Privacy Policy Indonesia
Alpha Story / Alpha Echo — Indonesia
PT Alpha Story Indonesia
Effective Date: 04 June 2026
Last Updated: 04 June 2026
This Privacy Policy explains how Alpha Story / Alpha Echo (“Alpha Story,” “Alpha Echo,” “Company,” “we,” “us,” or “our”) collects, uses, stores, discloses, transfers, and protects Personal Data when you access or use our websites, applications, platforms, artificial intelligence tools, public relations services, media relations services, content creation services, Alpha Echo services, payment pages, forms, communications, and other related services in Indonesia.
For the purposes of this Privacy Policy, “Personal Data” means any data about an identified or identifiable individual, whether directly or indirectly, including data that is classified as personal data under applicable laws and regulations of the Republic of Indonesia.
By accessing or using our services, creating an account, submitting information to us, communicating with us, making payment, accepting a proposal, checking an acceptance box, or otherwise engaging our services, you acknowledge that you have read and understood this Privacy Policy.
1. Scope
This Privacy Policy applies to:
users of our website, applications, and digital platforms;
clients and prospective clients of Alpha Story public relations services;
users and prospective users of Alpha Echo;
journalists, media contacts, contributors, creators, partners, vendors, and other third parties who interact with us;
individuals whose Personal Data is provided to us by a client, user, partner, or other third party; and
any other individual in Indonesia whose Personal Data we process in connection with our services.
If you provide Personal Data about another person to us, you represent and warrant that you have the authority, consent, legal basis, and notice required under applicable law to do so.
2. Personal Data We Collect
We may collect and process the following categories of Personal Data.
2.1 Account, Identity, and Contact Data
This may include your name, email address, phone number or mobile number, username, password or authentication credentials, job title, company name, company registration details, work address, billing address, communication preferences, and similar information.
2.2 Business and Public Relations Data
Where you engage Alpha Story for PR, media, or communications services, we may collect information about your company, spokespersons, founders, executives, employees, products, services, customers, investors, business milestones, media angles, press materials, pitch materials, interview availability, brand guidelines, campaign objectives, and other information relevant to the campaign.
This may include Personal Data of founders, executives, employees, customers, investors, or other individuals mentioned in materials you provide to us.
2.3 Alpha Echo, Platform, Prompt, and Content Data
When you use Alpha Echo or other AI-enabled services, we may process prompts, inputs, documents, files, drafts, generated content, edits, messages, responses, feedback, metadata, and other materials submitted to or generated through the platform.
You should not submit Personal Data, confidential information, trade secrets, regulated information, or third-party content unless you have the lawful right and authority to do so.
2.4 Media, Journalist, and Partner Data
We may collect and maintain information relating to journalists, editors, media professionals, creators, publishers, bloggers, influencers, podcast hosts, event partners, vendors, and other professional contacts. This may include name, email address, phone number, publication or organization, role, beat, sector interests, previous interactions, publicly available professional information, and communication preferences.
2.5 Payment and Transaction Data
We may process payment status, invoices, billing records, subscription plan, payment method metadata, payment reference numbers, and related transaction information. Full payment card information may be processed by third-party payment processors such as Stripe or other providers and may not be stored directly by us.
2.6 Log, Device, and Usage Data
When you visit our website or use our services, our servers and service providers may automatically collect log data and device data, including IP address, browser type and version, device type, operating system, unique device identifiers, device settings, pages visited, time and date of access, time spent on pages, referring URLs, clicks, app activity, diagnostic data, error logs, crash reports, and approximate location data derived from your device or IP address.
2.7 Communications and Support Data
We may collect messages, emails, WhatsApp or chat communications, call notes, meeting notes, demo requests, support requests, survey responses, feedback, complaints, and other correspondence between you and us.
2.8 Marketing and Analytics Data
We may process information about your marketing preferences, newsletter subscriptions, campaign interactions, event registrations, website behaviour, ad interactions, referral sources, and product interests.
2.9 Sensitive or Specific Personal Data
We do not intentionally request sensitive or specific Personal Data unless it is necessary for a specific service, voluntarily provided by you, or permitted by applicable law. Sensitive or specific Personal Data may include health data, biometric data, financial data, criminal record data, children’s data, or other categories recognized under Indonesian law.
If you provide such data to us, you confirm that you have the legal basis and consent required for us to process it.
3. How We Collect Personal Data
We may collect Personal Data:
directly from you when you contact us, submit a form, create an account, use our services, attend a meeting, make payment, or provide materials;
from your company, employer, colleague, representative, agency, or authorized user;
automatically through cookies, pixels, analytics tools, logs, and similar technologies;
from third-party service providers, payment processors, authentication providers, analytics providers, advertising partners, and business partners;
from publicly available sources such as company websites, public directories, media publications, social media profiles, professional platforms, public databases, and public business information; and
from journalists, partners, vendors, and other parties involved in PR, media, communications, or Alpha Echo services.
