Privacy Policy

We are PT Sanry Teknologi Ananta (“Sanry”, “we”, “us” or “our”), a company incorporated in the Republic of Indonesia. Sanry is our trading name and the name of the AI creative and marketing service we operate: it generates marketing images, video clips and copy, keeps your brand library, publishes to a connected social account, researches competitors and answers questions through a chat assistant (the “Service”). This policy explains what we collect about you, why, who we share it with, how long we keep it and what you can ask us to do.

“Personal Data” means any information relating to an identified or identifiable individual. It does not cover information aggregated or de-identified so that it can no longer reasonably be linked to you. A term shown in quotation marks keeps that meaning wherever it appears afterwards.

For the Personal Data described here, PT Sanry Teknologi Ananta is the controller: we decide why and how it is processed, and we are responsible for it. Our contact details are in section 15.

What this policy covers. The Personal Data we handle when you visit our website, create an account, use the Service, write to us for support or buy a paid plan. Read it with our Terms of Service, which govern your use of the Service, and our Billing Policy, which explains plans, credits, payment and refunds.

What this policy does not cover. Two things. First, the material a customer puts into their own workspace, including information about the members they invite and anyone appearing in what they upload: there the customer decides the purposes, we act on their instructions as a processor, and their own privacy notice governs. Second, the websites and platforms other companies operate, which you may reach from the Service or connect to it.

1. What Personal Data do we collect?

We collect Personal Data you give us, Personal Data created as you use the Service, and Personal Data from the third parties you connect or that help us run it. Each row below is a defined term, used by name in the rest of this policy.

No obligation to provide Personal Data. No law requires you to give us Personal Data, but some of it is necessary for the Service to work: without Account Data we cannot secure an account, without Content Data the Service has nothing to work from, and without Billing Data our merchant of record cannot take payment.

Please do not send us sensitive data. The Service is built for marketing material and is not designed to hold special categories of Personal Data — health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric identifiers, sex life or sexual orientation — or government identification numbers, financial account details or precise location. Please keep it out of your workspace, your prompts and your messages to support; if you send it anyway, you are responsible for having a lawful basis to do so.

2. How do we use your Personal Data, and why?

Each block below states one purpose, the categories used for it and the legal basis. We rely on four bases, defined here once and then used by name.

1. Contractual Necessity. Processing necessary to perform our contract with you, or to take steps at your request before entering into it; without it we cannot provide the part of the Service concerned.
2. Legitimate Interests. Processing necessary for interests we or a third party pursue, where those interests are not overridden by your interests or fundamental rights. Every block relying on it names the interest and says why it does not override your rights; you can object under section 10.
3. Compliance with Law. Processing necessary to comply with a legal obligation we are subject to, including the tax, accounting and record-keeping obligations of the Republic of Indonesia.
4. Consent. Processing you have specifically agreed to, such as connecting a social account. You can withdraw consent at any time; withdrawal does not affect what was processed before.

Where the Indonesian Personal Data Protection Law (Law No. 27 of 2022) applies, these correspond to the lawful bases it recognises: performance of a contract, fulfilment of a legal obligation, the legitimate interests of the controller, and valid consent.

2.1 Service operation

PURPOSE: To create and secure your account, run your workspaces with their members and roles, store your brand library, products and personas, keep your credit balance accurate, and make the Service available to you.

CATEGORIES: Account Data, Content Data, Generated Content, Usage and Credits Data, Technical Data.

LEGAL BASIS: Contractual Necessity.

2.2 Content generation and AI processing

PURPOSE: To produce the images, video clips and copy you ask for, which means sending your prompt, the reference material you selected and the settings to the AI providers that run the models, and returning the result.

CATEGORIES: Content Data, Generated Content, Usage and Credits Data, and the identifier that ties a request to your account.

LEGAL BASIS: Contractual Necessity. Section 3 explains what those providers may do with what they receive.

2.3 Connected platform publishing and analytics

PURPOSE: To publish the posts you create to the social account you connected, when you ask us to, and to read back engagement, reach and audience figures so the Service can show how it performed.

CATEGORIES: Connected Platform Data, Generated Content, Account Data.

LEGAL BASIS: Consent to make the connection, which you withdraw by disconnecting the account; Contractual Necessity for what we do while it remains in place.

2.4 Billing, credits and tax

PURPOSE: To sell you a plan through our merchant of record, grant the credits your plan carries each month, apply upgrades, downgrades and cancellations, and keep the invoices, receipts and transaction records a sale produces.

CATEGORIES: Billing Data, Account Data, Usage and Credits Data.

LEGAL BASIS: Contractual Necessity for taking payment and running your subscription; Compliance with Law for the records tax and accounting law requires.

2.5 Support and communications

PURPOSE: To answer your questions, investigate the problems you report, and send the service, security and billing notices that concern your account — and product messages unless you switched them off when setting up your account.

