Data Privacy & UU PDP Compliance in Liqaa
Your data, protected and compliant
Liqaa is built for Indonesia, including data protection under UU PDP No. 27/2022 (Personal Data Protection Law).
Where your data lives
Customer data (contacts, conversations, knowledge base) is stored on servers located in Indonesia. It is not moved abroad for primary storage.
Roles
- You are the data controller — you decide what customer data is collected and why.
- PT Kinetikum Indo Solusi is the data processor, handling data on your instructions under a Data Processing Agreement (DPA).
What data is processed
- Visitor messages and contact details submitted in chat.
- Basic technical metadata (e.g. page URL, timestamp) to route and answer conversations.
- Knowledge base content you provide to train the assistant.
Retention & deletion
- You can export contacts and conversations at any time via API or CSV — no vendor lock-in.
- You can delete individual records or your entire account. On account deletion, associated personal data is removed following our retention policy. See "Deleting Your Account & Data (UU PDP)".
Rights of data subjects
Under UU PDP, individuals can request access, correction, or deletion of their personal data. Liqaa gives you the tools (export, edit, delete) to fulfil these requests for your customers.
Sub-processors & security
- Data is encrypted in transit (TLS). Access is restricted and logged.
- A current list of sub-processors and the DPA are available in the legal center.
Documents
- Privacy Policy: https://liqaa.id/legal/privacy
- Data Processing Agreement (DPA): https://liqaa.id/legal/dpa
- All legal documents: https://liqaa.id/legal
If you have a data protection question or a data subject request, contact us via the Help Center and we will respond in line with UU PDP timelines.