Privacy Policy

When you contact Gravidea, use the AI assistant, request a demo, or submit project details, we may collect your name, email address, phone or WhatsApp number, business name, website URL, country or timezone, project needs, budget range, preferred contact channel, chat messages, and booking details.

We may also collect basic technical data such as page visits, browser information, device type, referral source, and interaction events for analytics and service improvement.

We use submitted information to respond to inquiries, qualify project needs, prepare proposals or estimates, schedule calls, improve the website and AI assistant, maintain lead records, and provide support for active projects.

If you interact with the AI assistant, your messages may be processed by AI model providers so the assistant can generate a relevant response.

The website assistant may ask follow-up questions to understand your business and project needs. Some conversations may be stored as lead records so Gravidea can continue the discussion.

Where visitor memory is enabled, limited context may be saved to improve future conversations. This is used for continuity, not for selling personal data.

Gravidea may use cookies, local storage, analytics scripts, and similar technologies to understand website usage, remember basic preferences, and improve performance.

If you prefer, you can control cookies through your browser settings. Some features may work less smoothly if browser storage is disabled.

To operate the managed service fairly, Gravidea records events such as conversations started, successful AI Answers, WhatsApp clicks, chat completion, qualified leads, handoffs, team messages, provider errors, and blocked traffic. Website conversation identity uses a pseudonymous signed-session identifier; one person may appear as more than one conversation when using different devices or sessions.

Security controls may use session identifiers, WhatsApp contact IDs, actor hashes, repetition patterns, input size, and prompt-injection signals to apply rate limits, cooldowns, or blocks. Recent analytics events do not store message content. Operational aggregates may be retained for approximately 400 days for period comparison, usage audit, security, and dispute handling unless a written scope states otherwise.

Internal operational notices may be sent through a Telegram bot when a valid conversation starts and as a daily summary. These traffic notices are limited to tenant, channel, time, and operational counts; conversation content is not included.

We may share limited data with service providers that help operate the website, AI assistant, WhatsApp Business Platform, email or Telegram notifications, booking, analytics, databases, cloud hosting, and internal records.

We do not sell personal information. We only share data when needed to operate the service, respond to your request, comply with law, or protect the website and business.

Each client's access is separated as a tenant. When authorized Gravidea personnel need to open a client inbox for troubleshooting or support, access must have an operational reason, be time-limited, be recorded in an audit log, and may trigger a notice to the client's Telegram channel when configured.

No system can be guaranteed completely risk-free. Gravidea applies reasonable controls within the agreed scope, while clients remain responsible for their own accounts, devices, user lists, and credentials.

Gravidea is based in Indonesia and may use service providers located in other countries. If you contact us from outside Indonesia, your information may be processed across borders.

For clients with specific legal, procurement, or regional compliance requirements, those requirements should be discussed before project kickoff.

We keep inquiry and project data only as long as reasonably needed for communication, project records, legal, accounting, security, and business operations.

You can request access, correction, or deletion of your personal information by contacting Gravidea. Some data may need to be retained where required for records, security, dispute handling, or legal obligations.