Privacy Policy
figment intelligence · Last updated: June 2026
1. Who We Are
figment (“we”, “us”, “our”) operates figment intelligence, an AI-powered content intelligence platform accessible at intelligence.byfigment.ai. We are headquartered at Jl. Hang Jebat I no.11, Jakarta, Indonesia.
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use figment intelligence. It is written in compliance with Indonesia’s Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi / UU PDP).
If you have questions or concerns about how we handle your data, please contact us at hello@byfigment.ai.
2. Data We Collect
2.1 Data You Provide Directly
| Data | When Collected |
|---|---|
| Name and email address | During account registration |
| Business or brand name | During onboarding |
| Instagram or TikTok account handle | When connecting your Instagram or TikTok account |
| Payment information (billing address, payment method details) | When subscribing to Plus — note: full card details are processed by Midtrans and are not stored by figment |
2.2 Data We Collect Automatically
| Data | Purpose |
|---|---|
| Login activity and session data | Security and account management |
| Feature usage and interaction data | Platform improvement and personalisation |
| Device type and browser information | Technical support and compatibility |
| IP address | Security monitoring |
2.3 Data from Third Parties
| Data | Source | Purpose |
|---|---|---|
| Publicly available Instagram and TikTok post data (captions, engagement metrics, posting frequency, content format) | Apify (public data collection) | Powering the Client Analysis, Benchmark Discovery, and Scan Engine pipelines |
| Authentication data | Google (if you use login with Google) | Account access |
3. How and Why We Use Your Data
We collect and use your data only for specific, legitimate purposes. The table below sets out each purpose and its legal basis under UU PDP.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Name, email, password | Performance of contract |
| Delivering the intelligence service (analysis, benchmarks, content plans) | Instagram or TikTok handle, public Instagram or TikTok data | Performance of contract |
| Processing payments and managing subscriptions | Payment information, billing data | Performance of contract + legal obligation |
| Sending transactional communications (receipts, subscription notices, service updates) | Email address | Performance of contract |
| Improving the platform and AI models | Aggregated and anonymised usage data | Legitimate interest |
| Complying with legal and regulatory obligations | As required | Legal obligation |
| Responding to support requests | Name, email, account data | Legitimate interest |
We do not use your data for advertising profiling or sell your data to any third party.
4. Data Sharing
We share your data only with third parties that are necessary to deliver the service. All third parties are bound by data protection obligations consistent with this Privacy Policy.
| Third Party | Role | Data Shared |
|---|---|---|
| Midtrans | Payment processing | Billing information, transaction data |
| Apify | Public Instagram and TikTok data collection | Instagram and TikTok handles of the accounts you analyse |
| Anthropic | AI-powered content analysis | Aggregated content and performance data for analysis |
| Resend | Transactional email delivery | Your name and email address (for account, billing, and product emails) |
| Sentry | Error monitoring and diagnostics | Technical error data, which may include your account identifier |
| Account authentication | Email address and basic profile (if login with Google is used) | |
| Vercel | Application hosting and content delivery | Platform data in transit (served securely) |
| Supabase | Database, authentication, and file storage | All account and platform data (stored securely) |
We do not share your data with any other third parties without your explicit consent, except where required by Indonesian law or a valid court order.
5. Cross-Border Data Transfers
Some of our third-party service providers operate outside Indonesia. These include Anthropic, Vercel, Resend, and Google (United States); Apify and Sentry (European Union); and Supabase (Singapore). Midtrans processes payments within Indonesia. When your data is transferred internationally, we ensure that appropriate safeguards are in place, consistent with the requirements of UU PDP and applicable international data transfer standards.
By using figment intelligence, you acknowledge and consent to your data being processed in these jurisdictions for the purposes described in this Policy.
6. Data Retention
We retain your data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after account deletion |
| Payment and transaction records | 5 years (Indonesian tax law requirement) |
| Public Instagram or TikTok data used for analysis | Duration of your account — deleted with account deletion |
| Usage and session data | 12 months |
When data is no longer required, it is securely deleted or anonymised.
7. Your Rights Under UU PDP
As a data subject under Indonesian law, you have the following rights regarding your personal data:
Right to Access— You may request a copy of the personal data we hold about you.
Right to Correction— You may request that we correct any inaccurate or incomplete personal data.
Right to Deletion— You may request that we delete your personal data, subject to our legal obligations to retain certain records.
Right to Withdraw Consent— Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Object— You may object to processing carried out on the basis of legitimate interest.
Right to Data Portability— You may request that we provide your personal data in a structured, machine-readable format.
To exercise any of these rights, please contact us at hello@byfigment.ai. We may ask you to verify your identity before we act on your request. Once your identity is verified, we will process your request within the timeframes required by UU PDP — generally 3×24 hours (72 hours)for requests to access, correct or update, restrict the processing of, or withdraw consent to the processing of your personal data — and within any other applicable statutory periods.
Third-party creators.figment intelligence analyses publicly available content from Instagram and TikTok accounts — for example, accounts our customers select as benchmarks. These rights extend to you even if you have never used figment. If your public account data is processed by figment and you would like it removed, email hello@byfigment.aiwith your account handle. Once we verify you control the account, we will remove your account and its stored post data within the same 3×24-hour (72-hour) timeframe.
8. Cookies and Tracking
figment intelligence uses only essential cookies to operate the platform.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential cookies | Required for login, session management, and core platform functionality | No — platform will not function without these |
For product analytics we use Vercel Analytics, a cookieless service: it sets no cookies, does not track you across sites, and collects only aggregated, anonymised usage data.
We do not use advertising or tracking cookies, and we do not set any analytics cookies.
9. Security
We implement technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.
However, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and to contact us immediately if you suspect your account has been compromised.
10. Children’s Privacy
figment intelligence is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect.
The most current version of this Policy will always be available at intelligence.byfigment.ai/privacy.
12. Contact and Complaints
For any questions, requests, or concerns regarding this Privacy Policy or how we handle your data, please contact our data team at:
figment
Jl. Hang Jebat I no.11, Jakarta, Indonesia
hello@byfigment.ai
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with Kementerian Komunikasi dan Informatika (Kominfo) as the Indonesian data protection authority.