Privacy Policy

PT Lapis Kecerdasan Buatan (“we”, “us”, “our”) operates RELAI, an AI-powered productivity workspace for chat, image generation, video generation, presentations, research, knowledge base, and seasonal campaign features. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service at lapisai.id.

Account Information

• Email address and display name
• Password (stored as a bcrypt hash; we never see the plaintext)
• Tenant / organization affiliation (where applicable)
• Subscription plan and billing status

User Content

• Text prompts and chat messages you submit to AI features
• Photos and images you upload (e.g., portrait photos for the UI Open Days Yellow Jacket Try-On, Eid Greetings, image editing)
• Documents you upload to the Knowledge Base (KB) feature
• Files attached to chats or other workflows

AI-Generated Content

• Images, videos, slides, research outputs, and text generated by AI features in response to your inputs
• Embeddings derived from your documents for KB semantic search

Usage Data

• AI feature usage counts, tokens consumed, and quota balances
• Activity logs (actions performed within the platform, generation events)
• Session data (authentication tokens, login timestamps, IP address at login)
• Browser and device information

• To provide and operate the AI workspace and its features
• To authenticate you and manage your session
• To process your inputs through AI models (chat, image, video, slides, research)
• To generate semantic embeddings for the Knowledge Base feature
• To track usage, enforce quotas, and manage billing
• To send notifications about generation completion, account activity, and campaign updates
• To detect and prevent abuse, fraud, and unlawful use
• To improve, debug, and optimize the Service

Inputs you submit to AI features (prompts, photos, documents, chat messages) are sent to third-party AI providers for processing.

• AI providers receive only the content needed for the specific operation.
• AI-generated outputs (images, videos, chat replies, embeddings) are stored on our infrastructure.
• We do not use your inputs or outputs to train AI models.
• Third-party AI providers process data under their own privacy policies and may operate in jurisdictions outside Indonesia.

• Application servers and databases are hosted in Jakarta, Indonesia.
• User-uploaded files and AI-generated media are stored in cloud object storage hosted in Jakarta, Indonesia.
• Passwords are hashed with bcrypt; sensitive credentials and API keys are stored as environment-controlled secrets.
• All connections are encrypted via HTTPS (TLS).
• Authentication uses signed JWT tokens delivered as secure, httpOnly cookies.
• Access to production systems is restricted to authorized engineering personnel.

We do not sell your personal data. We may share data with:

• AI service providers — only to the extent needed to fulfil your generation requests.
• Cloud infrastructure providers — to host the Service.
• Email and notification providers — to send you transactional emails and in-app notifications.
• Legal authorities — if required by Indonesian law, the UU PDP (Personal Data Protection Law), or valid legal process.

• Account data is retained while your account is active.
• User-uploaded photos, documents, and AI-generated outputs are retained until you delete them, or your account is deleted.
• Upon account deletion, associated data is permanently removed from primary databases within 30 days; backup copies are purged within 90 days.
• Activity logs are retained for up to 12 months for security, audit, and billing purposes.
• Session data expires automatically after 30 days of inactivity.

Under the Indonesian Personal Data Protection Law (UU PDP) and applicable regulations, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing (by deleting your account)
• Export the content you have generated through the Service
• Object to certain processing activities

To exercise these rights, contact us at galih@xquisite.ai.

Some features (e.g., UI Open Days Yellow Jacket Try-On, Eid Greetings) require you to upload a photo containing a person's face. By uploading:

• You confirm that the photo depicts you, or that you have explicit permission from the person depicted to upload and process their image.
• You grant us a limited license to process the photo solely to provide the requested feature (e.g., generating a styled image or animated video).
• We do not use your photos to train AI models.
• You may delete the photo and its generated outputs at any time from the relevant feature page.

• Session cookie — httpOnly, secure; used for authentication (essential)
• Tenant context cookie — keeps you on the correct workspace (essential)
• Theme and UI preferences — stored in localStorage, not sent to the server

We do not use third-party tracking cookies or advertising analytics.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we learn we have collected data from a person under 18, we will delete it.

The Service is operated from Indonesia, with infrastructure in the Asia-Pacific region. Some AI service providers may process data in other jurisdictions. We rely on the providers' contractual and security commitments to safeguard data during international transfer.

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification. Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact us at galih@xquisite.ai.