Legal
How PT Slicience Inovasi Indonesia handles personal data across Slicience, Prinnu, and SliSearch: data categories and purposes, legal basis, retention, recipients, transfers, your rights, and security.
Last updated 31 August 2026. · Write to [email protected] with a question or a request about this policy. That address handles privacy requests and removal requests. Write to [email protected] for help with an order.
Data controller: PT Slicience Inovasi Indonesia, Gold Coast Office Tower, Level 23, Pantai Indah Kapuk, North Jakarta, Indonesia. This policy covers slicience.com (Slicience), prinnu.com (Prinnu), and slisearch.com (SliSearch). Privacy requests: [email protected].
Account identity (email, display name, an optional verified Google profile link); quote and upload data (file metadata, checksums, geometry statistics); orders (contact and delivery details, payment data processed by our payment provider Xendit, courier data exchanged with Biteship); QC photographs retained 90 days as dispute evidence; support case text; pseudonymized SliSearch queries and anonymous like tokens; crawled public marketplace listing metadata; and security logs (hashed IP, user agent). We do not sell or rent personal data, and we run no advertising or retargeting.
Slicience uses contract performance for quoting, payment, production, delivery, and support. It uses legitimate interest for security, fraud prevention, malware scanning, and service reliability. It uses consent when the law requires consent or when you choose an optional message. It uses legal obligation for records that Indonesian law requires. You can withdraw consent at any time. Withdrawal does not affect earlier processing.
Abandoned or expired quote files are deleted 30 days after expiry. Model files for fulfilled orders are deleted 30 days after fulfillment unless held for an active dispute or legal duty. QC photographs are kept 90 days unless held. Pseudonymized raw search queries are deleted after 30 days; aggregated relevance metrics may remain. Cached marketplace previews are deleted on tombstone or removal. Financial, tax, audit, consent, and order records are retained for the period approved by Indonesian counsel and required law.
Payment is processed by Xendit; courier and tracking data is exchanged with Biteship; DNS, WAF, and Web Analytics run on Cloudflare; error telemetry goes to Sentry with PII scrubbing. Every subprocessor that receives personal data is contractually bound. Cloudflare Web Analytics provides privacy-focused aggregate measurement only; Sentry receives scrubbed error data only. Neither receives uploaded content, filenames, model or source URLs, addresses, email addresses, raw search queries, or payment details.
A transfer outside Indonesia occurs only when a service provider needs it to deliver part of the service. Slicience limits the transfer to the needed data and applies the safeguards required by Indonesian data protection law.
You may request access, correction, deletion, and objection; withdraw consent; complain to the competent Indonesian authority; and appeal a denial. All channels: [email protected]. Mandatory consumer rights under Indonesian law are not affected by anything on these sites.
Uploads use private object storage with object-level access; codes and credentials are hashed at rest; mutation endpoints are rate limited; every state-changing action is audit-logged with actor and reason. In a confirmed breach we respond per the approved incident procedure and notify affected individuals and the authority where required.
Commerce on Slicience and Prinnu is 18+. SliSearch may be used from 13+ with guardian consent where applicable. We do not knowingly collect personal data from children for commerce.
Slicience publishes a material change on this page with the date of the change. The version above is the version in force.
Slicience processes personal data under Law No. 27 of 2022 on Personal Data Protection. Contract performance covers quoting, payment, production, delivery, and support. Legitimate interest covers security, fraud prevention, malware scanning of uploads, and service reliability. Consent covers optional messages and any processing that the law reserves to consent. You can withdraw consent at any time, and the withdrawal does not affect earlier processing. Legal obligation covers tax records, accounting records, and a lawful order from an Indonesian authority. Slicience records the basis it relies on for each purpose, and it uses the narrowest basis that fits the purpose.
You can request access, correction, deletion, restriction, objection, and portability. You can withdraw consent that you gave earlier. Write to [email protected]. State the email address on your account and the order number when the request concerns an order. Slicience verifies your identity before it acts. Slicience responds within the period required by applicable data protection law. A retention hold or a legal duty can limit deletion. Slicience tells you what it keeps and why.
Slicience processes and stores personal data in Indonesia. Uploaded models, order records, and inspection photographs stay in Indonesian object storage and databases. A transfer outside Indonesia happens only where a processor needs it to deliver a part of the service. Slicience sends data to such a recipient only under a written contract that gives protection equal to Indonesian law. Slicience never transfers personal data for advertising, for profiling, or for resale. Write to [email protected] for the current list of recipients.
A paid order requires an age of 18 years or more. You confirm your age when you check out. SliSearch search is open from 13 years, with guardian consent where local law requires it. Slicience does not knowingly collect personal data from a child below these ages. Slicience deletes such data as soon as it learns of it. A parent or a guardian can write to [email protected] about a child's data.
The printability check runs automatically on every upload. It reads the geometry, the dimensions, the wall thickness, and the triangle count. It then accepts the model for quoting, or it rejects the model. A rejection stops the quote for that file. It has no effect on your account, your payment history, or your legal position. You can ask for a human review of any automatic rejection. Write to [email protected] with the quote reference. Slicience gives you the reason for the decision and the result of the review.
Slicience encrypts data in transit with TLS on all three domains. Uploads go to private object storage with object level access control. ClamAV scans every upload before any geometry work starts. An infected file never enters the quoting pipeline. Sign-in uses a single use magic link that expires in 15 minutes. An admin account also uses a TOTP second factor. Slicience hashes codes and credentials at rest. Slicience limits the rate of every mutation endpoint. Slicience writes an audit log entry for each state changing action, with the actor and the reason. Slicience reviews access rights on a regular schedule and removes an account that no longer needs access.
Slicience runs a written incident procedure for a suspected personal data breach. The first step contains the incident and stops further access. Slicience then records the affected data, the cause, and the number of people involved. Slicience notifies you and the competent Indonesian authority within 72 hours of confirmation. The notice states the data involved, the likely effect, and the steps you can take. Slicience also states the measures it applies to limit the damage. Slicience keeps a written record of every incident, including an incident that needs no notice.
Slicience discloses personal data to an authority only under a valid legal order. Slicience checks that the request comes from a competent body and cites a legal basis. Slicience narrows the disclosure to the specific records that the order names. Slicience refuses a broad request and an informal request. Slicience tells you about a request that concerns your data, unless the law forbids that notice. Slicience keeps a record of every request it receives and every response it gives.
Write to [email protected] to ask about this policy, to request a copy of your data, or to ask Slicience to delete it. Slicience replies within one business day. Use [email protected] for help with an order.
