Privacy Policy

Account and business information you provide: name, email address, phone number, and business details.

Payout information: bank name, account holder name, and account number, needed to send you your earnings.

Order and payment records generated when your customers buy from your store, including the Buyer’s name, email address, phone number, and — for physical goods — the delivery address they enter at checkout.

Domain registration details, where you buy a domain through us, including the registrant contact information the registry requires.

Usage and device data: log data and analytics events used to operate, secure, and improve the service.

To perform our contract with you: providing and maintaining the service, processing subscriptions, calculating and paying out your earnings, and providing support.

To meet legal obligations: keeping accounting and tax records, and responding to lawful requests from authorities.

For our legitimate interests, balanced against your rights: preventing fraud and abuse, securing the platform, and improving the product.

We do not sell your personal data, and we do not use it to train third-party AI models.

When a Buyer purchases from a Seller’s store, we process the Buyer’s details in order to complete the order, send the receipt, and enable delivery. The Seller sees these details in their dashboard so they can fulfil the order.

Sellers must use Buyer data only to fulfil and support that order and as their own privacy notice permits, and must not repurpose it for unrelated marketing without the Buyer’s consent.

Payment processing: DOKU (PT Nusa Satu Inti Artha) collects Buyer payments. Payouts to Sellers are made by bank transfer from our own account and involve no additional processor.

Infrastructure and delivery: Supabase (database and authentication, hosted in Singapore), Vercel (application hosting), Resend (transactional email), and Cloudinary (media storage).

Domain registration: IDCloudHost as registrar, and the relevant registry (for .id domains, PANDI), where you purchase a domain through us. Registry rules may require some registrant details to be recorded publicly.

These providers process data on our behalf and only as needed to deliver the service. Some are located outside Indonesia, so your data may be transferred abroad; where that happens we rely on the provider’s contractual data protection commitments.

We keep your account data for as long as your account is active.

After you close your account we delete your sites and anonymize your profile. We retain order, payment, and accounting records for 10 years from the end of the relevant financial year, as required of Indonesian companies for corporate document and tax purposes.

Log and analytics data is kept for a shorter period appropriate to its purpose and then deleted or aggregated.

Under the Personal Data Protection Law you may request access to your personal data, correction of inaccurate data, deletion, an end to processing, and a copy of your data in a usable format. You may also withdraw consent where processing rests on consent.

You can access and correct your account information in-app at any time, and close your account to have your profile anonymized, subject to the retention rules in section 5.

For any other request, contact support@illoow.com from your account email address. We will respond within the period required by law, and will tell you if we cannot act on a request and why.

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and separation of production credentials.

No method of transmission or storage is completely secure and we cannot guarantee absolute security.

If a personal data breach occurs that affects you, we will notify you and the relevant authority within the timeframe required by the Personal Data Protection Law.

The platform is intended for business use by adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy. Material changes will be notified in-app or by email, and the revision date at the top of this page will change.

Questions or data requests: support@illoow.com.

PT Lentera Emas Kehidupan, Lingkungan Delod Pempatan Lukluk, Desa Lukluk, Kecamatan Mengwi, Kabupaten Badung, Bali 80351, Indonesia.