Sahabat AI - Privacy & Data Protection Policy

Latest update: 28 June 2025

Sahabat AI collects and uses your chats, files, and account information only to deliver, improve, and secure the service; it does not sell your data or use it for advertising. Data is stored securely, can be deleted by you, and is shared only with trusted vendors to operate the platform, with clear options for data review, deletion, and policy updates.

Introduction

This Privacy Notice is effective as of 15 December 2025 and explains how PT Indosat Tbk (“We”) collect, analyze, use, store, transfer, or disclose your personal data (“Process” or “Processing”). This Privacy Notice applies to all users (“You”) of the Sahabat-AI chatbot accessible via https://sahabat-ai.com/ or related platforms that serve as entry points to Sahabat-AI (“Service”).

Please read and review this Privacy Notice to ensure that you fully understand our personal data processing practices.

Acknowledgement and Consent

By agreeing to this Privacy Notice, you acknowledge that you have read, understood, and consented to the Processing of your personal data as outlined in this Privacy Notice.

Collection

“Personal Data” means any data, whether true or not, about an individual who is identified from that data or can be identified indirectly by combining that data with other data and/or information, through electronic or non-electronic systems. “Applicable Law” means all laws, regulations, policies, or official decisions issued by government authorities or law enforcement agencies in Indonesia, including those on personal data protection.

The following are the types of Personal Data collected and how they are obtained.

Personal Data you provide to us

• User identification (Login ID): Your user identification in connection with your account (“Login ID”). Your phone number is used to identify your Login ID; if not associated with any Login ID, a new Login ID is created. The Service collects and stores your Login ID, while your phone number is processed only for authentication and is not stored in the Service environment.
• Input data: Any data or information you provide while using the Service, including your input to the chatbot (“Input”). You are strongly advised not to submit identifiable or sensitive Personal Data and to be careful when using the Service. Any Personal Data you choose to provide is at your own risk and responsibility, and IOH is not obliged to process or protect voluntarily provided sensitive data beyond applicable legal provisions.

Personal Data from use of the Service

The Service uses cookies that may collect data or information that can indirectly identify you when you access the Service, governed by the Cookie Notice. Currently, only essential information required to access and use the Service is collected, and you will be notified if this changes.

Use

Personal Data is used for the following purposes and any other purposes required by Applicable Law (“Purposes”).

• To authenticate your existing Login ID or create a new Login ID, allowing access to the Service.
• To enable provision of the Service to you, including responding to your inquiries via the chatbot.
• To train the models that support the chatbot.
• To develop, maintain, and improve the Service.
• To prevent, detect, and/or investigate suspicious activities, fraud, illegal actions, or misuse of the Service.
• For other purposes required by Applicable Law or as informed to you with your consent.

Disclosure

Personal Data is not sold or rented. Your Login ID is used only for authentication to the Service, and any Input you provide through the chatbot is not used for marketing or ad personalization.

Personal Data is not disclosed, access is not granted, and it is not shared with affiliates or other third parties, unless necessary to facilitate your use of the Service or required by Applicable Law; in such cases, you are notified via an updated Privacy Notice and data sharing follows data minimization principles. IOH is not responsible for personal data processing by external login platforms such as Google or Apple. Personal Data is stored only as long as necessary for processing purposes or legal obligations and is deleted or anonymized after retention ends or purposes are fulfilled.

Retention

Every Input you make on the chatbot is stored for one year to fulfill the Purposes described above or as permitted or required by Applicable Law, with possible shorter or longer retention if needed for legal compliance, dispute resolution, or security investigations.

Storage and Transfer

The phone number entered for authentication is not stored; only your Login ID and chatbot Input are stored. Data collected from you is stored in Indonesia in a secure and private environment managed by PT Indosat Tbk.

Personnel in other countries may process your data outside Indonesia when providing the Service, and any cross-border transfer is carried out only with appropriate safeguards and a level of protection equivalent to this Privacy Notice in accordance with Indonesian law.

Security

The confidentiality of your Personal Data is a top priority, and commercially reasonable efforts are made to protect and secure the Service against misuse, destruction, loss, copying, alteration, disclosure, or unauthorized access, including for any Input that contains Personal Data.

However, internet transmissions cannot be guaranteed to be completely secure or error-free, and no system is fully secure; you are responsible for deciding what information you provide and for maintaining the security of your device, including antivirus, system updates, and private networks. IOH does not guarantee that systems will be free from security failures or unauthorized access.

Children’s Data

You represent and warrant that you are at least 18 years old, or legally married if under 18, and not under guardianship, thus legally capable and authorized to agree to the Service. If you do not meet these requirements but still access the Service, you confirm that you have obtained the necessary consent from a parent, guardian, or custodian and, to the extent permitted by law, agree to release the provider from liability arising from your use.

IOH reserves the right to remove or limit user accounts that do not meet the age requirements.

Language

This Privacy Notice may be translated into one or more other languages; if there is any discrepancy between the Indonesian version and other language versions, the Indonesian version prevails and other language versions shall be adjusted to have the same meaning.

Changes to this Privacy Notice

This Privacy Notice may be reviewed and updated from time to time to align with future developments and/or changes in regulatory requirements. If changes are made, you will be notified via the website or other reasonable means and are responsible for reviewing the Privacy Notice periodically.

By continuing to use the Service, you acknowledge acceptance of this Privacy Notice and any changes; material changes will be notified, and continued use constitutes agreement to such changes.

How to Contact Us

If you have questions or requests regarding how your Personal Data is processed, or wish to exercise your rights under Applicable Law, you may contact Sahabat AI at support@sahabat-ai.com.