Privacy Policy

Berdaya ("Berdaya," "we," "us," or "our") operates the Berdaya website at www.berdaya.ai, the Berdaya Agent desktop application, and the Berdaya API at api.berdaya.ai (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Account information. When you sign in with Google or GitHub, we receive your name, email address, and profile information made available by your identity provider. We use this to create and manage your account.

Billing and usage data. When you purchase prepaid tokens, we record transaction details, token balance, and usage events (such as model requests, token counts, and timestamps). Payments are processed by Midtrans; we do not store full payment card numbers on our servers.

API keys. We store a hashed form of your API keys and a short prefix for display. We cannot recover your full API key after creation.

Inference content. When you use Berdaya Agent or the API, your prompts and model responses are transmitted to our API and forwarded to upstream AI providers to fulfill your requests. We process this content to provide inference, metering, and billing. We do not use your prompts or responses to train our own models.

Device and agent data. The Berdaya Agent runs locally on your computer. Configuration, session data, and credentials may be stored on your device. When you connect the agent to your account, we may receive device authorization codes and connection metadata.

Technical data. We automatically collect standard log data such as IP address, browser type, request timestamps, and error logs when you use our website or API. This helps us operate, secure, and improve the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate you and manage your account
• Process payments and maintain your token balance
• Meter API usage and enforce account limits
• Send service-related communications (for example, billing confirmations)
• Detect, prevent, and address fraud, abuse, or security issues
• Improve reliability, performance, and user experience
• Comply with legal obligations

AI upstream providers. To fulfill inference requests, we send your prompts and related context to third-party AI providers (such as Anthropic, OpenAI, DeepSeek, or xAI, depending on model routing). Their use of your data is governed by their respective privacy policies.

Payment processors. We share billing information with Midtrans to process top-up payments.

Infrastructure providers. We use cloud hosting, database, and related services to run the Service. These providers process data on our behalf under contractual safeguards.

Legal requirements. We may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of Berdaya, our users, or others.

We do not sell your personal information.

We retain account, billing, and usage records for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. You may request deletion of your account by contacting us; some records may be retained where required by law or for legitimate business purposes (such as billing records).

We implement reasonable technical and organizational measures to protect your information, including encryption in transit, hashed API keys, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. To exercise these rights, contact us at berdaya.ai@gmail.com. We may need to verify your identity before responding.

You can revoke API keys at any time from your dashboard. You can disconnect third-party sign-in providers through your Google or GitHub account settings.

Your information may be processed in countries other than your own, including where our service providers and upstream AI providers operate. By using the Service, you consent to such transfers subject to applicable safeguards.

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at berdaya.ai@gmail.com.