CATEGORIES: Communications Data, Account Data, Usage and Credits Data, Technical Data.

LEGAL BASIS: Contractual Necessity for support and account notices; Consent for product messages, given by leaving them switched on when you set up your account, and every such message lets you stop.

2.6 Improvement and analytics

PURPOSE: To understand which features are used and where they fail, measure the quality, speed and cost of generations, fix defects and decide what to build next. We do not use Content Data or Generated Content to train our own models; see section 3.

CATEGORIES: Usage and Credits Data, Technical Data, Communications Data.

LEGAL BASIS: Legitimate Interests. Our interest is in improving a Service our customers pay for. It does not override your rights, because we look at features and failures in aggregate and make no decisions about you from what we find.

2.7 Security, fraud and abuse prevention

PURPOSE: To keep the Service and your account safe: detecting and investigating unauthorised access, credential abuse, scraping, payment fraud and use that breaks our Terms of Service; enforcing plan and rate limits; and keeping the logs an investigation needs.

CATEGORIES: Technical Data, Account Data, Usage and Credits Data, Billing Data.

LEGAL BASIS: Legitimate Interests, with Compliance with Law where a specific obligation applies. Our interest is in protecting our customers and systems from misuse. It does not override your rights, because such processing is expected of any service holding an account for you and protects the same people whose data it uses.

2.8 Privacy-protective steps

PURPOSE: The work that protecting Personal Data itself requires: verifying and answering the requests in section 10, keeping records of our processing, reviewing the providers we use, and aggregating or de-identifying data wherever a purpose can be met without identifying anyone.

CATEGORIES: Any category, according to the request or review concerned.

LEGAL BASIS: Compliance with Law where a data-protection law requires the step; Legitimate Interests otherwise. Our interest is in handling Personal Data carefully and being able to show that we do. It does not override your rights, because it exists to give effect to them.

2.9 Compliance and protection

PURPOSE: To comply with the law and with lawful requests from courts, tax authorities and regulators; to establish, exercise or defend legal claims; to enforce our Terms of Service and Billing Policy; and to protect the rights, safety and property of you, us and others.

CATEGORIES: Any category, according to the obligation, request or claim concerned.

LEGAL BASIS: Compliance with Law for obligations and valid requests; Legitimate Interests for enforcing our agreements and defending claims. Our interest is in enforcing the terms our customers accept and in defending ourselves. It does not override your rights, because it is limited to the matter in hand.

2.10 Corporate events

PURPOSE: To evaluate, negotiate and complete a merger, acquisition, financing, reorganisation, insolvency or sale of all or part of our business or assets, and to transfer the records it covers.

CATEGORIES: Account Data, Billing Data, Usage and Credits Data, and Content Data or Generated Content where the transaction covers the Service holding them.

LEGAL BASIS: Legitimate Interests. Our interest is in being able to raise investment and to transfer or reorganise our business. It does not override your rights, because we disclose only what the counterparty needs, under confidentiality, and a buyer must go on handling Personal Data under this policy or tell you first.

3. How do AI providers handle your content?

Producing an image, a video clip or a line of copy means sending material to a model we do not run ourselves. Our AI providers are fal.ai, which runs the image and video models, and OpenRouter, which routes requests to the language-model providers behind it.

We do not train our models on your content. We do not use Content Data or Generated Content to train, fine-tune or develop models of our own, and we do not sell or license it to anyone for that purpose.

Providers process it to produce the output you asked for. A provider receives the prompt, the material attached to it and the settings, uses them to return a result, and is bound by its own terms as to anything else. How long it keeps what it receives is governed by those terms, not by this policy; we choose providers whose terms confine use to serving the request. What we keep is the output and the record of the generation.

4. What happens when you connect an account?

Connecting an Instagram professional account is your choice, made in Settings, and the Service works without it. The platform asks you to authorise the permissions we need and then issues an access token.

We use the connection for three things and no others: reading the account profile and media so the Service can show them to you; publishing the posts you create, when you ask us to publish them; and reading engagement, reach and audience figures so the Service can report on how a post performed.

The access token is held server-side in restricted storage, is never exposed to the browser, is never shown to or shared with other users, and is used only to act on your behalf. You can disconnect at any time in Settings, which deletes the stored token; after that we can neither publish nor read insights. Material already returned to your workspace stays there until you delete it. Our use of information received from Meta complies with the Meta Platform Terms and Developer Policies.

5. Do we use cookies?

We store small files (cookies) on your device and use similar technologies, such as your browser’s local storage. There are three classes and no others.

