Privacy Policy

Effective date: 28 October 2026

When you submit a contact enquiry, we store your name, email, optional business name, topic and message in Supabase and use Resend to deliver the enquiry to our support inbox. We also store a salted hash derived from technical IP information to limit spam; we do not store the raw IP address with your enquiry. Your address is used as Reply-to so our team can respond directly. We do not add contact enquiries to a marketing mailing list.

1. Who is responsible

“Getmocho” is the brand providing the services described on this website. For an active order, the service provider and contact channel will be identified in your order confirmation or receipt. This policy explains the information used to provide Getmocho’s website and services.

2. Information we may collect

• Contact and account details, such as your name, business name, email address, and account preferences.
• Service information, such as your brief, brand guidelines, social profile links, approved content, images, feedback, and support correspondence.
• Service and reporting data, including the deliverables prepared for you and performance figures you choose to share or authorize us to view.
• Payment information needed to reconcile an order, such as amount, payment status, date, and transaction reference. The payment provider handles sensitive payment credentials; we do not need your card PIN or banking password.
• Basic technical information needed to deliver and protect the website, such as browser, device, and security logs generated by the hosting service.

3. How we use it

We use information to respond to enquiries, prepare and deliver the service you request, manage your subscription and payment status, create monthly reports, provide support, keep records required for accounting or law, prevent misuse, and maintain the security of the website. We use information for another purpose only where you agree or the law permits it.

4. Social-platform access

To prepare performance reports, we may need account insights that you provide or authorize through a platform’s official access controls. Do not send us your social-media password. You can revoke access through the relevant platform and should tell us if access needs to be removed.

5. Service providers and sharing

We may share only the information needed with service providers that help us operate the website, host files, manage an eligible domain, process payments, or deliver the requested work. The payment provider processes payment credentials under its own privacy notice and returns transaction confirmation details to us. We do not sell personal information. We may disclose information when required by law, to protect people or services, or to resolve a dispute.

Some providers or platforms may process data in countries other than Indonesia. Where required, we will use appropriate safeguards and explain material changes to this policy.

6. Cookies and external services

The website uses essential account and language-preference functions and does not intentionally run advertising trackers. The website loads fonts from Google Fonts; when your browser requests those fonts, Google may receive standard technical request information under its own terms and privacy policy. We will update this section if we add analytics, advertising cookies, or other non-essential tracking.

7. Retention and security

We keep information only for as long as reasonably needed to provide the service, maintain business and payment records, handle disputes, and meet legal obligations. Retention periods depend on the type of record and applicable requirements. We use reasonable safeguards to protect information, but no internet transmission or storage system can be guaranteed completely secure.

8. Your choices and requests

Subject to applicable law, you may request access to or correction of your personal information, ask us to delete it, withdraw consent where processing relies on consent, or raise a concern about how it is handled. We may need to verify your identity before responding and may retain records we are legally required to keep. Email privacy requests to hello@getmocho.com. GetMocho serves businesses across Indonesia.

9. Children and updates

Getmocho’s services are intended for businesses and are not directed to children. We do not knowingly request children’s personal information. We may update this policy as services or legal requirements change; the current version and effective date will appear on this page.

10. Contact

For a privacy request or question, email hello@getmocho.com. GetMocho serves businesses across Indonesia. Send an enquiry through our Contact Us page or email hello@getmocho.com.

Website automation: data and purpose

Where commissioned, workflows may process customer names and contact details, enquiries, email content and metadata, attachments, task and follow-up records, AI drafts, summaries and operational logs. Only the sources, fields, account permissions and workflows agreed for the client’s deployment are connected. Data is used to record enquiries, prepare drafts and briefings, coordinate follow-ups, deliver authorized messages, provide support and diagnose failures. Avoid uploading sensitive or unnecessary personal data.

Client instructions and connected accounts

GetMocho manages its own account, billing, support and security records. When processing customer information in a client’s automation system, the client determines the business purpose and must have authority and an appropriate basis to provide that data. The deployment agreement records GetMocho’s instructions, permitted processing and responsibilities. Supported mailbox connections use authorized permissions; access can be revoked through the provider, which may stop dependent workflows.

AI, email and infrastructure providers

Supabase supports GetMocho’s account, database and private-file functions; Resend delivers system notifications and contact enquiries. A client automation deployment may additionally use hosting, domain, email, integration and AI API providers confirmed in its service agreement. Relevant enquiry or email text may be sent to the selected AI provider to generate a draft or summary. Provider terms and retention settings vary; the selected providers, data scope, retention and processing locations must be documented before connecting live client data. Providers may process information outside Indonesia, subject to applicable transfer requirements.

AI review and automated actions

Human review is the default for AI reply drafts; automatic acknowledgements and other messages require explicitly approved rules. This service is designed for operational assistance, not solely automated decisions with legal or similarly significant effects. Any proposed use of that kind requires a separate assessment and agreement before activation.

Automation retention, export and requests

The client agreement sets retention and deletion arrangements for business records, attachments, logs and backups, and the export procedure when the service ends. Records are kept only for the agreed operational purpose or applicable legal obligations; deletion from backups may follow the provider’s documented lifecycle. A request about a client business’s customer records should normally be directed to that business; GetMocho assists under the client’s instructions. For your own GetMocho account or privacy concerns, email hello@getmocho.com.