Your data at AgenticLab

What we collect

• Account. Email, username, display name and password. The password is stored only as a hash, never as typed. Returning members' accounts were moved over from the previous AgenticLab site: email, username, name, password hash, join date and, for some accounts, an old bio.
• Profile. Bio, city, business type and "My setup", if you fill them in. All of it shows on your public profile.
• Community. Posts, comments, photos, likes, reports, points, Setup Path progress and notifications. Photos are shrunk in your browser and then redrawn on our server, so the location data in the file (EXIF/GPS) is never stored.
• Setup help form. Name, business type, goal and WhatsApp number. If you are logged in, the request is linked to your account.
• Technical data. When you log in, the site sets a session cookie (__Host-al_member) that scripts on the page cannot read; our database stores only its hash. Your language is part of the page address (/en), not a cookie. Our hosting provider logs the IP address and browser of every page request. To prevent abuse and to count downloads, the site keeps a keyed hash (a fingerprint that cannot be turned back into the address) of your IP address and browser type for at most one day; email addresses in those counters are stored as hashes too.

What we use it for

• Running your account and the community: logging in, profiles, posts, comments, notifications and points.
• Sending sign-up and password-reset emails. We may also email members announcements about AgenticLab; such emails always include an unsubscribe link.
• Following up setup help requests: the AMP team contacts you on WhatsApp.
• The community's AI assistant reads posts and comments in the Tanya / Stuck category to write answers.
• Keeping the site safe and orderly: submission limits, moderation, and banning accounts that break the Terms of Use.

Who else processes your data

We do not sell your data and use no advertising trackers. YouTube videos are only linked, never embedded on the site. These parties process data for us:

• Hostinger: website hosting, database and file storage, on servers in Indonesia. All the data above is stored here. Hostinger also receives every page request, including the IP address, browser and the address of the page opened.
• Resend: email delivery. Receives your email address and the email's content, including sign-up or password-reset links.
• Telegram: our team gets a Telegram notice for every help request (name, username if you are logged in, business type, goal and WhatsApp number) and for every content report (the post title and the reason).
• AI model provider (currently Grok by xAI): reads posts and comments in the Tanya / Stuck category, with their authors' usernames and display names, to prepare the community AI assistant's answers. The same model helps the team write a daily summary, which can include help requests.
• AMP (AmpedMedia.id): receives setup help requests in order to contact you.
• The AgenticLab team: moderators see reports and the reported content; admins also see help requests and visit counts per source.

This site's database, photos and files are stored on Hostinger's servers in Indonesia. Resend, Telegram and the AI model provider are companies based outside Indonesia, so the data they receive may be processed abroad. For example, email is sent through Resend's servers in Japan.

How long we keep it

• Account, profile, community content, points and progress: as long as your account exists, until you ask for deletion.
• Deleted posts and comments no longer show, but their text remains in our database. Photos from posts you delete yourself are deleted too.
• Login sessions last 30 days, sign-up and password-reset links 24 hours. Once expired, both are deleted automatically.
• Notifications are deleted automatically after 180 days.
• Help requests are kept until you ask for them to be deleted.
• Submission counters are deleted automatically when their period ends, between one minute and one day.
• Deleted data may remain in backups until those are replaced: our encrypted backups outside Hostinger and our hosting provider's own backups. It may also remain in the logs of the providers above under their own rules. Notices in the team's Telegram chat stay until they are deleted from the chat.

Your choices and rights

• See and correct. You can change your profile at any time with Edit profile. To change your email or get a copy of your data, email dev.team@agenticlab.id.
• Delete your account. Email dev.team@agenticlab.id from your account's email address and include your username. We delete the email, password, profile, visit records, notifications, likes, progress, points and help requests linked to the account, and end all its login sessions. Your posts and comments stay visible under the name "Anggota yang keluar" (a member who left). If you want any of them gone as well, delete them first with the Delete button or list them in your email. Reports you filed and the moderation record about your account are kept as a record of community moderation, without your name and email.
• Delete a help request. Email us with the WhatsApp number you entered on the form.
• Withdraw consent. You can withdraw your consent at any time by asking for your data to be deleted as above.

Content reports and contact

Found content that contains your personal data or photo, infringes copyright, or attacks someone? Members can press Report on the post or comment. Anyone can email dev.team@agenticlab.id with the link to the post and the reason, and our team will review it.

For questions, data requests or to object to an account ban, contact us at dev.team@agenticlab.id.

Security and changes

Passwords are stored as salted hashes (PBKDF2), and the site is served over HTTPS only. Every night the database and photos are backed up, encrypted, to a computer of our team outside Hostinger. The key that opens these backups is never stored at Hostinger.

If this policy changes, the date at the top of this page changes with it.