1. Who we are
The controller of personal data for Classai Router is Classai, the operator of router.classai.id and classai.id. All questions and requests about personal data can be sent to halo@classai.id.
2. Data we collect
| Data | What it contains | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Account | Name, email, WhatsApp number (optional), password (as a hash) | Creating and managing your account, service communications | Performance of a contract | While the account is active |
| API keys | SHA-256 hash, encrypted copy, key name, prefix and last 4 characters | Checking every request, showing the key to you again | Performance of a contract | Until the key is deleted |
| Transactions | Order code, item, amount, fees, payment method and status, invoice | Processing payments, invoices, accounting and tax | Contract and legal obligation | 10 years (Company Documents Law) |
| API usage | Time, model, token count, cost, duration, status/error code, key used, source (API or playground) | Billing, Usage history, detecting abuse | Contract and legitimate interest | While the account is active |
| Security | IP address and device at sign-in; server access logs (IP, time, page/endpoint address, status) | Keeping accounts secure, preventing fraud and attacks | Legitimate interest | Sessions: until sign-out or 30 days; server logs: 14 days |
| Cookies & analytics | Session cookie, visit source (UTM), Google Analytics, Meta Pixel | Keeping you signed in, measuring visits and ads | Contract and consent | See section 7 |
2a. Voice & voice clones (Voice Studio)
- Voice samples and consent recordings for cloned voices are biometric data — specific personal data under the PDP Law. Both are stored privately in our storage and used only to create cloned voices belonging to your account.
- When a cloned voice is used on the ElevenLabs or Fish Audio engine, its sample is sent to that provider to create a copy of the voice; on VoxCPM2, dots.tts, and VoiceStudio, samples are processed on GPUs we rent from RunPod.
- Deleting a cloned voice deletes its samples and its copies at the providers. We keep consent recordings for up to 2 years as proof of permission, then delete them.
- Text you turn into speech is sent to the engine you choose. The resulting audio is stored in your account so you can play it again.
2b. Kai: Gmail & meeting notes
- Gmail (only if you connect it in Kai → Inbox): Kai reads emails when you ask — to search, summarize, prioritize, and prepare replies — and sends their content to the AI model through our gateway to answer your request. One-line summaries of inbox emails are kept up to 30 days; emails you approve for sending are logged for 90 days. Kai never sends an email without your click on “Approve”, never changes labels or read status, and never deletes email.
- Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Gmail data is not used for ads, not sold, not used to train AI models, and not read by humans unless you ask us to for support, for security purposes, or the law requires it. Revoke access at any time in Kai → Brain → Connections or at myaccount.google.com/permissions.
- Meeting notes: recordings are transcribed on your own device. Transcripts and notes are stored in your account; audio is kept (30 days) only if you turn on “keep audio”. Notes are emailed to you (can be turned off) and to other people only when you enter and confirm their addresses.
3. AI prompts & responses
We do not store prompt or response content
The content of requests to
/v1 (prompts, attachments, and responses) is passed through as is and is not stored in our database, server logs, or routing engine.- From each request we read only what is needed: the requested model and the token count reported by the provider, for billing.
- Playground conversations exist only in your browser tab and disappear when the page is closed.
- Model providers process prompts to generate responses and may retain them temporarily under their own policies (for example, to prevent abuse). This is outside our control.
- Automatic personal data redaction. Before a prompt is sent to the model developer, Indonesian national ID numbers (NIK) and payment card numbers are replaced with markers such as
[NIK disensor]. With the headerx-classai-pii: strict, emails and phone numbers are redacted too;x-classai-pii: offturns redaction off for that request. Full details are in the documentation. - Classai does not use your prompts or responses to train models.
- Our advice: don't send specific personal data (such as national ID numbers, health data, or financial data) or unnecessary secrets to any AI model.
4. Third parties
Data is shared only as far as needed to run the Service:
| Party | Data received | Purpose | Location |
|---|---|---|---|
| AI model providers: model developers (full list per model in section 5), directly or through API service providers/aggregators | Request content (prompts and attachments), after certain personal data is redacted automatically (section 3) | Generating responses | United States, China, and other countries (section 5) |
| Midtrans | Order and payment data | Processing payments and refunds | Indonesia |
| Resend | Email address and transactional email content | Sending verification emails, invoices, and receipts | United States |
| Google Analytics | Visit data: pages, device, approximate location (not active on admin pages) | Visit statistics | United States / global |
| Meta (Facebook/Instagram) — Meta Pixel & Conversions API | Page views, checkout starts (item and price), and purchases (value, currency, order code, item); email, WhatsApp number, name, and account ID as SHA-256 hashes (not plain text), IP address, device/browser type, _fbp/_fbc cookies. Test (sandbox) payments are not sent | Measuring and optimizing Classai ads | United States / global |
| Law enforcement | Data lawfully requested | When required by law | Indonesia |
We do not sell or rent your personal data to anyone.
