In short: this website has no sign-up, no advertising trackers and no analytics cookies. We collect what you choose to send us when you get in touch, plus standard server logs. We never sell personal data.
01Who we are
LapisAI is the trading name of PT Lapis Kecerdasan Buatan (“LapisAI”, “we”, “us”), a company established in Indonesia and a member of Xquisite AI. Our registered office is at 18 Office Park Lt 25 Suite A2, Jl. TB Simatupang No. Kav 18, Kebagusan, Pasar Minggu, Jakarta Selatan 12520, Indonesia.
For the personal data described in this policy, LapisAI is the data controller (pengendali data pribadi) under Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”).
02Scope
This policy covers the lapisai.id website and the business enquiries, briefings and correspondence that come through it. It does not cover our products:
- Relai has its own privacy policy at relai.lapisai.id/privacy.
- Redroot and Redwood, and any Relai deployment in a customer's environment, process data under the agreement we sign with that customer. In those deployments the customer is the controller of its data and LapisAI acts as its processor.
03What we collect
Information you give us
- Your name, work email, phone number, company and role when you email us or book a briefing.
- The content of your messages and any materials you share with us.
- Details of meetings and follow-ups, such as notes of what was discussed.
Information collected automatically
- Server logs: IP address, browser and device type, pages requested, referring page and time of the request. These are kept for security and to keep the site running.
- The site loads its fonts from Google Fonts, so your browser sends your IP address to Google when the page loads. Google's own privacy policy applies to that request.
The site does not set cookies and does not use analytics, advertising or social-media tracking tools. If that changes, we will update this policy first and ask for consent where the law requires it.
04How we use it
- To reply to your enquiry and arrange briefings, demonstrations and pilots.
- To prepare proposals and, if you become a customer, to set up and manage the agreement.
- To send you information you have asked for about our products. You can opt out at any time.
- To keep the website secure, detect abuse and fix problems.
- To meet our legal, accounting and regulatory obligations.
We do not use personal data from this website or your enquiries to train AI models.
05Legal basis
Under the PDP Law we process personal data on these bases:
- Your consent, for example when you ask to receive product updates.
- Steps before or under a contract, when we prepare a proposal or deliver a service to your organisation.
- Legal obligations, such as tax and accounting records.
- Legitimate interests, such as replying to business correspondence and keeping our systems secure, balanced against your rights.
07Data you share in briefings and pilots
“See the platform on your own data” sessions may involve your warehouse, documents or sample data. Before we touch any of it we agree the scope in writing, usually under a non-disclosure or pilot agreement. That agreement governs the data. Unless it says otherwise, we process the data only for the session or pilot, keep it in the environment we agreed, and delete it when the work ends.
08International transfers
We are based in Jakarta and prefer to keep data in Indonesia. Some of our service providers, such as email and font services, may process data outside Indonesia. Where that happens we rely on providers that offer an adequate level of protection, or on contractual safeguards, as the PDP Law requires.
09Retention
- Enquiries and correspondence: up to 24 months after our last contact, unless they become part of a customer relationship.
- Customer and contract records: for as long as the law requires us to keep them, generally 10 years for financial records.
- Server logs: up to 90 days, unless needed to investigate a security incident.
10Security
The site is served over HTTPS. Access to enquiry data is limited to the people who need it, and our systems use access controls and encryption. If a breach of personal data occurs, we will notify you and the authorities as the PDP Law requires.
11Your rights
Under the PDP Law you can:
- Ask what personal data we hold about you and why, and get a copy of it.
- Ask us to correct or update inaccurate data.
- Ask us to delete your data, or to restrict or pause its processing.
- Withdraw consent you have given, without affecting processing that happened before.
- Object to decisions made solely by automated processing that significantly affect you.
- Receive your data in a commonly used format, or have it sent to another controller.
Email hello@lapisai.id with the subject “Personal data request”. We may need to confirm your identity first, and we will reply within the time limits the PDP Law sets.
12Children
Our website and products are meant for businesses. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
13Changes to this policy
We may update this policy as our website, products or the law change. The date at the top shows the latest version. If a change is significant, we will say so on this page and, where we have your contact details and the law requires it, tell you directly.
14Contact
PT Lapis Kecerdasan Buatan
18 Office Park Lt 25 Suite A2, Jl. TB Simatupang No. Kav 18
Kebagusan, Pasar Minggu, Jakarta Selatan 12520, Indonesia
Email hello@lapisai.id or call +62 21 3880 8202 (Monday to Friday, 09:00 to 18:00 WIB).