Privacy Policy
Last updated: April 2026
PT Inovasi Otentik Indonesia ("IOI", "we", "us", or "our") operates the bobi platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
Account Information. When you create an account, we collect your name, email address, organization name, and role. If you sign up via WhatsApp, we collect your phone number and display name.
Usage Data. We collect information about how you interact with bobi, including messages sent, features used, session timestamps, and device/browser metadata. This data is used to improve the service and provide support.
Business Data. Any data you input through bobi — including tasks, expenses, invoices, sales records, contacts, meeting notes, and inventory — is stored on your behalf. This is your data. We process it only to provide the service.
Files & Documents. Files uploaded to the knowledge base are stored securely and indexed for retrieval. We do not access file contents except as necessary to provide search and retrieval functionality.
How We Use Your Information
- To provide, maintain, and improve the bobi platform
- To process your requests and deliver the services you use
- To send service-related communications (e.g., security alerts, account notifications)
- To comply with legal obligations
- To detect, prevent, and address fraud or security issues
We do not use your data to train machine learning models. We do not sell your data to third parties.
Data Storage & Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Each organization's data is logically isolated using row-level security in a multi-tenant architecture. We maintain regular backups and access controls following enterprise-grade security practices.
Data is stored on servers located in Southeast Asia. We may use sub-processors (e.g., cloud infrastructure providers) who are contractually bound to equivalent data protection standards.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law.
Third-Party Services
bobi integrates with third-party platforms (Google Workspace, Microsoft 365, WhatsApp) at your direction. When you connect these services, data may flow between bobi and the third-party platform according to their respective privacy policies. We are not responsible for the privacy practices of third-party services.
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at hi@ioi.co.id.
Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For privacy-related inquiries, contact: hi@ioi.co.id