Privacy Policy

Last updated: April 10, 2026

Lingkari ("we", "us", or "the platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect the information you provide when using our services or signing up for our waitlist. By accessing or using the Lingkari platform, you agree to the practices described in this policy.

If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact us to request deletion of your data.

1. Definitions and Key Terms

To help you understand this Privacy Policy, the following terms have specific meanings:

Personal Data — any information that identifies or can be used to identify you as an individual, such as your name, email address, or IP address.
Processing — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
Service — the Lingkari platform, website, and any related applications or tools we provide.
User — any individual who accesses or uses the Service, including waitlist registrants and platform users.
Device — any internet-connected device such as a phone, tablet, or computer used to access the Service.
Cookies — small data files stored on your Device by your web browser when you visit our website.
Third-Party Services — external platforms or services integrated with Lingkari, such as WhatsApp Business API, Meta (Instagram, Messenger), and analytics providers.
Data Controller — the entity that determines the purposes and means of processing Personal Data. In this context, Lingkari is the Data Controller.
Data Processor — an entity that processes Personal Data on behalf of the Data Controller, such as our hosting or analytics providers.

2. Information We Collect

a. Information You Provide Directly

When you sign up for the Lingkari waitlist or create an account, we collect:

Full name — to personalize our communications with you.
Email address — to send updates, access invitations, and service-related notifications.
Company name and role — to understand your business needs and tailor our offerings.
Phone number (if provided) — to enable communication features and account verification.

b. Information Collected Through Platform Use

When the platform becomes available, we may also collect:

Customer conversation data — messages and interactions you manage through Lingkari across connected channels (WhatsApp, Instagram, Messenger).
CRM data — contacts, leads, deal pipelines, and notes you create within the platform.
Campaign data — marketing campaigns, templates, and performance metrics you generate.
User-generated content — files, images, and documents you upload to the platform.

c. Automatically Collected Information

When you visit our website or use the platform, we may automatically collect:

Log data — IP address, browser type and version, operating system, referring URL, and pages visited.
Device information — device type, screen resolution, unique device identifiers, and language settings.
Usage data — features used, actions taken, time spent on pages, and interaction patterns.
Location data — approximate geographic location derived from your IP address.

3. How We Use Your Information

We use the information we collect for the following purposes:

a. Providing and Operating the Service

Managing the waitlist and granting early access to the platform.
Creating and maintaining your account.
Enabling omnichannel messaging, CRM features, and campaign management.
Processing and routing customer conversations across connected channels.
Providing AI-powered features such as conversation summaries, analytics, and suggestions.

b. Communication

Sending product updates, launch announcements, and feature releases.
Responding to your questions, feedback, and support requests.
Sending transactional notifications related to your account or service usage.

c. Improvement and Analytics

Analyzing usage patterns to improve platform features, performance, and user experience.
Conducting research and development on new features.
Monitoring and preventing technical issues, errors, and security threats.

d. Legal and Compliance

Complying with applicable laws, regulations, and legal processes.
Enforcing our Terms of Service and protecting our rights.
Detecting, preventing, and addressing fraud, abuse, or security incidents.

We do not use your data for third-party advertising or sell it to any third party.

4. Third-Party Integrations

Lingkari connects with third-party platforms to provide omnichannel CRM functionality. When you connect these services, we may access and process data as described below.

a. WhatsApp Business API (Meta)

When you connect your WhatsApp Business account to Lingkari, we may access:

Your WhatsApp Business account information and phone number.
Message templates you create and manage.
Inbound and outbound messages between you and your customers.
Messaging analytics and delivery status.

All WhatsApp data is processed in accordance with Meta's Platform Terms and WhatsApp Business Policy. We do not store WhatsApp message content longer than necessary to provide the service.

b. Meta (Instagram and Messenger)

When you connect your Instagram or Facebook accounts, we may access:

Direct messages and comments from your business page or professional account.
Basic profile information of your page or account.
Messaging analytics and engagement data.

Data accessed through Meta APIs is used strictly to enable omnichannel conversation management and is governed by Meta's Platform Terms.

c. Other Integrations

As Lingkari evolves, we may add integrations with other platforms (e.g., email providers, e-commerce tools, payment gateways). Each integration will only access data necessary to provide the connected functionality, and we will update this policy accordingly.

