CariKOL
TermsPrivacy

Legal

Privacy Policy

Effective Date: July 21, 2026 · Last Updated: July 21, 2026

1. Introduction

CariKOL (“we,” “our,” or “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use CariKOL at https://carikol.id.

We comply with applicable data protection laws, including Indonesia's Personal Data Protection Law (UU PDP) and privacy principles consistent with the General Data Protection Regulation (GDPR). We never sell your personal data.

2. Information We Collect

2.1 Information You Provide

We may collect:

  • Name
  • Email address
  • Profile photo
  • Creator bio
  • Creator niche
  • Rate card
  • Portfolio links
  • Any additional information you voluntarily provide.

2.2 Information Collected Automatically

We collect:

  • Device information
  • Browser type
  • IP address
  • Operating system
  • Usage logs
  • Authentication logs

2.3 Information from Third Parties

When you connect third-party services, we may receive information from:

  • Google Sign-In
  • TikTok Login Kit

Only information explicitly authorized by you is collected.

3. TikTok Data We Access

When you connect your TikTok account, CariKOL accesses only the data you explicitly authorize through TikTok Login.

Depending on the permissions granted, this may include:

  • Public profile information (username, display name, profile photo, bio)
  • Follower count
  • Following count
  • Total likes
  • Public video information, including titles, cover images, and publicly available engagement metrics such as views, likes, comments, and shares

CariKOL does not access:

  • Private messages
  • Draft videos
  • Private account data
  • Information outside the permissions granted by the user

3.1 How We Use TikTok Data

TikTok data is used only to:

  • Verify ownership of your TikTok account
  • Build your AI-powered creator portfolio
  • Generate creator summaries and insights
  • Display your creator profile
  • Help brands and agencies discover creators

We never post content to TikTok on your behalf.

3.2 Disconnecting TikTok

You may disconnect your TikTok account at any time from your account settings.

After disconnection:

  • CariKOL immediately stops requesting new TikTok data.
  • Previously imported data is retained for up to 30 days before secure deletion unless you request immediate deletion.

3.3 Data Deletion

You may request deletion of your CariKOL account and associated personal data by contacting hello@carikol.id.

Verified deletion requests will be processed within 30 days, unless data must be retained for legal or security reasons.

4. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Authenticate your account
  • Generate AI-powered creator portfolios
  • Improve our products
  • Provide customer support
  • Communicate important updates
  • Comply with legal obligations

5. Data Sharing

We never sell personal data.

We may share data only:

  • With your consent
  • With trusted service providers
  • When required by law
  • During mergers or acquisitions

Current infrastructure providers include:

  • Supabase
  • Vercel
  • AI service providers used to generate portfolio content

6. Data Retention

We retain data only as long as necessary. Typical retention periods include:

  • Account data: Until account deletion + 30 days
  • TikTok data: While connected + 30 days after disconnection
  • Usage logs: Up to 12 months

Data is securely deleted or anonymized after the retention period.

7. Your Rights

You may request to:

  • Access your data
  • Correct inaccurate information
  • Delete your data
  • Restrict processing
  • Export your data
  • Withdraw consent

Requests can be submitted to hello@carikol.id. We respond within 30 days.

8. Security

We protect your data using industry-standard safeguards, including:

  • HTTPS/TLS encryption
  • OAuth authentication
  • Role-based access controls
  • Secure cloud infrastructure
  • Regular security reviews

No internet transmission is completely secure, but we continuously work to protect your information.

9. International Transfers

Your information may be processed outside Indonesia by trusted infrastructure providers. Appropriate safeguards are applied in accordance with applicable law.

10. Children's Privacy

CariKOL is not intended for children under 13 years old. If we learn we have collected personal information from a child under 13 without appropriate consent, we will delete it promptly.

11. Cookies

CariKOL uses essential cookies required for:

  • Authentication
  • Security
  • Session management

Disabling essential cookies may affect functionality.

12. Changes

We may update this Privacy Policy periodically. Material changes will be communicated through the website or email before becoming effective.

13. Contact

Questions regarding this Privacy Policy may be directed to: