Privacy Policy
figment intelligence · Last updated: May 2026
1. Who We Are
figment (“we”, “us”, “our”) operates figment intelligence, an AI-powered content intelligence platform accessible at intelligence.byfigment.ai. We are headquartered at Jl. Hang Jebat I no.11, Jakarta, Indonesia.
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use figment intelligence. It is written in compliance with Indonesia’s Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi / UU PDP).
If you have questions or concerns about how we handle your data, please contact us at hello@byfigment.ai.
2. Data We Collect
2.1 Data You Provide Directly
| Data | When Collected |
|---|---|
| Name and email address | During account registration |
| Business or brand name | During onboarding |
| Instagram account handle | When connecting your Instagram account |
| Payment information (billing address, payment method details) | When subscribing to Plus — note: full card details are processed by Midtrans and are not stored by figment |
2.2 Data We Collect Automatically
| Data | Purpose |
|---|---|
| Login activity and session data | Security and account management |
| Feature usage and interaction data | Platform improvement and personalisation |
| Device type and browser information | Technical support and compatibility |
| IP address | Security monitoring |
2.3 Data from Third Parties
| Data | Source | Purpose |
|---|---|---|
| Publicly available Instagram post data (captions, engagement metrics, posting frequency, content format) | Apify (public data collection) | Powering the Client Analysis, Benchmark Discovery, and Scan Engine pipelines |
| Authentication data | Google (if you use login with Google) | Account access |
3. How and Why We Use Your Data
We collect and use your data only for specific, legitimate purposes. The table below sets out each purpose and its legal basis under UU PDP.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Name, email, password | Performance of contract |
| Delivering the intelligence service (analysis, benchmarks, content plans) | Instagram handle, public Instagram data | Performance of contract |
| Processing payments and managing subscriptions | Payment information, billing data | Performance of contract + legal obligation |
| Sending transactional communications (receipts, subscription notices, service updates) | Email address | Performance of contract |
| Improving the platform and AI models | Aggregated and anonymised usage data | Legitimate interest |
| Complying with legal and regulatory obligations | As required | Legal obligation |
| Responding to support requests | Name, email, account data | Legitimate interest |
We do not use your data for advertising profiling or sell your data to any third party.
4. Data Sharing
We share your data only with third parties that are necessary to deliver the service. All third parties are bound by data protection obligations consistent with this Privacy Policy.
| Third Party | Role | Data Shared |
|---|---|---|
| Midtrans | Payment processing | Billing information, transaction data |
| Apify | Public Instagram data collection | Instagram handles of accounts you analyse |
| Anthropic | AI-powered content analysis | Aggregated content and performance data for analysis |
| Account authentication | Email address and basic profile (if login with Google is used) | |
| Cloud hosting provider | Platform infrastructure | All platform data (stored securely) |
We do not share your data with any other third parties without your explicit consent, except where required by Indonesian law or a valid court order.
5. Cross-Border Data Transfers
Some of our third-party service providers — including Anthropic (United States) and Apify (European Union) — operate outside Indonesia. When your data is transferred internationally, we ensure that appropriate safeguards are in place, consistent with the requirements of UU PDP and applicable international data transfer standards.
By using figment intelligence, you acknowledge and consent to your data being processed in these jurisdictions for the purposes described in this Policy.
6. Data Retention
We retain your data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after account deletion |
| Payment and transaction records | 5 years (Indonesian tax law requirement) |
| Public Instagram data used for analysis | Duration of active subscription |
| Usage and session data | 12 months |
When data is no longer required, it is securely deleted or anonymised.
7. Your Rights Under UU PDP
As a data subject under Indonesian law, you have the following rights regarding your personal data:
Right to Access— You may request a copy of the personal data we hold about you.
Right to Correction— You may request that we correct any inaccurate or incomplete personal data.
Right to Deletion— You may request that we delete your personal data, subject to our legal obligations to retain certain records.
Right to Withdraw Consent— Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Object— You may object to processing carried out on the basis of legitimate interest.
Right to Data Portability— You may request that we provide your personal data in a structured, machine-readable format.
To exercise any of these rights, please contact us at hello@byfigment.ai. We will respond within 14 business days. We may ask you to verify your identity before processing your request.
8. Cookies and Tracking
figment intelligence uses cookies and similar technologies to operate the platform and improve your experience.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential cookies | Required for login, session management, and core platform functionality | No — platform will not function without these |
| Analytics cookies | Understanding how users interact with the platform (aggregated, anonymised) | Yes — via browser settings |
We do not use advertising or tracking cookies.
9. Security
We implement technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.
However, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and to contact us immediately if you suspect your account has been compromised.
10. Children’s Privacy
figment intelligence is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect.
The most current version of this Policy will always be available at intelligence.byfigment.ai/privacy.
12. Contact and Complaints
For any questions, requests, or concerns regarding this Privacy Policy or how we handle your data, please contact our data team at:
figment
Jl. Hang Jebat I no.11, Jakarta, Indonesia
hello@byfigment.ai
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with Kementerian Komunikasi dan Informatika (Kominfo) as the Indonesian data protection authority.