We do not sell, rent, or trade your personal information. We may share your data with trusted third parties only in the following circumstances:

Service providers and data processors: Technical partners who help us operate the platform, such as cloud hosting, email delivery, analytics, and customer support tools. They only access data necessary for their tasks, are bound by confidentiality agreements, and may not use your data for any other purpose.
Connected third-party platforms: When you connect WhatsApp, Instagram, Messenger, or other services, your data may be shared with those platforms as necessary to enable the integration, subject to their respective privacy policies.
Legal obligations: When required by law, regulation, court order, or governmental request applicable in Indonesia or other relevant jurisdictions.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.
Protection of rights: When disclosure is necessary to protect the rights, property, or safety of Lingkari, our users, or the public.

6. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes described in this policy. The retention period depends on several factors:

The nature and sensitivity of the data.
The purposes for which the data is processed.
Whether your account or waitlist registration is active.
Applicable legal, regulatory, or contractual obligations.
The need to resolve disputes or enforce our agreements.

When your data is no longer needed, we will securely delete or anonymize it. Anonymized data that can no longer identify you may be retained for statistical analysis and service improvement.

7. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
Encryption at rest: Stored data is encrypted using industry-standard encryption algorithms.
Access controls: Internal access to Personal Data is restricted to authorized personnel on a need-to-know basis.
Infrastructure security: We use reputable cloud providers with SOC 2 and ISO 27001 certifications.
Regular audits: We periodically review our security practices and update them as necessary.

Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security and encourage you to protect your account credentials and notify us immediately of any suspected unauthorized access.

8. International Data Transfers

Your data may be processed and stored on servers located outside of Indonesia, in jurisdictions where our service providers operate. When transferring data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including:

Contractual agreements with data processors that require the same level of data protection.
Compliance with the requirements of Indonesia's Personal Data Protection Law (UU PDP).
Selection of providers in jurisdictions with adequate data protection standards.

9. Your Rights

Under applicable data protection laws, you have the following rights regarding your Personal Data:

Right of access: Request a copy of the Personal Data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your Personal Data from our systems, subject to legal retention requirements.
Right to restrict processing: Request that we limit how we use your data in certain circumstances.
Right to data portability: Request your data in a structured, commonly used, and machine-readable format.
Right to withdraw consent: Withdraw your consent for marketing communications or data processing at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
Right to object: Object to the processing of your data for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will verify your identity and respond within 14 business days. If we cannot fulfill your request due to legal or legitimate reasons, we will explain why.

10. Account Deletion

You may request deletion of your account and associated data at any time. Here is how the process works:

Send a deletion request to [email protected] from the email address associated with your account.
We will verify your identity and confirm the request within 5 business days.
Upon confirmation, your account and Personal Data will be permanently deleted within 30 days.
Certain data may be retained if required by law (e.g., financial records, legal obligations) or to resolve ongoing disputes.

Please note that account deletion is irreversible. Once completed, your data cannot be recovered, and you will lose access to all platform features and conversation history.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. Below is a breakdown of the types of cookies we use:

Essential cookies: Required for basic website functionality, such as navigation, session management, and security. These cannot be disabled.
Analytics cookies: Help us understand how visitors interact with our website by collecting anonymous usage statistics (e.g., pages visited, time spent, bounce rate). We use these to improve our website and service.
Preference cookies: Remember your settings and choices (e.g., language preference) to provide a more personalized experience.

We do not use advertising or tracking cookies. You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

12. Children's Privacy

Lingkari is a business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect Personal Data from children. If you are a parent or guardian and believe that your child has provided us with Personal Data, please contact us at [email protected], and we will take steps to delete such data promptly.

13. Links to Other Websites

Our website and platform may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policy of every site you visit.

14. Indonesian Data Protection Law

We comply with Indonesia's Personal Data Protection Law (Undang-Undang Pelindungan Data Pribadi / UU PDP, Law No. 27 of 2022) and its implementing regulations. Under UU PDP:

We process your Personal Data based on valid legal grounds, including your consent, contractual necessity, and legitimate interests.
We will notify you of any data breach that poses a risk to your rights and freedoms within the timeframe required by law.
You have the rights enumerated in Section 9 of this policy, consistent with the rights granted under UU PDP.
We appoint a data protection contact to handle inquiries and ensure compliance with data protection obligations.

If you believe we have not complied with applicable data protection law, you may file a complaint with the relevant Indonesian supervisory authority or contact us directly.

15. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make changes:

The "Last updated" date at the top of this page will be revised.
For significant changes, we will notify you via email or a prominent notice on our website.
Continued use of the platform after notification constitutes acceptance of the updated policy.

We encourage you to review this page periodically for the latest information on our privacy practices.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]
Subject line: Privacy Policy Inquiry

We aim to respond to all inquiries within 14 business days.