1. Necessary. What makes the Service work: keeping you signed in, attaching your session to the right workspace, and protecting sign-in and forms against abuse. The Service does not function without these.
2. Functional. What remembers your choices: language, theme and layout, so the Service returns the way you left it. Clearing them resets those preferences and nothing else.
3. Payment. When you open the checkout to buy a plan, Dodo Payments, our merchant of record, sets its own cookies on the checkout it hosts, for payment security and fraud prevention. Those cookies are set by it rather than by us, under its own policies.

We use no advertising cookies and run no third-party tracking or analytics cookies. You can block or delete cookies in your browser settings; because the ones we set are necessary or functional, doing so may sign you out or reset your preferences.

6. Who do we share your Personal Data with?

We do not sell your Personal Data, and we do not share it for cross-context behavioural advertising. We disclose it only as follows.

• Service providers. The companies that run parts of the Service for us, each processing Personal Data only on our instructions under a written contract requiring confidentiality, security and deletion at the end of the engagement: Supabase (authentication, database and file storage), fal.ai (image and video generation), OpenRouter (routing to language models), Google (sign-in, where you choose it), Meta (publishing to Instagram and reading insights), SocialCrawl (public social and web research data), Resend (sending our emails and keeping the list for product updates) and Cloudflare (a bot check on our sign-in and sign-up forms).
• Our merchant of record. Dodo Payments (dodopayments.com) sells every plan as merchant of record and reseller: it takes payment, manages your subscription, issues your invoices and receipts, remits tax and handles refund requests. For the payment information it collects it acts as an independent controller under its own privacy policy, not as our processor. What comes back to us is in the Billing Data row above; our Billing Policy explains the purchase itself.
• Connected platforms, at your direction. When you publish a post, its content and the material attached to it go to the platform you connected, where that platform’s own terms apply.
• Professional advisers. Our accountants, auditors, lawyers and insurers, where they need the information to advise us, always under a duty of confidentiality.
• Authorities. Courts, tax authorities, regulators and law-enforcement bodies, where the law requires disclosure, where a request is valid and properly made, or where it is necessary to establish or defend a legal claim or to protect someone’s safety.
• Corporate events. A counterparty and its advisers, in a transaction of the kind described in section 2.10.

7. Where is your Personal Data transferred?

We operate the Service from the Republic of Indonesia, and every provider named in section 6 operates outside it — principally in the United States, the United Kingdom and the European Union. Your Personal Data is therefore transferred out of Indonesia and processed in countries whose data-protection rules may differ from those where you live, as is the payment information our merchant of record receives. We rely on these mechanisms:

1. the data-processing terms in our contract with each provider, binding it to process Personal Data only on our instructions, keep it confidential and apply security measures;
2. the Standard Contractual Clauses approved by the European Commission, and the United Kingdom International Data Transfer Addendum to them, where the provider offers them and Personal Data originating in the European Economic Area or the United Kingdom is involved;
3. for transfers governed by Indonesian law, the conditions Law No. 27 of 2022 sets for sending Personal Data abroad, which we meet by transferring only to recipients bound by those contractual protections, or on your consent where consent is the applicable condition.

You can ask which safeguards apply to a particular transfer by writing to us (section 15).

8. How do we keep your Personal Data secure?

We use technical and organisational measures appropriate to the risk: encryption of data in transit; access controls and least-privilege permissions on the systems holding Personal Data; per-user and per-workspace isolation enforced in the database itself, so one account cannot read another’s data; storage of sensitive credentials, such as a connected platform access token, in restricted server-only storage never exposed to the browser; separation of production from development; logging of administrative access; and review of a provider before Personal Data reaches it. Because we are not the merchant of record, card numbers never reach us.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If we become aware of a breach of Personal Data likely to create a risk to you, we will notify you and the competent authority as the applicable law requires.

9. How long do we keep your Personal Data?

We keep Personal Data only as long as the purpose we collected it for requires. To decide how long that is, we weigh the nature and sensitivity of the data, the harm unauthorised use or disclosure could cause, whether the purpose can be achieved another way, and the legal, tax and accounting requirements that apply to us. In practice:

1. Account Data, Content Data, Generated Content, Connected Platform Data, Research Data and Usage and Credits Data are kept while your account is active, and are deleted when you delete your account or the workspace holding them (section 10.3).
2. Billing Data and the transaction records a sale produces are kept for the period required by Indonesian tax and accounting law, including after you close your account. Our merchant of record keeps its own records of your orders.
3. Technical Data, including server, security and error logs, is kept for as long as diagnostics and security investigations need it, and is then overwritten.
4. Communications Data is kept while the matter it concerns is open, and afterwards for as long as we may need it to defend a claim.
5. Residual copies may survive deletion in encrypted backups until those are overwritten in the normal cycle. We do not restore deleted data except to recover from a failure.

