OneBizPro
← Back to OneBizPro

Legal

Privacy Policy

Last updated: October 14, 2026

This policy explains how PT OneBizPro Inovasi Indonesia (“OneBizPro”, “we”, “us”) collects, uses, and protects personal information when you visit our website, use the OneBizPro platform, or connect a TikTok account.

1. Information We Collect

Information you give us

  • Business Checkup and contact forms: your name, business or organisation name, WhatsApp number, type of business, and your answers (for example team size range, main challenges, and software currently used).
  • Messages: what you send us, for example over WhatsApp.
  • Platform account and business data: if you use the OneBizPro platform, the account and contact details you register with, and the business data you choose to enter or import (which depends on the modules you use).

Information collected automatically

When you visit our website we and our service providers may receive technical information such as your IP address, browser and device type, pages visited, the page that referred you, and campaign (UTM) parameters if you arrive from one of our ads.

Information from TikTok

If you choose to connect a TikTok account, we receive the TikTok data described in the sections below, limited to the permissions you grant.

Our role

For information about you that we collect for our own purposes (for example enquiries and website visits), PT OneBizPro Inovasi Indonesia is the party responsible for that data. For personal data about your own customers, staff, or audiences that you enter into the platform, you decide how it is used and we process it on your behalf to provide the Services.

2. TikTok Account Authorization

The TikTok integration is currently being developed and may not be available to all users. It will use TikTok’s official authorisation (OAuth) flow. Access to data from your TikTok account only happens after you complete that flow.

  • You are redirected to TikTok’s own screen and sign in with TikTok directly. OneBizPro does not receive or store your TikTok password.
  • The screen shows the permissions requested, and you decide whether to grant them.
  • If you approve, TikTok gives us access tokens that let us request the permitted data on your behalf. We use these tokens only to retrieve the data described in this policy, and treat them as sensitive credentials.
  • You can withdraw access at any time (see “Account Disconnection and Data Deletion”).

3. TikTok Data We Access

The data we can access is determined by the permissions TikTok approves for our application and that you grant. For the purpose of analysing content performance and supporting affiliate marketing optimisation, we expect to request the following categories, and only to the extent the corresponding permissions are approved and granted:

  • Basic profile information: such as your TikTok display name, profile picture, and account identifier.
  • Account statistics: such as follower, following, like, and video counts.
  • Video information and performance: details of your videos (such as title or description, cover image, publish time, and link) and their engagement metrics (such as views, likes, comments, and shares).

We will request only what is needed for the features described here. If we later need additional categories of data, we will update this policy first, and TikTok will show you the additional permissions for your approval.

4. How We Use Information

We use personal information to:

  • provide, operate, and maintain the Services and respond to your enquiries;
  • contact you, including through WhatsApp, about your Business Checkup result, demos, and suitable packages;
  • generate analysis, insights, and recommendations you request (see “AI Processing and Automated Analysis”);
  • improve, secure, and troubleshoot the Services and prevent misuse;
  • measure and optimise the performance of our advertising campaigns;
  • comply with legal obligations and enforce our terms.

TikTok data is used only to provide the features you ask for, such as showing analysis of your own content and video performance and generating recommendations for your account. We will not use it for purposes you have not been informed of.

Where Indonesian personal data protection law applies, we rely on lawful bases such as your consent, performance of a contract or steps you request before entering into one, our legitimate interests, and compliance with legal obligations.

5. AI Processing and Automated Analysis

We use AI models and automated workflows (including workflow automation tools such as n8n) to analyse data and generate insights. To do this, the data needed for a given analysis (for example video metrics or business data you provide) may be processed by AI and automation service providers acting on our behalf.

  • AI outputs are generated automatically and may contain errors; see our Terms of Service.
  • The Business Checkup applies automated scoring to your answers to suggest a package. The resulting score, stage, and recommendation are saved with your enquiry for our internal use, and our team may review them when following up with you.
  • Access by our personnel is limited to what is needed to operate and support the Services.

The specific providers we use may change over time as we improve the Services.

6. Data Storage and Security

Our website is hosted using Vercel. Information you submit through our forms is sent to our platform systems so that our team can follow up. Platform data is stored on infrastructure operated by us or by our cloud providers.

We take reasonable technical and organisational measures intended to protect personal information, including the use of encrypted (HTTPS) connections for our website. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected individuals and the relevant authorities as required by applicable law.

