1. Who we are
Agenura decides how your personal data is used and is responsible for it ("Agenura", "we", "us"). Contact: support@agenura.com.
2. What this policy covers
This policy covers agenura.com and every app Agenura sells, starting with Docsli.
3. What we collect
- Account data: your email address and name, and your profile picture if you sign in with Google or GitHub. If you sign in with a password, we store only a one-way hash of it, never the password itself. We keep a log of sign-ins.
- Your content: what you put into an app, such as API descriptions, pages, files and settings.
- Activity log: in Docsli, the changes made in a workspace, who made them and from which IP address.
- Billing data: from Lemon Squeezy, your name, email address, country, plan and order details. We do not receive full card numbers.
- Server logs: IP address, browser type, the page or address requested and the time. Every web server records these.
- Emails: what you write to us, and our replies.
agenura.com sets no cookies. The apps use only the cookies they need to keep you signed in and to run the service; the Docsli live demo sets one cookie that keeps your copy of the demo for 24 hours.
4. What we use it for
- to run the apps and your account;
- to bill you, through Lemon Squeezy;
- to answer your questions;
- to keep the service secure, stop abuse and fix errors;
- to keep the records the law requires.
For users in the European Union, the legal grounds are: the contract with you (running the app and your account), our legitimate interest (security and fixing errors) and legal obligations (records).
5. What we do not do
We do not sell or rent your personal data. We do not show ads. agenura.com and the apps use no analytics or advertising trackers. We do not share your data with anyone for their marketing.
6. Who else handles your data
These companies process data for us, only to provide their service:
- Lemon Squeezy: payments, sales tax and VAT, receipts and invoices. As Merchant of Record it also handles payment data under its own privacy policy.
- OVH: the servers in Singapore that run the apps and our sign-in service (auth.agenura.com) and store your account data and content.
- Cloudflare: DNS for agenura.com, delivery of this website, and forwarding of email sent to support@agenura.com.
- Google: stores the email you send to support@agenura.com and our replies (Gmail). If you choose to sign in with Google, it confirms your identity and sends us your email address, name and profile picture.
- GitHub: only if you choose to sign in with GitHub; it confirms your identity and sends us your email address, name and profile picture.
- Resend: sends account emails, such as email confirmation and password reset, from no-reply@mail.agenura.com, through its servers in Japan.
Some of these companies process data outside Indonesia and outside the European Union, for example in Singapore, Japan and the United States. Where the law requires it, the transfer is covered by safeguards such as standard contractual clauses.
7. How long we keep it
- Account data and content: while your account is open, and for 30 days after it is closed so that you can ask for an export. Then it is deleted.
- Billing records: as long as tax law requires. Lemon Squeezy keeps its own records.
- Server logs: up to 30 days.
- Emails: as long as needed to answer and follow up, and no longer than 2 years.
8. Your rights
You can ask us to tell you what personal data we hold about you, give you a copy, correct it, delete it, or stop using it. You can also withdraw consent you have given.
Indonesia. Under Law No. 27 of 2022 on Personal Data Protection (UU PDP), you have these rights and others, including the right to receive your data in a usable format and to object to decisions made only by automated processing.
European Union. Under the General Data Protection Regulation (GDPR), you have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to complain to the data protection authority of your country.
To use a right, email support@agenura.com from the address on your account. We reply within the time the law sets. To delete your account and its data, write "Delete my account" and the account's email address.
9. Security
All traffic to agenura.com and the apps is encrypted (HTTPS). Only Agenura has access to the servers and the data.
Passwords are stored only as one-way hashes. When you set a password, we check it against passwords exposed in known data breaches through Have I Been Pwned: only the first 5 characters of the password's hash leave our server, never the password or the full hash. After 5 failed sign-in attempts, the account is locked for 15 minutes.
10. Children
The apps are not meant for people under 18. We do not knowingly collect their personal data.
11. Changes to this policy
We may change this policy. The date at the top shows the last change. If a change affects how we use your data, we email account holders before it takes effect.
12. Contact
Agenura. Email: support@agenura.com.