Privacy Policy
Effective 23 October 2026
This policy explains what data TGG Labs collects, why, and your rights over it, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
1.What we collect
Account: name, email, password (stored hashed), or basic profile data from Google if you sign in with Google.
Contact: the WhatsApp number you give when you buy access, and whether you agreed to promos on WhatsApp.
Usage: prompts, files you upload, videos you make, credit and purchase history.
Technical: IP address, browser type, and cookies. Cookies keep you signed in, remember your language, attribute invites (30 days), and hold one random per-browser ID used to stop bonus abuse. We don't use device fingerprinting or advertising cookies. Visit statistics are counted without cookies or personal identifiers.
Payments: processed by Duitku. We only receive the status, amount, method, and transaction reference.
2.How we use it
To run the service: making videos, storing results, managing credits and payments.
Security: preventing fraud, bonus and invite abuse, and prohibited content.
Communication: verification codes, payment receipts, and important account notices. On WhatsApp: order updates, support, and an invite to the member group. We send promos on WhatsApp only if you ticked the box, and you can stop them at any time.
Improving the service: aggregated usage statistics.
3.Who we share it with
AI model providers (Kie.ai, Google Vertex AI) receive your prompt and attached files, only to make the video.
Duitku for payments, Resend for email, and Cloudflare for file storage and delivery.
Authorities when the law requires it.
We don't sell your personal data. Some providers process data outside Indonesia; we choose providers with equivalent data protection.
4.How long we keep it
Account data is kept while your account is active. You can delete videos and uploads at any time from History and Assets.
After an account is deleted, its data is removed within 30 days, except transaction records we must keep for tax and accounting.
5.Your rights
You can ask for a copy of your data, correct it, withdraw consent, and request deletion of your account and its data.
Send requests to acluentz@gmail.com. We reply within 3 working days and complete requests within 14 days.
6.Security
Connections use HTTPS, passwords are hashed, and provider API keys are encrypted. If a breach affects you, we'll notify you within 3 × 24 hours as the law requires.
7.Changes
If this policy changes materially, we'll tell you by email or in the app.