Privacy Policy

This Privacy Policy explains how Webrana ("the Service") handles personal data. During its current beta phase, Webrana is operated by an individual based in Indonesia, who acts as the data controller. We process personal data in line with the Indonesian Personal Data Protection Law (UU No. 27/2022, "UU PDP").

1. Data we collect

• Account data: your email address and name, used to create and secure your account and to send account-related email (e.g. verification). If you sign in with GitHub or Google, we receive your email and basic profile from that provider.
• Usage metadata: per-request token counts, the model used, latency, status codes, and credits charged — used for billing and to show your usage history.
• Payment records: top-up amounts, fees, credits, and payment references from our payment processor. We do not receive or store your card, bank, or e-wallet credentials.
• Technical data: limited request metadata (such as timestamps and coarse location/IP handled by our infrastructure provider) used for security, abuse-prevention, and reliability.
• Advertising and measurement data: our website loads the Meta Pixel, which records page views and a small number of conversion events — creating an account, and completing a top-up together with its Rupiah value — and links them to a browser identifier stored in a cookie. This lets us measure which ads bring people to Webrana. We do not send Meta your prompts, model responses, API keys, or usage history.

2. What we do not collect

We do not log the content of your prompts or the models' responses. Only request metadata (as above) is recorded on our side. Your prompt and completion content is forwarded to the relevant upstream model provider solely to fulfill your request.

3. How we use data

• to provide, bill, and operate the Service and your dashboard;
• to authenticate you and keep your account secure;
• to prevent abuse, enforce rate limits, and maintain reliability;
• to send transactional email (verification, payment confirmation, service notices);
• to comply with legal, tax, and accounting obligations.

4. Legal basis

Under UU PDP, we process your data based on: performance of our contract with you (providing the Service), your consent (where required — including the advertising and measurement cookies described in sections 1 and 10), our legitimate interests (security and fraud prevention), and compliance with legal obligations.

5. Sharing and third parties

To operate the Service, we share the minimum necessary data with processors, including:

• Upstream model providers — receive your request content in order to generate a response. We currently route to OpenAI, Alibaba Cloud (Qwen), Z.ai (GLM), Moonshot AI (Kimi), xAI (Grok) and DeepSeek. Anthropic (Claude) and Google (Gemini) appear in our catalogue and will receive requests once we enable them. Which provider receives a given request is determined by the model you select, and the current list is always available from GET /v1/models. These providers operate under their own terms and privacy policies;
• Payment processor (Tripay) — handles top-up transactions;
• Infrastructure and email providers (e.g. Cloudflare) — hosting, storage, and transactional email delivery.
• Meta Platforms — receives the page-view and conversion events described in section 1, together with the browser identifier and technical data (such as IP address and user agent) that any web request carries, so we can measure and target our advertising.

Each processes data under its own terms. We do not sell your personal data. We may disclose data where required by law or to protect the rights and safety of the Service and its users.

6. International transfers

Some upstream providers and infrastructure may process data outside Indonesia. Where this happens, we rely on the request being necessary to perform the service you requested and take reasonable steps consistent with UU PDP.

7. Retention

We keep account and billing records while your account is active and as needed for legal, tax, and accounting purposes. Usage metadata is retained to power your dashboard history and may be aggregated or rotated to long-term storage. When no longer needed, data is deleted or anonymized.

8. Security

We use reasonable technical and organizational measures to protect your data, including hashing of API keys (we never store keys in plaintext), encrypted transport, and scoped, minimal data collection. No method of transmission or storage is completely secure.

9. Your rights

Subject to UU PDP, you may:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data and account;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

To exercise these rights, contact hello@webrana.id. You can also revoke API keys and manage your account from the dashboard.

10. Cookies and similar technologies

Strictly necessary: a session cookie that keeps you signed in. The Service cannot work without it.

Advertising and measurement: we load the Meta Pixel across our site, including the signed-in dashboard. It sets a first-party cookie holding a browser identifier, and may read a click identifier when you arrive from one of our ads on Facebook or Instagram. It reports the events listed in section 1 to Meta Platforms. Meta may use this to measure our campaigns and to show you our ads. We do not use it to build profiles of your API usage, and we place no other advertising or analytics trackers.

You can refuse these cookies by blocking third-party scripts in your browser or by using a tracking blocker that blocks the Meta Pixel. Blocking them does not affect your account, your credits, or any API request. You can also limit how Meta uses this data from your Meta ad preferences.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

12. Changes

We may update this Policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you.

13. Contact

Questions or requests about your data? Contact hello@webrana.id. See also our Terms of Service.