Moralynk
🇮🇩 Indonesia🇬🇧 English
Sign in Sign up free
Terms & Conditions Privacy Policy Refund Policy Content Rules

Privacy Policy

Last updated: 15 October 2026

This policy explains how Moralynk ("we", "us") collects, uses, and protects your personal data when you use Moralynk, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and related regulations. If you are in another region and your local law gives you additional rights over your personal data, we will respect them.

1. Data we collect

  • Account data: name, email address, WhatsApp number, and password. We store your name, email, and WhatsApp number as you entered them, because they are used to contact you and to make sure one person does not create duplicate accounts. We never store your password: only a one-way hash is kept, which we cannot read or reverse. If you sign in with Google, we receive your name, email, and Google account identifier; we do not receive your Google password.
  • Page data: page name, photo, links, products, theme, and other content you upload.
  • Transaction data: plan, amount, and payment status. Payments are processed by Midtrans; we do not store your card or bank account numbers.
  • Public page visit data: device type, the site or app a visitor came from, link clicks, and a hashed visitor code (not the real IP address) used to count unique visitors. Bots and previews are not counted.
  • Log data: important account activity such as sign-ins, plan changes, and administrative actions, for security and troubleshooting.
  • Sign-in device data: the browser and operating system (e.g. "Chrome on macOS"), IP address, and the time of sign-in and last activity for each device used to sign in to your account. This is used to show the device list on your Profile page, let you sign out devices you do not recognise, and send security emails when a new device signs in or 2FA is turned off.
  • Newsletter subscriber data: emails that visitors submit through the subscribe form on your page.

2. How we use data

  • To create and run your account, pages, store, and analytics.
  • To process payments, activate plans, and send expiry reminders, receipts, and service notifications by email or WhatsApp.
  • To keep the service secure, prevent abuse and duplicate accounts, and enforce our terms.
  • To understand and improve the service (analytics, only if you accept analytics cookies).
  • To meet legal obligations.

3. Our role regarding your customers' data

For newsletter subscriber emails and order data that you collect through your page, you are the data controller and we only process that data on your behalf (as a processor) to run the service. We do not use it for our own purposes and we do not sell it. You are responsible for informing your customers how their data is used and for obtaining any consent required.

4. Who we share data with

We do not sell your personal data. We share it only as needed with:

  • Midtrans (payment processing).
  • Google (only if you choose to sign in with Google, and for Google Analytics if you accept analytics cookies).
  • The email and WhatsApp providers we use to deliver service notifications.
  • Our hosting and infrastructure providers.
  • Authorities, where required by law or a valid order.

5. Cookies and similar technologies

  • Necessary cookies: your sign-in session, form security token, and language choice. The service cannot work without them.
  • Analytics cookies (Google Analytics): used only on our marketing pages (home, pricing, and sign-up) and only after you accept them in the cookie banner. You can decline or change your choice at any time with the "Cookie settings" link at the bottom of the site. The dashboard, admin panel, and tenants' public pages do not use Google Analytics.

6. Storage and security

We keep data while your account is active or as long as needed to provide the service and meet legal obligations (for example, transaction records). These are the protections we actually apply:

  • Passwords are hashed one-way (bcrypt). We cannot see them; if you forget yours, you reset it through an email link.
  • Integration secrets (payments, email, WhatsApp, and Google sign-in) are stored encrypted.
  • Payment data: we do not store your card or account numbers; everything is processed directly by Midtrans.
  • Sign-in device records: device records (browser, operating system, IP) are kept while your account is active and deleted when the account is deleted. Active-session entries are removed when you sign out or sign a device out.
  • Visit data: visitors are recognised by a hashed code, not their real IP address.
  • Data separation: each account's data is logically separated, and only members you grant access to can open your page data.
  • Administrator access: our administrators can view account data and, when needed for support or security, sign in as a user. Every such administrative action is recorded in an activity log.

To be upfront: your name, email, and WhatsApp number are not encrypted inside the database, because they are used to contact and verify accounts. We restrict access to the database. No system is completely secure; if an incident affects your personal data, we will notify you and the relevant authorities as required by applicable law.

7. Your rights

You have the right to access, update, correct, obtain a copy of, restrict the processing of, withdraw consent for, and request deletion of your personal data. You can do most of this yourself in the Account and Settings menus. For other requests, including account deletion, contact us at the contact email shown at the bottom of the site . We will respond within a reasonable time as required by law.

8. Children

The service is not intended for anyone under 17. If we learn that a child's data was collected without valid consent, we will delete it.

9. Changes to this policy

We may update this policy. The date of the latest update is shown at the top of the page, and we will notify you of important changes.

10. Contact

Moralynk.