Privacy Policy

Your privacy and data security are our top priorities. Learn how we protect and handle your information.

Last updated: January 15, 2025

Our Commitment to Privacy

Xsistant is committed to protecting your privacy and ensuring the security of your personal data. This policy explains how we collect, use, and safeguard your information in compliance with Indonesian data protection laws (UU PDP 2022) and international standards.

Information We Collect

Personal Information

Name and contact information (email, phone)
Account credentials
Travel preferences and booking history
Payment information (processed securely)

Usage Data

AI conversation logs and interactions
App usage patterns and analytics
Performance metrics

Technical Information

IP addresses and device information
Browser type and version
Operating system and platform

How We Use Your Information

Service Provision

• Deliver AI travel assistance
• Process bookings and payments
• Manage your itineraries
• Enable communication features

Service Improvement

• Enhance AI accuracy
• Develop new features
• Troubleshoot issues
• Optimize user experience

Communication

• Send booking confirmations
• Flight status alerts
• Service updates
• Customer support

Legal Compliance

• Comply with regulations
• Respond to legal requests
• Prevent fraud
• Protect user safety

Data Security Measures

Technical Safeguards

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication
• Regular security audits
• Automated backup and disaster recovery

Operational Safeguards

• Access controls and permissions
• Employee security training
• Incident response procedures
• Data minimization policies
• Third-party security assessments

Your Data Rights

Access and Portability

Request a copy of your personal data and receive it in a structured, machine-readable format.

Correction and Updates

Update or correct any inaccurate or incomplete personal information we hold about you.

Deletion

Request deletion of your personal data, subject to legal and contractual obligations.

Processing Restrictions

Request that we limit the processing of your personal data in certain circumstances.

Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us:

Data Protection

Email: privacy@xsistant.com
Address: Jakarta, Indonesia

Response Time

We will respond to your privacy-related requests within 30 days as required by Indonesian law.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by email or through our service, and update the "Last updated" date at the top of this policy.

← Back to Home