This page explains how Anoman AI (PT Anoman Artifisial Informasi) processes personal data in accordance with the Personal Data Protection Law Number 27 of 2022 (UU PDP). All data from Indonesian customers is stored in our Indonesia data center (Jakarta).

The legal basis for data processing:

• Contract performance — required to provide the LLM gateway service
• Legal obligation — compliance with tax and reporting regulations
• Consent — for marketing communications and optional analytics

The categories of personal data we collect:

• Account information: name, email address, company name
• API metadata: request timestamps, model used, token counts, latency
• Security logs: guardrail detection results, prompt injection detection scores

Prompts and completions are processed in the same region and are not stored beyond the configured retention window.

We process personal data for the following purposes:

• Provide and operate the Anoman gateway service
• Enforce guardrails and policy rules per your configuration
• Detect anomalous behaviour using statistical models
• Calculate usage costs and generate billing records
• Send transactional emails (account alerts, usage summaries)

Under UU PDP, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a portable format
• Right to withdraw consent — withdraw consent at any time

We will respond to your request within 14 business days.