ScanMyTerms

Privacy Policy

ScanMyTerms
Effective date: 29 October 2026
Operator: PT AMCORE TECH INDONESIA (“we”, “us”)
Address: Jl. Cihampelas No. 201A, Cipaganti, Coblong, Bandung 40131, Jawa Barat, Indonesia
NIB: 0506260063185
Privacy contact: hello@amcoreai.com

1. Scope

This Policy explains how we collect, use, store, and share personal data when you use ScanMyTerms (the “Service”). We process data in line with Indonesia’s Personal Data Protection Law (UU PDP) and other applicable rules.

2. Data we collect

  • Contact data: your email address if you ask us to email you a Report link or if you buy a Report, and any messages and contact details you send us.
  • Document data: contract files, photos and text you submit for analysis, the document's file name, and the Report we generate from it (which quotes short passages from it).
  • Payment data: order details shared by Lemon Squeezy, our merchant of record: order number, the name and email address entered at checkout, country, amount, currency, tax and payment or refund status (card details are handled by Lemon Squeezy; we never receive full card numbers).
  • Technical data: IP address, device/browser type, timestamps, and basic usage logs needed for security and operation.

3. Purposes and legal bases

We use data to: provide and improve the Service; generate Reports; process payments; prevent fraud and abuse; meet legal obligations; and respond to your requests. Bases include performance of a contract, legitimate interests (security and service improvement), consent where required, and legal obligation.

4. Document handling

When you upload a file, your browser normally extracts the text and sends us only that text; text you paste is sent as you entered it. If your browser can't extract the text, the file itself is sent to our server, read in memory and not saved. Photos are sent only so their text can be read, and are not stored by us. The text and photos are processed by Google's Gemini AI service to produce your Report. We may instead use Anthropic's Claude AI service, which would receive the same text and photos. These AI providers process data outside Indonesia and may keep what we send them for a limited period under their own terms, for example to detect abuse (see Section 6). We normally erase the text from our database as soon as the analysis finishes or fails; if a scan is interrupted, the text is deleted together with its Report (see Section 8). We do not sell document contents, and we do not use your documents, photos or Reports to train AI models. How long we keep each kind of data is set out in Section 8.

5. Sharing

We share personal data only with the following, and only as needed to run the Service:

  • Google Cloud (hosting, server logs and scheduled tasks) and Neon (our database provider), which store and process data on our instructions;
  • Google (Gemini AI) and, if we use it, Anthropic (Claude AI), which process document text and photos to produce Reports (see Section 4);
  • Lemon Squeezy, the merchant of record that runs checkout and payments and shares order details with us (see Section 8);
  • Resend, which delivers the emails we send you (your email address, a subject line containing the document name, and the Report link);
  • Cloudflare, which provides our cookie-free visitor statistics (pages viewed, including their web addresses, the referring page and page-load performance) and forwards email sent to our contact address;
  • Professional advisers or authorities when required by law or to protect rights and safety.

We do not sell personal data.

6. International transfers

The service providers listed in Section 5 are based in, or process data in, countries outside Indonesia, including the United States, and Google may process AI requests in any country where it has facilities. Where we transfer personal data abroad, we do so as required by Article 56 of UU PDP and other applicable law.

7. Security

We apply reasonable technical and organisational measures (access controls, encryption in transit where supported, and least-privilege access). No method of transmission or storage is 100% secure.

8. Retention

  • Reports (the document name, the analysis including short quotes from your document, whether it was paid for, and any email address you gave us or used at checkout): deleted automatically 7 days after creation. Our cleanup runs once a day, so deletion normally completes within a further 24 hours, but the Report link stops working at 7 days. To have a Report deleted sooner, email hello@amcoreai.com with the Report link; we will delete it and reply within the time required by applicable law.
  • Document text: erased as soon as the analysis finishes or fails, and in any case deleted together with its Report.
  • Original files and photos: not stored. When they reach our servers they are processed in memory only.
  • Payment records: Lemon Squeezy is the merchant of record for purchases. It runs the checkout, takes payment and keeps payment records under its own privacy policy and the tax laws that apply to it; we never receive your full card details. Lemon Squeezy shares order details with us (order number, the name and email address entered at checkout, country and postcode, amount, tax, payment status and, for card payments, the card brand and last four digits). We keep the transaction records we need for our tax and accounting obligations for as long as those laws require (under Indonesian tax law, generally 10 years). Within the Service itself, we keep only the paid status (deleted with the Report) and an order reference (deleted after 30 days).
  • Emails we send you (the Report link or unlock notice): delivered by our email provider, Resend, which keeps delivery records under its own policy.
  • Server logs (IP address, browser type, time, pages requested and error messages): kept by Google Cloud for up to 30 days.
  • Backups: deleted data may remain in our database provider's backups for a limited period before being overwritten.
  • Support emails: for the life of the enquiry plus a short archive period.

9. Your rights

Subject to UU PDP and other applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and withdraw consent where processing is based on consent. Contact hello@amcoreai.com. We will respond within the time limits set by applicable law. You may also lodge a complaint with the competent Indonesian authority.

10. Children

The Service is for users 18+. We do not knowingly collect data from children.

11. Cookies

We use only one cookie, and only if you pick a language with the language switcher: smt_lang, which remembers that choice for up to one year. We don't use advertising or tracking cookies. Our visitor statistics come from Cloudflare Web Analytics, which does not use cookies. If you dismiss the add-to-home-screen prompt, the site saves a small note in your browser's local storage so the prompt isn't shown again. The checkout page is run by Lemon Squeezy on its own site and is covered by its own policy. You can clear cookies and local storage in your browser settings.

12. Changes

We may update this Policy by posting a new version on this page with a revised effective date.

13. Contact

Privacy requests: hello@amcoreai.com
Postal: PT AMCORE TECH INDONESIA, Jl. Cihampelas No. 201A, Cipaganti, Coblong, Bandung 40131, Indonesia