4. Purposes of Processing Personal Data
We may process Personal Data for the following purposes:
to provide, operate, maintain, and improve our website, platforms, PR services, Alpha Echo, and related services;
to create and manage user accounts;
to authenticate users and secure accounts;
to respond to inquiries, demo requests, proposals, support requests, complaints, and other communications;
to provide PR strategy, media relations, media pitching, press release drafting, byline drafting, media monitoring, reporting, content creation, and campaign management;
to generate, edit, review, analyze, and improve PR materials, media pitches, byline articles, social media content, campaign reports, and other materials;
to operate Alpha Echo and other AI-enabled or automated features;
to process payments, invoices, subscriptions, renewals, refunds where applicable, and billing administration;
to manage client relationships, journalist relationships, partner relationships, and vendor relationships;
to personalize your experience and customize content, recommendations, communications, and services;
to conduct analytics, market research, product research, service improvement, testing, monitoring, and business development;
to train, test, monitor, secure, and improve our systems, models, workflows, products, and services, where permitted by law and subject to appropriate safeguards;
to send service-related notices, administrative messages, security alerts, billing reminders, and policy updates;
to send marketing communications, newsletters, promotions, offers, and event invitations where permitted by law or where you have consented;
to detect, prevent, investigate, and respond to fraud, abuse, spam, misuse, security incidents, unauthorized access, illegal activity, and violations of our terms;
to enforce our agreements and protect our legal rights, users, personnel, business, systems, and property;
to comply with legal obligations, regulatory requirements, tax obligations, accounting obligations, lawful requests, court orders, and government or law enforcement requests; and
for any other purpose disclosed to you at the time of collection or permitted by applicable law.
5. Legal Bases for Processing
We process Personal Data only where we have a lawful basis under applicable Indonesian law. Depending on the circumstances, our legal basis may include:
your consent;
performance of a contract with you or steps taken at your request before entering into a contract;
compliance with our legal obligations;
protection of vital interests;
performance of tasks in the public interest, where applicable;
our legitimate interests or the legitimate interests of a third party, provided such interests are balanced against your rights; and
other lawful bases permitted under applicable law.
Where we rely on consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent will not affect processing that occurred before the withdrawal. If you withdraw consent or refuse to provide required Personal Data, we may be unable to provide some or all services to you.
6. AI, Automation, and Use of Inputs
Alpha Story / Alpha Echo may use artificial intelligence, automation, machine learning, or algorithmic systems to assist with content generation, research, drafting, editing, recommendations, analytics, workflow automation, and other service functions.
Where your Personal Data is processed through these features, we will process it in accordance with this Privacy Policy and applicable law.
You are responsible for ensuring that any information, documents, prompts, content, or Personal Data you submit to our services may lawfully be submitted, processed, analyzed, stored, and used by us for the purposes described in this Privacy Policy.
We may use de-identified, aggregated, or anonymized data to improve our services, develop new features, conduct analytics, and improve performance, provided such data no longer identifies you or another individual.
7. Disclosure of Personal Data
We may disclose Personal Data to the following parties.
7.1 Affiliates and Related Entities
We may share Personal Data with our affiliates, related companies, parent companies, subsidiaries, joint venture partners, or companies under common control, including for service delivery, administration, internal reporting, product improvement, business operations, and legitimate business purposes.
7.2 Service Providers and Vendors
We may disclose Personal Data to third-party service providers, vendors, contractors, and professional advisers, including providers of hosting, cloud storage, servers, IT support, analytics, error logging, customer support, communications, email, CRM, payment processing, accounting, legal, compliance, debt collection, marketing, advertising, automation tools, and security services.
7.3 Media, PR, and Campaign Participants
Where you engage us for PR, media, or communications services, we may disclose campaign-related information, press materials, spokesperson information, company information, and relevant Personal Data to journalists, editors, media outlets, publishers, creators, influencers, podcast hosts, event organizers, freelancers, contractors, and other campaign participants.
You acknowledge that once information is sent to media, published, broadcast, posted, or otherwise made public, it may be copied, indexed, shared, archived, quoted, or redistributed by third parties outside our control.
7.4 Business Partners
We may disclose Personal Data to business partners where necessary to provide services, offer products or promotions, support integrations, manage referrals, or fulfill a request made by you.
7.5 Authorities, Courts, and Legal Parties
We may disclose Personal Data to government authorities, regulators, courts, tribunals, law enforcement agencies, tax authorities, or other parties where required or permitted by law, in connection with legal proceedings, or to establish, exercise, or defend our legal rights.
7.6 Corporate Transactions
If we are involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency, bankruptcy, or similar transaction, Personal Data may be disclosed or transferred as part of that transaction.