7. Data Sharing and Third-Party Processors

We share personal information only in the situations below.

  • Service providers and processors that help us run the Services, such as hosting and infrastructure (for example Vercel), workflow automation, AI and model providers, and messaging (for example WhatsApp, operated by Meta). They may process data only to provide their services to us.
  • Advertising and analytics: Meta receives information through the Meta Pixel on our website (see “Cookies and Website Analytics”). Meta’s own privacy policy applies to its use of that information.
  • Legal and safety: when required by law, regulation, legal process, or a lawful request from authorities, or to protect the rights, safety, and security of OneBizPro, our users, or others.
  • Business changes: in connection with a merger, acquisition, or sale of assets, subject to appropriate protections.
  • With your consent or at your direction, and with other authorised users within your own business account.

8. Data Retention

We keep personal information for as long as needed for the purposes in this policy, to comply with legal, accounting, and reporting requirements, and to resolve disputes and enforce our agreements. After that, we delete or anonymise it.

  • Enquiry and lead information is kept while we are following up with you or maintaining a business relationship, and for as long as needed afterwards for the reasons above.
  • TikTok data and access tokens are kept while your TikTok account remains connected and the data is needed to provide the features. When you disconnect, revoke access, or ask us to delete your data, we stop accessing your TikTok account and delete or anonymise the TikTok data and tokens we hold, except where we must keep information to meet a legal obligation or handle a dispute.

9. Account Disconnection and Data Deletion

Disconnecting your TikTok account

  • Revoke OneBizPro’s access at any time from the connected apps or authorisation settings in your TikTok account.
  • Where the platform provides a disconnect option for the integration, you can also use it.
  • Or contact us using the details in “Contact Information” and we will help you disconnect.

After access is revoked we can no longer retrieve new data from your TikTok account. Data we already retrieved remains until it is deleted under this policy or at your request.

Requesting deletion of your data

  1. Send a request through any contact method below, titled “Data Deletion Request”. Include your name, your business or organisation, the contact details you used with us, your TikTok username if the request concerns TikTok data, and whether you want only your TikTok data deleted or all of your data (including your platform account).
  2. We verify it is you. To protect against unauthorised requests, we may ask you to confirm your identity, for example by replying from the WhatsApp number or email you used with us.
  3. We delete or anonymise the personal data we hold about you and instruct our processors to do the same, then confirm back to you. We may keep limited information where the law requires it or where it is needed to handle a dispute.

10. User Rights and Choices

Under Indonesian Law No. 27 of 2022 on Personal Data Protection and other applicable laws, you may have rights to:

  • access personal data we hold about you and obtain a copy;
  • have inaccurate or incomplete data corrected;
  • have your data deleted or ask us to stop processing it, in the cases the law provides;
  • withdraw consent you have given (this does not affect processing that happened before you withdrew it);
  • object to certain processing, including automated decision-making in the cases the law provides;
  • obtain your data in a commonly used format, where applicable.

To exercise a right, contact us using the details in “Contact Information”. We may need to verify your identity first. You can also ask us to stop contacting you for marketing, and you can revoke TikTok access yourself at any time.

11. Cookies and Website Analytics

At the time of writing, the advertising and analytics tool on our website is the Meta Pixel. It uses cookies and similar technologies to record, for example, page views and when a form is submitted (a “Lead” event), together with technical information such as page URLs, device and browser details, IP address, and cookie identifiers. We use this to measure and optimise our advertising. Our website may also use cookies or similar technologies that are strictly necessary for it to work.

You can block or delete cookies in your browser settings, and manage ad preferences in your Meta account settings. Blocking cookies may affect how parts of the website work. If we add other analytics or advertising tools, we will update this policy.

12. International Data Transfers

Some of our service providers (and TikTok and Meta themselves) may process information in countries other than Indonesia, where data protection laws may differ. Where required by applicable law, we take reasonable steps to make sure personal information that is transferred abroad remains appropriately protected.

13. Children’s Privacy

The Services are intended for businesses and organisations and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. The current version is always available on this page, and we will take reasonable steps to let you know about material changes. If we add new categories of TikTok data, we will update this policy before requesting them, and TikTok will ask for your approval through its own authorisation screen. See also our Terms of Service.

15. Contact Information

For privacy questions, to exercise your rights, or to request data deletion, contact: