Data Processing Agreement

1. Data Controller

MeerKat operates as the data processor. The tenant (you) is the data controller — you decide what data is processed and why.

2. What We Process

• Messages from WhatsApp groups and DMs you connect
• Contact names and phone numbers
• Group names and membership rosters
• Images (only if vision analysis is enabled)
• Knowledge entries you create manually

3. Purpose

Data is processed solely to:

• Power your AI assistant responses
• Build and search your knowledge base (RAG)
• Track tasks, commitments, and reminders
• Generate analytics and activity logs

4. Storage Location

All data is stored on servers located in Indonesia. We do not transfer personal data outside Indonesia unless you explicitly enable a cloud LLM provider (OpenAI, Anthropic, etc.) — in which case, message content may be sent to that provider's API for processing.

5. Retention

Data is retained for the duration of your active subscription. After account closure, data is soft-deleted immediately and permanently removed within 30 days. Backups are rotated within 30 days.

6. Sub-processors

• Supabase (authentication)
• Your selected LLM provider (if configured)
• Hosting infrastructure (PostgreSQL, Redis, object storage)

7. Your Rights (UU PDP)

• Right to access your data (export anytime from Settings)
• Right to correction
• Right to deletion (close account from Settings)
• Right to withdraw consent

8. Breach Notification

In the event of a personal data breach, we will notify affected tenants within 72 hours, as required under Article 35 of UU PDP.

9. Contact

For data protection inquiries, contact the Data Controller at your registered email.