7.7 Other Parties with Consent
We may disclose Personal Data to other parties with your consent, at your direction, or as otherwise permitted by applicable law.
8. International Transfers
Your Personal Data may be transferred to, stored in, accessed from, or processed in countries outside Indonesia, including countries where we, our affiliates, partners, or service providers maintain facilities. These countries may include Singapore, the United States, Estonia, and other jurisdictions.
Where we transfer Personal Data outside Indonesia, we will take steps required by applicable Indonesian law to help ensure that the Personal Data remains protected. These steps may include assessing the level of protection in the destination country, implementing contractual safeguards, obtaining consent where required, and applying other lawful transfer mechanisms.
By using our services and providing Personal Data, you acknowledge that your Personal Data may be processed internationally as described in this Privacy Policy.
9. Cookies and Similar Technologies
We use cookies, pixels, SDKs, local storage, analytics tools, and similar technologies to operate our website and services, remember preferences, understand usage, improve performance, prevent fraud, support security, personalize content, and support marketing.
You may manage cookies through your browser or device settings. If you disable certain cookies, some parts of our website or services may not function properly.
10. Data Security
We use reasonable administrative, technical, physical, and organizational measures to protect Personal Data from unauthorized access, disclosure, alteration, loss, misuse, destruction, or unlawful processing.
These measures may include access controls, encryption, authentication procedures, secure infrastructure, monitoring, logging, staff training, vendor due diligence, and internal policies.
No method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
11. Data Retention
We retain Personal Data for as long as necessary to fulfill the purposes described in this Privacy Policy, provide services, complete campaigns, manage accounts, comply with legal, tax, accounting, and regulatory obligations, resolve disputes, enforce agreements, maintain business records, protect security, and support legitimate business needs.
Campaign materials, reports, communications, and records may be retained for archival, evidentiary, quality control, training, compliance, and legitimate business purposes unless deletion is required by law.
When Personal Data is no longer needed, we will delete, anonymize, de-identify, or securely store it in accordance with applicable law and our retention practices.
12. Your Rights
Subject to applicable Indonesian law, you may have the right to:
obtain information about the identity of the party requesting your Personal Data, the purposes of processing, and how your Personal Data is used;
request access to your Personal Data;
request correction, completion, or updating of inaccurate or incomplete Personal Data;
withdraw consent where processing is based on consent;
request deletion or destruction of your Personal Data;
request restriction, suspension, or delay of processing;
object to certain processing;
request data portability, where applicable;
object to automated decision-making that has legal or significant consequences, where applicable;
file a complaint with us or the relevant authority; and
exercise other rights provided by applicable law.
To exercise your rights, please contact us using the contact details below. We may need to verify your identity and request additional information before responding.
Your rights may be subject to exceptions under applicable law, including where processing is necessary for legal claims, contractual performance, compliance obligations, security, public interest, or other lawful purposes.
13. Data Breach Notification
If a Personal Data breach occurs and notification is required under applicable law, we will notify affected Personal Data subjects and/or the relevant authority in accordance with legal requirements.
Such notice may include the type of Personal Data affected, when and how the breach occurred, and the measures taken or proposed to address the breach, where required by law.
14. Children’s Privacy
Our services are not intended for children unless expressly stated otherwise. We do not knowingly collect Personal Data from children without appropriate consent from a parent or legal guardian where required by law.
If you believe that a child has provided Personal Data to us without proper authorization, please contact us.
15. Third-Party Links and Services
Our website and services may link to third-party websites, platforms, applications, payment processors, calendars, social media platforms, analytics providers, or other services.
We do not control and are not responsible for the privacy practices, content, security, or availability of third-party services. You should review the privacy policies of those third parties before using them.
16. Publicity, Testimonials, and Case Studies
Where permitted by our agreement with you or with your consent, we may identify you or your company as a client, use your company name and logo, refer to campaign outcomes, and publish testimonials or case studies.
If you do not want us to use your name, company name, logo, testimonial, or case study, please notify us in writing before the start of the relevant campaign or service.
17. Direct Marketing and Unsubscribe
We may send marketing communications where permitted by law or where you have consented. You may unsubscribe from marketing emails by using the unsubscribe link in the communication or by contacting us.
Even if you opt out of marketing communications, we may still send you service-related, transactional, administrative, legal, or security communications.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, services, business operations, or data processing practices.
The updated version will be posted on our website or application with the “Last Updated” date. Where required by law, we may notify you of material changes or request your consent.
Your continued use of our services after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.
19. Contact Us
For privacy questions, requests, complaints, or notices, please contact:
Alpha Story / Alpha Echo
Email: [Insert Privacy Contact Email]
Address: [Insert Company Address]
Attn: Privacy / Data Protection
