Introduction
Welcome to Alskar ID ("we," "our," "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.
By using Alskar, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account & Identity Data
- Full Name and Email Address (required for account creation)
- Password (stored as encrypted hash using Scrypt - not readable by anyone, including Alskar staff)
- Profile Photo (optional)
- Google Account Information (if you sign in via Google): Google ID, Email, and Avatar
1.2 Financial Data
- Bank Account Number and Bank Name (for payout/withdrawal processing)
- Transaction History: Including gross amount, net earnings, platform fees, and payout records
- Wallet Balance: Current available balance for withdrawal
Note: We do NOT store your credit/debit card information. All payment processing is handled securely by our trusted payment gateway partners (e.g., Midtrans).
1.3 Digital Content & Products
- Product Files: Digital files you upload to sell (stored on Cloudflare R2 Cloud Storage)
- Product Information: Descriptions, prices, images, and metadata
- Custom Bio-Link Page: Profile bio, links, and page blocks
1.4 Technical & Analytics Data
To provide accurate dashboard statistics and prevent fraud, we collect:
- IP Address (for unique visitor counting and security)
- Device Type & Browser Information (User Agent string)
- Page View Timestamps and Click Events
Privacy-First Approach: We use server-side analytics with Redis caching, which is far more privacy-friendly than third-party tracking cookies. Your data is processed in aggregate and not used to track individual behavior across the internet.
Note regarding Creator Pro: Sellers on the "Creator Pro" plan may integrate their own Facebook Pixel. If you visit such a profile, your data may be processed by that specific Seller (acting as Data Controller) for their marketing analytics.
2. How We Use Your Data
2.1 Service Delivery
Creating and managing your bio-link profile page, processing digital product sales, and delivering purchased files to customers.
2.2 Financial Operations
Transferring your net earnings to your registered bank account and maintaining accurate financial records for you and regulatory compliance.
2.3 Analytics & Insights
Displaying performance metrics on your dashboard (Views, Clicks, Sales), calculating unique visitors using privacy-preserving methods, and generating revenue reports.
2.4 Security & Fraud Prevention
Detecting suspicious login attempts, rate limiting to prevent DDoS attacks, and protecting against fraudulent transactions.
3. Data Storage & Security
3.1 File Storage
Your digital product files are stored using Cloudflare R2, a secure, globally distributed cloud storage service with:
- Encryption at rest and in transit (TLS/SSL)
- Redundant backups across multiple data centers
- Access controls to prevent unauthorized access
3.2 Database Security
- Passwords: Never stored in plain text. We use industry-standard hashing (Scrypt).
- Session Tokens: Secured using opaque Access Tokens with strict expiration.
- Bank Account Data: Encrypted at rest in the database and only decrypted for payout processing.
4. Account Deletion Policy
You have the right to delete your account at any time. Here's what happens when you do:
4.1 Personal Data Anonymization
- Your email and full name will be anonymized
- Your profile photo and bio content will be permanently removed
- Login credentials will be invalidated
⚠️4.2 File Destruction (CRITICAL WARNING)
All digital product files you uploaded will be PERMANENTLY DELETED from our storage.
- Your customers will no longer be able to download files from previous purchases
- We recommend backing up your files before deleting your account
- This action is irreversible - we cannot recover your files after deletion
4.3 Transaction Data Retention
While we anonymize your personal data, we are legally required to retain financial transaction records for tax compliance, dispute resolution, and fraud prevention.
What this means: Order IDs, transaction amounts, and timestamps are kept as anonymized records that cannot be linked back to you.
4.4 Balance Forfeit Policy (Voluntary Forfeit)
- If your balance is ≥ Rp 50,000: You must withdraw your funds before deleting your account
- If your balance is < Rp 50,000: You may delete your account, but the remaining balance will be forfeited (surrendered to Alskar as platform revenue). This is because Rp 50,000 is our minimum payout threshold due to bank transfer fees.
5. Sharing Data with Third Parties
We only share your data with trusted partners when necessary to provide our services:
5.1 Payment Processing
Payment Gateways (e.g., Midtrans) process buyer payments securely. We do NOT handle or store credit card data.
5.2 Infrastructure & Security
Cloudflare (CDN, DDoS protection, file storage) and Vercel/VPS Providers (application hosting).
5.3 Legal Compliance
We may disclose your information if required by law, necessary to protect our rights, or requested by legitimate law enforcement authorities.
We will NEVER sell your data to advertisers or third-party marketing companies.
6. Your Rights
Under Indonesian data protection laws (UU PDP), you have the following rights:
Right to Access
View and download your transaction history, product files, and account information.
Right to Rectification
Update your profile information, bank account details, and email address.
Right to Deletion
Permanently delete your account at any time (subject to conditions in Section 4).
Right to Data Portability
Export your data in a machine-readable format (JSON/CSV) upon request.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect new features, legal requirements, or improvements to our data practices.
We will notify you of significant changes via email notification, in-app banner, or update notice on this page. Changes take effect 30 days after notification, unless otherwise stated.
8. Children's Privacy
Our services are not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have inadvertently received personal data from a child without parental consent, we will delete such information from our records.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
mail@alskar.id
Website
https://alskar.id
By using Alskar ID, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.
Thank you for trusting Alskar with your digital business! 🚀