Draft for legal review. This text has not been reviewed by counsel and is not yet the final document.
Last updated24 October 2026
Mezomite.ai is a consulting practice based in Jakarta. This policy explains what the mezomite.ai site collects, why, how long it is kept, and how to ask for deletion.
Who controls the data
The data controller is Mezomite.ai, Jakarta, Indonesia. Questions about this policy go to halo@mezomite.ai. We reply within one business day.
What we collect
We collect two groups of data: what you send through the forms, and the minimum technical data required to run the site.
- Contact form: name, email address, company name, headcount, and the message itself.
- Booking form: name, email address, company name, chosen time, and any notes.
- Consent record: the categories you chose, the policy version, the time, and a truncated IP address.
- Bot check: a Turnstile token and IP address, processed by Cloudflare to confirm a person sent the form.
- Server logs: request time, IP address, and status code, held by Cloudflare for 90 days.
Why we process it
We process form data because you asked us to, either to answer a message or to confirm a booking. The lawful basis is your consent and, once work is agreed, performance of a contract.
We do not use your data for advertising, we do not sell it, and we do not send a newsletter without a separate sign-up.
Who receives it
Data reaches only the parties needed to run the site:
- Cloudflare, for hosting, the database, and the bot check. Data may be processed outside Indonesia.
- Resend, to deliver the notification email to our inbox.
- The domain registrar, for domain registration records.
How long we keep it
Form messages and booking data are kept for 12 months, then deleted. Consent records are kept for 24 months because we have to be able to show our lawful basis. Server logs expire automatically after 90 days. Data that has reached our email inbox follows the internal email retention policy.
Your rights
You may ask for a copy of your data, ask for correction, ask for deletion, withdraw consent, and object to processing. Send the request to halo@mezomite.ai with the subject “Data request”. We answer within 14 calendar days.
If our answer is not satisfactory, you may complain to the Indonesian data protection authority.
Security
The site runs HTTPS with HSTS, API keys live in environment variables, and database access is limited to the server functions that need it. We do not write personal data to application logs.
Children
This site is written for business owners and managers. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes, the date at the top of the page changes with it, and any change affecting the lawful basis is announced through a banner on the site.