10. What rights do you have over your Personal Data?

10.1 Your rights

Depending on where you are and which law applies to you, you may have the right to:

1. Access — obtain confirmation of whether we process Personal Data about you, a copy of it and information about how we use it.
2. Correct — have Personal Data about you that is inaccurate corrected, and Personal Data that is incomplete completed.
3. Delete — ask us to erase Personal Data where it is no longer needed for the purpose we collected it for, where you withdraw the consent it rested on, or where you successfully object.
4. Restrict — ask us to pause processing while a dispute about the accuracy of the data, or about a legitimate interest, is resolved.
5. Object — object, on grounds relating to your situation, to processing we base on Legitimate Interests, and object at any time to direct marketing.
6. Port — receive the Personal Data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where that is technically feasible.
7. Withdraw consent — withdraw a consent you gave us, at any time, without affecting the lawfulness of what was done before.

10.2 How to exercise them

Much of this you can do yourself: profile and workspace details can be edited in Settings, a connected account disconnected there, and content deleted from the workspace holding it. For anything else, write to hello@sanry.app and tell us what you would like done. We action verified requests within 30 days, and if one needs longer we will tell you so within that period. There is no charge, unless a request is manifestly unfounded or excessive.

We may ask you to confirm your identity first, usually by writing from the email address on the account, because we should not hand Personal Data to someone who is not you. An authorised agent may make a request for you where you have given written permission we can verify. We will never treat you differently for exercising a right.

10.3 Account and workspace deletion

You can delete your account from Settings. Because workspaces can be shared, deleting your account asks you to decide what happens to each workspace you own: hand it to another member, or delete it together with its content. Workspaces you only belong to are not deleted — only your membership of them is removed. Deletion removes your profile, the workspaces you chose to delete, and the content and files stored in them, apart from the billing records described in section 9.

10.4 If you are in the European Economic Area or the United Kingdom

The rights in section 10.1 are those the General Data Protection Regulation and the United Kingdom GDPR give you, for processing those laws cover. You may also complain to the supervisory authority where you live or work, or where you believe an infringement took place. Where processing rests on Legitimate Interests you may object, and we will stop unless we can demonstrate compelling legitimate grounds that override your interests, or that we need the data to establish, exercise or defend legal claims. We take no decisions about you by solely automated means that produce legal or similarly significant effects. Transfers out of the European Economic Area and the United Kingdom are covered by section 7.

10.5 If you are in California or another United States state

We do not sell Personal Data, and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act. We do not process Personal Data for targeted advertising or for profiling in furtherance of decisions producing legal or similarly significant effects. Residents of California, and of other states with comprehensive privacy laws such as Colorado, Connecticut, Texas and Virginia, may ask to know the categories and specific pieces of Personal Data we have collected, the sources, purposes and categories of recipients; may ask us to correct or delete it; may obtain a portable copy; and may not be treated differently for asking. Those categories, purposes and recipients are the ones in sections 1, 2 and 6. Where your state gives you a right to appeal our decision, you may appeal by replying to our response.

10.6 If you are in Indonesia

The Personal Data Protection Law (Law No. 27 of 2022) gives you the rights in section 10.1 and adds: the right to be informed of the purpose of the processing, its lawful basis and how your Personal Data will be used; the right to end processing and to have your Personal Data deleted or destroyed in accordance with the law; the right to object to a decision based solely on automated processing that produces legal effects or significantly affects you; and the right to claim and receive compensation for a breach of that law concerning your Personal Data.

11. Do we collect Personal Data from children?

The Service is made for businesses and the people who work in them, and is not directed to children. To hold an account you must be at least 13 years old, or older where the law that applies to you sets a higher minimum age, and able to enter into a binding contract, as our Terms of Service require. If you believe a child has given us Personal Data, write to us and we will delete it.

12. What about third-party links and services?

The Service links to and integrates with websites and tools other companies operate: the social platform you connect, the checkout our merchant of record hosts, and the pages we link to. This policy does not cover what those companies do with Personal Data. Read their privacy policies before giving them information.

13. How do you make a complaint?

If you are unhappy with how we handle your Personal Data, write to hello@sanry.app and we will look into it and reply. If our answer does not satisfy you, you may complain to the data-protection authority where you live or work, and, in Indonesia, to the authority responsible for personal data protection in the Republic of Indonesia.

14. How will we tell you about changes?

We may update this policy as the Service changes, as our providers change, or as the law requires; the date at the top of this page records when the current version took effect. Where a change materially affects how we use your Personal Data, we will give additional notice before it takes effect — by email to the address on your account, or in the Service — and where the law requires your consent, we will ask for it.

15. How do you contact us?

Data controller: PT Sanry Teknologi Ananta, a company incorporated in the Republic of Indonesia and trading as Sanry. Our registered address is available on request.

Email: hello@sanry.app. Please put “Privacy” in the subject line and say which account or workspace it concerns. This policy should be read with our Terms of Service and our Billing Policy.