Privacy Policy

Dexmod, at Talang Aman, Kec. Kemuning, Kota Palembang, Sumatera Selatan 30961, controls the personal data described here. Privacy requests may be sent to uniot.outech@gmail.com.

• Account data: name, email, password hash, verification state, role, account status, and connected Google or GitHub identity.
• Security data: session token, IP address, browser or device information, timestamps, and authentication events.
• Workspace data: Arduino projects, files, installed libraries, AI conversations, selected context, and change history.
• Service data: IoT device identifiers, hashed device tokens, telemetry, controls, commands, schedules, rules, acknowledgements, and operational events.
• Billing data: Midtrans order and transaction identifiers, product, amount, payment type, status, and fraud status. Dexmod does not store full card or bank credentials.
• Usage data: plan limits, AI credit ledger, provider token counts, error diagnostics, and reliability metrics.

We process data to create and secure accounts, save projects, provide AI and IoT functions, execute requested controls, process payments, maintain ledgers, prevent fraud and abuse, respond to support, back up data, monitor reliability, and comply with legal obligations.

Processing may rely on performance of the service agreement, consent where required, compliance with law, and legitimate interests such as security, fraud prevention, service improvement, and auditability. You may withdraw consent-based processing without affecting earlier lawful processing.

Dexmod uses providers required for hosting, encrypted backup, authentication, email, AI processing, and Midtrans payments. Google and GitHub receive OAuth requests only when selected. AI project context is sent to the configured AI provider only when you submit an AI operation. Some providers may process data outside Indonesia under their security and contractual safeguards.

Account and project data are retained while the account remains active and as needed for service, security, disputes, and legal duties. Telemetry retention follows the displayed plan. Payment and immutable wallet records may be retained for financial, fraud, and audit obligations. Deleted data may remain temporarily in encrypted backups until normal backup rotation removes it.

Dexmod uses access control, hashed credentials, TLS, per-device authorization, restricted infrastructure, logging, and encrypted off-host backups. No system is risk-free. Report suspected unauthorized access immediately and rotate exposed passwords or device tokens.

Subject to applicable law and identity verification, you may request access, correction, information about processing, deletion, restriction, objection, withdrawal of consent, or a copy of relevant personal data. Some requests may be limited by security, another person's rights, immutable financial records, or legal retention duties.

Material policy changes will be shown through the service or another reasonable channel. The date above identifies the current version.