Privacy Policy

1. Introduction

Welcome to Opending. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our screenplay writing platform ("the Service").

We are committed to protecting your privacy in compliance with Indonesia's Personal Data Protection Law (UU No. 27/2022) and the Electronic Information and Transactions Law (UU No. 11/2008 as amended by UU No. 19/2016).

By using Opending, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you sign up via Google or Apple, we receive your name, email address, and profile picture from the authentication provider (Clerk). You may also provide additional profile information voluntarily.

2.2 Content Data

We store the screenplays, scripts, and any other content you create within the Service ("User Content"). This includes drafts, revisions, and metadata associated with your projects.

2.3 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, and actions taken within the writing workspace.

2.4 Technical Data

We collect technical information such as your IP address, browser type, device information, operating system, and access timestamps for security and service optimization purposes.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve the Service
• To authenticate your account and secure your access
• To save and synchronize your screenplay content across sessions
• To communicate with you about service updates, support inquiries, and account-related notices
• To analyze usage patterns and improve the writing experience
• To comply with legal obligations under applicable Indonesian law

4. Legal Basis for Processing

Under the Indonesian Personal Data Protection Law (UU PDP), we process your personal data based on:

• Your explicit consent (Article 20 UU PDP) — provided when you create an account and agree to this policy
• Contractual necessity — processing required to provide the Service you have requested
• Legitimate interest — improving and securing our platform, provided such interest does not override your rights

5. Data Storage and Retention

Your data is stored in a PostgreSQL database hosted by Neon on servers located in Singapore (ap-southeast-1). We retain your personal data and User Content for as long as your account remains active. If you delete your account, we will permanently delete your data within 30 days, except where retention is required by law.

6. Your Rights Under Indonesian Law

Under UU No. 27/2022, you have the following rights:

• Right to access — request a copy of your personal data we hold
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured, commonly used format
• Right to withdraw consent — revoke your consent at any time

To exercise any of these rights, contact us at opending.inc@gmail.com. We will respond within 14 business days.

7. Third-Party Services

We share your data with the following third-party service providers who help us operate the Service:

• Clerk — user authentication and account management
• Neon — PostgreSQL database hosting (Singapore)
• Payment processors — to handle paid subscription transactions (the specific provider depends on the payment method you select)
• Analytics providers — to understand platform usage and improve the product

These providers are contractually bound to protect your data and process it only per our instructions.

8. International Data Transfer

Your data is stored on servers in Singapore. Data transferred from Indonesia to Singapore is protected under this policy. Singapore is recognized as having an adequate level of data protection. Where data is processed by service providers in other jurisdictions, we ensure appropriate safeguards are in place.

9. Cookies and Tracking

We use essential cookies required for the Service to function (authentication sessions, security). We may also use analytics cookies to understand how the platform is used. You can disable non-essential cookies through your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), access controls, and regular security reviews. In the event of a data breach, we will notify affected users and the relevant authorities within 3×24 hours as required by Article 40 of UU PDP.

11. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent. If you believe a minor has provided us with personal data without consent, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a notice on the platform at least 14 days before they take effect. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: opending.inc@gmail.com
• Address: Bandung, Indonesia