffic insights without tracking individual users.
• No Third-Party Trackers: We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

You can configure your browser to block cookies, but this may affect platform functionality.

We rely on the following trusted third-party services to operate our platform:

• Clerk — Authentication and user management. Privacy Policy
• Convex — Real-time database. Privacy Policy
• Cloudflare — CDN, DNS, DDoS protection, and analytics. Privacy Policy
• Vercel — Application hosting. Privacy Policy
• WhatsApp (Meta) — Invoice notifications. Privacy Policy

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request transfer of your data to another service provider.
• Objection: Object to processing of your personal data.

To exercise any of these rights, contact us at privacy@ibraa.biz.id. We will respond within 30 days.

We retain your personal data only for as long as necessary:

• Account data: Retained while your account is active. Upon account deletion, data is removed within 30 days.
• Project & order data: Retained for 5 years after project completion for legal and accounting purposes.
• Invoice records: Retained for 7 years as required by Indonesian tax regulations.
• Analytics data: Anonymized and retained indefinitely for platform improvement.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@ibraa.biz.id
• WhatsApp: +62 856-0069-7366
• Address: Available upon request

We take privacy seriously and will address your concerns promptly.