Privacy policy

Last updated 16 October 2026

1. Who is responsible

isirooma is responsible for your personal data in isirooma (the "data controller"). Questions and requests: [email protected].

2. What we collect

• Your account: name, email address, password (stored only in scrambled, hashed form) and the language you chose. If you continue with Google: your Google account's ID, name and email address, and nothing else from it.
• Your creator profile, if you make one: the name, photo, city, description and links you enter, and whether staff verified it.
• Your plans: houses, rooms, items, sets, prices, store links, notes, budgets and the photos you upload.
• Who changed what: each house keeps an activity log of changes by its members, so members can see what happened.
• Houses you share with: which houses you belong to and your role there.
• Saves and copies in Inspiration: which shared rooms you saved, and which you copied from, and when.
• Payments: which plan you bought, the amount, the date, the payment provider and its reference number. Your card or e-wallet details go directly to the payment provider; we never see or store them.
• Store link clicks: when a visitor clicks a store link on a public house page, we count which link was clicked and when, so the owner can see their clicks. We don't record who the visitor is.
• Creator contact clicks: when a visitor opens a creator's website, Instagram or WhatsApp link on their profile, we count which link and when, so the creator can see how often people get in touch. Again, nothing about the visitor.

We don't use analytics, advertising or tracking tools, and we don't build profiles of you.

3. Why we use it

• To run the planner for you and the people you plan with (this is our agreement with you).
• To take payments and keep the records the law requires.
• To keep isirooma secure and prevent abuse, for example by briefly limiting how often requests can come from one internet address.
• To send you messages about your account, such as a password reset. In your first days we also send a few tips on using the planner; every one has a one-click link to stop them, and you can turn them off in your profile. We'll only send news or offers if you've agreed to it.

4. What others can see

• Members of your house see the house's whole plan, its activity log, and the names and emails of the other members.
• Public pages are only on when an owner turns them on. Anyone with the link can then see the rooms, items, prices, store links and photos, but not notes, members, or what's been bought.
• The public feed is only on when an owner turns it on, for a public house. Its visible rooms, with the house's name, are then listed on inspirasi.isirooma.com for anyone to browse, including search engines.
• Creator profiles are only public when you make yours public. Anyone can then see what you put on it (name, photo, city, description, website, Instagram and WhatsApp number) and the houses whose credits you accepted. While it's private, nobody but you sees it.
• Inspiration is only on when an owner turns it on. Other users can then see and copy the same things as on a public page. How many people saved or copied a room is shown in Inspiration and to the house's members, and helps order the feed; who saved or copied it is never shown.

5. Who helps us

We share data only with companies that help us run isirooma, only as much as they need, and under agreements that oblige them to protect it:

• our server hosting provider, where your data is stored (Singapore);
• Cloudflare, which delivers the website securely and protects it from attacks, and so sees visitors' internet addresses;
• the payment provider you pay with (Xendit, Midtrans or Stripe), for payments;
• an email delivery service, for messages such as password resets;
• Google, only if you choose to continue with Google, to confirm who you are.

We never sell your personal data. We share it with authorities only when the law requires us to.

6. Data stored outside your country

Our servers are in Singapore. If you live elsewhere, including Indonesia, your data is transferred there. We only use providers in places with a level of data protection at least equal to Indonesian law, or under contracts that require it, as the Personal Data Protection Law (UU PDP) and, for people in the EU, the GDPR require.

7. Cookies

We only use cookies that the planner needs to work: one that keeps you logged in, one that protects forms against forgery, and, if you choose "Remember me", one that keeps you logged in longer. Public house pages set no cookies at all. We use no advertising or analytics cookies, so there's nothing to agree to.

8. How long we keep it

• Your account and plans: for as long as you have an account. When you delete your account, it's deleted straight away, together with the houses you own; if you ask us by email instead, we delete it within 30 days. Backups that still contain it are erased within a further 14 days.
• Payment records: for as long as tax law requires (in Indonesia, up to 10 years).
• Store link click counts: as long as the house exists. Creator contact clicks: as long as the creator profile exists.

9. Your rights

You can ask us to:

• give you a copy of your personal data, including in a format you can take elsewhere;
• correct data that's wrong (most of it you can change yourself in the app);
• delete your account and data;
• stop or limit a use of your data, or withdraw a consent you gave.

You can download your data and delete your account yourself, under your profile → Your data. For anything else, email [email protected] from the address on your account. We'll answer as quickly as we can, within the time the law sets. If you're not happy with our answer, you can complain to your data protection authority: in Indonesia, the authority under the Personal Data Protection Law; in the EU, the authority in your country.

10. Keeping it safe

Connections are encrypted, passwords are stored hashed, and access to our servers is limited and protected. Our staff look at an account only to help when you ask, or to handle a legal request or abuse, and every such look is recorded. If a breach ever puts your data at risk, we'll tell you and the authorities within 3 × 24 hours of finding out, as the law requires.

11. Children

isirooma is for people aged 18 and over. We don't knowingly collect data from children; if you think a child has given us data, tell us and we'll delete it.

12. Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it applies. The date at the top shows the latest version.