Privacy policy

Who we are

Tsaheylu is operated by [TODO owner: full name or legal entity acting as data controller, and postal address]. We act as the personal data controller for this service.

Questions about personal data can be sent to halo@tsaheylu.id.

Data we collect

We collect only what is needed to run the service.

• Google account: the name, email address and profile photo Google provides when you sign in. We never receive your Google password.
• The plan you enter: space name, partner names, city, event dates, marriage path, budget, checklist, vendor list, seserahan and notes.
• Invited partners: invitations are sent as links. A partner who joins signs in with their own Google account.
• Conversations with the AI assistant and research history, stored in your space.
• Technical data: a login session cookie, a language preference cookie, and server logs for security and fixing errors.
• The public calculator at /hitung sends no data to our servers. Your choices exist only in the page link.

Cookies and analytics

We use the cookies that are necessary: one to keep you signed in and one to remember your language. There are no advertising cookies or third-party trackers.

On public pages we may use Umami, cookie-less analytics that counts visits and calculator use in aggregate. Umami respects your browser's Do Not Track setting and is not active inside the app (/app).

Purposes and legal bases

• Running the service you asked for (budget, checklist, collaboration with your partner): to perform the agreement to use the service.
• Signing in with Google and using AI features: with your consent, which you can withdraw at any time.
• Security, abuse prevention and usage limits: our legitimate interest in keeping the service safe.
• We do not sell your data and do not use it for advertising.

AI processing

When you use the assistant, your messages are sent to OpenRouter, which forwards them to a language model provider. For web research, search keywords are sent to Tavily.

We limit what is sent. The plan context shared with the model is only city, marriage path, target date, estimated guest count, and a budget summary if you are allowed to see money. Space name, partner names, event titles and locations, vendor contacts and account data are not sent. Email addresses and phone numbers typed into free text are masked before sending.

AI answers can be wrong. See the Terms of use for the limits.

Who processes data for us

We use the providers below as data processors. They may use data only to provide their service to us.

• Google: sign-in with a Google account.
• Turso: the database where your plan is stored.
• OpenRouter and the model providers behind it: the AI assistant.
• Tavily: web search for vendor research.
• Email provider [TODO owner: provider name]: reminders and notifications to your email.
• Hosting provider [TODO owner: provider name and server region].
• Umami (self-hosted): cookie-less analytics for public pages.

Transfers abroad

Some of the providers above store or process data outside Indonesia. By using the service you agree to your data being sent there to the extent needed. We choose providers with adequate data protection and limit what is sent.

How long we keep data

• Space and account data: while your account is active.
• Deleted spaces: permanently deleted after a 7-day grace period.
• AI usage records (metadata only, no message content): 180 days.
• Web search cache: 7 days.
• Server logs: 30 days.
• AI conversation content lives in your space and is deleted along with it.

Your rights

Under UU PDP you have the right to access, correct, delete, restrict and port your data, to withdraw consent, and to object to processing.

The app provides data export and deletion of your account and all your spaces in settings. Until that is available for your account, or if you need help, send a request to halo@tsaheylu.id and we will reply within a reasonable time.

Security and breaches

Connections are encrypted, data access is limited per space, and access to money data is controlled separately. No system is fully immune. If personal data protection fails, we notify affected people and the competent authority within 3 x 24 hours of becoming aware.

Children

The service is for adults planning a wedding. We do not knowingly collect children's data.

Changes to this policy

If this policy changes in a meaningful way, we will tell you in the app or by email and update the date above.