1. Identity and scope
1stdev is an independent website service operated by Yogi Iskandar (Indonesian business registration NIB 2610260108914). Privacy requests: [email protected]; general enquiries: [email protected].
We control personal data used for our own enquiries and client relationships. When working with personal data under client instructions on a client-owned website, controller/processor responsibilities are specified in the project agreement and setup.
2. Data categories
You may share your name, business details, phone number, email address, project requirements, files, invoices and correspondence. Please do not send passwords or sensitive customer records through ordinary chat.
Hosting and security providers may process basic technical logs, including IP address, access time and user-agent, based on their actual configuration. The calculator operates in your browser; its WhatsApp summary is shared only if you choose to send the message.
3. Purposes and lawful grounds
We use relevant data to answer enquiries, prepare quotes, fulfil contracts, provide support, document projects, handle approved billing, maintain security and comply with law. A lawful basis may include precontractual or contractual necessity, legal obligations, valid consent where needed, or properly balanced legitimate interests. Visiting the site does not equal general marketing consent.
4. Cookies and third-party links
The Start a Project form collects the details you provide, including name, email, country, project type, budget range, timeline, references and requirements. When configured, submission is sent through a transactional email provider only to respond to your enquiry. Cloudflare Turnstile may process anti-spam signals and technical data under its own policies. If automatic email is unavailable, you can use a direct email link. Google Analytics 4 and Google Tag Manager load only with optional analytics consent. Google may process analytics cookies and technical visit data under its own policies. Voice Agent consultations require WhatsApp verification and separate consent to voice processing by ElevenLabs. A limited conversation summary may be retained for follow-up; audio and OTP codes are not stored in browser state after the session. You can request deletion through [email protected]. You can withdraw consent through Cookie settings in the footer; advertising cookies are not enabled by default.
WhatsApp, email and external websites have separate privacy practices. The separate portfolio and products may also have their own policies.
5. Sharing, international processing and security
Relevant information may be handled by hosting, domain, email, communications, payment or other project providers, and disclosed when required by law. We do not sell personal-data lists to advertisers. Provider locations may include countries outside Indonesia; applicable transfer safeguards will be assessed and observed.
We apply reasonable access controls and safeguards proportionate to the service, but no internet system has zero risk. We respond to legally notifiable incidents in accordance with applicable law.
6. Retention and your rights
We retain information for as long as needed for legitimate enquiries, contracts, warranties, accounting, disputes and legal duties, then delete, anonymise or restrict it as appropriate.
Subject to applicable law, you can seek information, access, corrections, withdrawal of consent where relevant, deletion or restriction, and other statutory rights. Email [email protected] with enough details to locate your record; proportionate identity verification may be required.
7. Children, changes and contact
The services are intended for people legally able to discuss or enter business agreements. If you share information about employees or customers, you must have appropriate authority and grounds. This notice may be updated when practices change; the last-updated date appears above. Contact [email protected].
This public policy does not replace an individual written project agreement or personalised legal advice.