Privacy Policy

Anoman AI (PT Anoman Artifisial Informasi) operates a managed LLM gateway that routes AI requests through a unified, guarded API. This policy explains how we collect, use, store, and protect personal data. Account data, API keys, billing records and request logs are stored in our Jakarta data center. When content capture is enabled, captured prompts and responses are also stored there. Request content is processed by the chosen model's provider in that model's listed region, which may be outside Indonesia.

We collect the following categories of personal data:

• Account information: name, email address, company name
• API metadata: request timestamps, model used, token counts, latency
• Usage telemetry: aggregated request patterns for anomaly detection
• Security events: guardrail trigger logs, injection detection scores

Prompts and completions pass through our gateway in Jakarta and are processed by the chosen model's provider in that model's listed region. Prompt and response content is stored only when content capture is enabled for your workspace (it is off by default). Request metadata and logs are kept for the configured retention window (90 days for Pro, 365 days for Enterprise).

We use your data to:

• Provide and operate the Anoman gateway service
• Enforce guardrails and policy rules per your configuration
• Detect anomalous agent behaviour using statistical models
• Calculate usage costs and generate billing records (weighted token model)
• Send transactional emails (account alerts, usage summaries)
• Improve service reliability and performance

We do not sell personal data. We do not use your data to train AI models.

Account data and logs are stored in our Jakarta data center; our approach is designed to be UU PDP-ready (Law No. 27/2022). Our infrastructure stack:

• Compute: container platform, Jakarta
• Database: primary database with hot standby + point-in-time recovery
• Cache: in-memory cache with append-only persistence
• Backups: hourly snapshots to encrypted object storage, 14-day retention

Request content (prompts and responses) is processed by the provider of the model you choose, in that model's declared processing region. Many models are processed outside Indonesia (for example in the US or China). Each model's region is shown on its detail page before you use it. Choose a model whose processing region is Indonesia if your requirements need it.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

To exercise these rights, contact our DPO at [email protected]. We respond within 14 business days.

We share data with the following sub-processors:

• Upstream LLM services — receive prompts for completion. Each model in our catalog declares its data processing region (visible on the model detail page) and is subject to that service's own data processing agreement.
• Infrastructure — compute, database, and cache in our Indonesia data center (Jakarta).
• Resend — transactional email delivery
• Vercel — marketing site hosting and anonymous analytics

We do not share personal data with advertising networks or data brokers.

For privacy inquiries, contact our Data Protection Officer: [email protected]. PT Anoman Artifisial Informasi, Jakarta, Indonesia.