5. Data transfers outside Indonesia & AI model sub-processors
Every prompt is sent to the developer of the model you choose. All model developers are located outside Indonesia. The list below is generated automatically from the models currently on sale, so it always matches the catalog.
| Model developer (sub-processor) | Country of origin | Processing location | Models on Classai Router |
|---|---|---|---|
| Anthropic | United States | United States / global (provider data centers) | Claude Opus 5.5, Claude Sonnet 5.5, Claude Opus 5, Claude Sonnet 5, Claude Sonnet 4.6, Claude Haiku 4.5, Claude Haiku 5.5, Claude Opus 4.6, Claude Fable 5, Claude Opus 4.8, Claude Opus 4.7 |
| United States | United States / global (provider data centers) | Gemini 3.1 Pro, Gemini 3.8 Flash, Gemini 3.8 Series, Gemma 4 31B (Free), Gemma 4 26B (Free) | |
| OpenAI | United States | United States / global (provider data centers) | GPT-4o, GPT-4.1, GPT-4o mini, GPT-6 Astra, GPT-5.6 Sol, GPT-6 Sol, GPT 6.1 Sol, GPT-5.6 Terra, GPT-5.6 Luna, GPT-6 Luna |
| xAI | United States | United States / global (provider data centers) | Grok 4.7 |
| Alibaba Cloud (Qwen) | China | China, or provider data centers in other countries | Qwen 3.8 Max, Qwen 3.7 Max, Qwen 3.7 Plus, Qwen 3.8 27B |
| DeepSeek | China | China, or provider data centers in other countries | DeepSeek V4.1 Flash, DeepSeek V4.1 Flash 1017, DeepSeek V4 Flash, DeepSeek V4 Flash 0731, DeepSeek V4 Pro, DeepSeek V4 Pro 0813, Kai Grant · DeepSeek V4.1 Flash |
| MiniMax | China | China, or provider data centers in other countries | MiniMax M3, MiniMax M2.7 |
| Moonshot AI (Kimi) | China | China, or provider data centers in other countries | Kimi K3, Kimi K2.7 Code, Kimi K2.6 |
| Tencent (Hunyuan) | China | China, or provider data centers in other countries | Hy3 |
| Zhipu AI (GLM) | China | China, or provider data centers in other countries | GLM 5.3, GLM 5.2, GLM 5.3 Flash, GLM 5.1 |
| Other model developers | Various | Depends on the model developer | LongCat 2.5 (Free), Beam 1.0 501B (Free), Step 3.7 Flash (Free), Solar Mini 4 (Free), Nemotron 3 Ultra 550B (Free), Nemotron 3.5 Super VL (Free), Nemotron 3.5 Lightning (Free), Nemotron 3 Nano Omni (Free), North Mini Code (Free), dots 3 Note (Free), Xing 4.0 29B (Free), Flint 1.0 (Free), LFM 3 1.7B (Free), LFM 2.5 2.6B (Free) |
| API service providers & model aggregators (intermediaries) | Various | Singapore, United States, China, or other countries | Forward requests to the model developers above; the route is chosen automatically per request |
| ElevenLabs (Voice Studio) | United States | United States / global | Text and cloned-voice samples for the ElevenLabs engine |
| Fish Audio (Voice Studio) | United States | United States / global | Text and cloned-voice samples for the Fish Audio engine |
| Google (Gemini TTS, Voice Studio) | United States | United States / global | Text for the Gemini TTS engine |
| Google, OpenAI, ByteDance, Black Forest Labs (Images & Video) | United States / China / Germany | United States / Singapore / Europe | Prompts and reference images for generating images or video |
| RunPod (GPUs for VoxCPM2, dots.tts & VoiceStudio) | United States | United States / Europe | Text and cloned-voice samples for the engines we run ourselves |
| Resend, Google, Meta | United States | United States / global | Email, analytics, and ad measurement (section 4) |
The coding-us-auto model uses models from developers in the United States, and coding-china-auto uses models from developers in China. If you don't want your prompts processed in a particular country, choose a model from a developer in another country.
In line with Article 56 of the PDP Law, we send only the data that is needed, redact certain personal data before sending (section 3), choose providers that apply data protection, and ask for your explicit consent via the consent checkbox when you sign up, make a purchase, or redeem a voucher. We record the time and text of that consent. You can withdraw consent by stopping use of the Service and requesting account deletion; withdrawal does not affect earlier processing.
6. Security
- All connections are encrypted (HTTPS/TLS), and our servers are located in Jakarta, Indonesia.
- API keys are stored as a SHA-256 hash plus an AES-256-GCM encrypted copy. Passwords are stored as a scrypt hash.
- Access to data is limited to authorized admins, and important changes are recorded in an audit log.
- Payment data is processed by Midtrans; we do not store card data or bank/e-wallet credentials.
- USDT payments (for buyers outside Indonesia only) go directly to Classai's wallet; we record only the amount, the sender address, and the transaction ID that are publicly visible on the TRON network. The buyer's country is estimated from the IP address using DB-IP data (CC BY 4.0), without sending it to anyone else.
7. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
classai_session | Keeping you signed in | Until sign-out, up to 30 days |
classai_guest | Reopening orders placed without an account | 30 days |
classai_utm | Recording which link or campaign brought you here | 30 days |
_ga, _ga_* | Google Analytics: visit statistics | Up to 2 years |
_fbp, _fbc | Meta Pixel: ad measurement (only when the pixel is active) | Up to 90 days |
You can delete or block cookies in your browser settings; without the session cookie, you can't sign in to the dashboard.
8. Your rights
Under the PDP Law, you have the right to:
- Receive clear information about how your personal data is processed (this policy).
- Access your personal data and obtain a copy of it.
- Update or correct inaccurate data. You can change some data directly in the dashboard.
- Delete your account and personal data, except data we are legally required to keep, such as transaction records.
- Withdraw consent you have given.
- Suspend or restrict the processing of your personal data.
- Object to decisions based solely on automated processing.
- Obtain your personal data in a commonly used format and transfer it to another party.
- Sue for and receive compensation for violations in the processing of your personal data.
How to make a request: email halo@classai.id from your account's email address. We may ask you to verify your identity, and we act on your request within 3×24 hours of receiving a complete request.
9. Retention & deletion
- Data is kept as long as needed for the purposes in section 2, as shown in the "Kept for" column of the table.
- After an account is deleted, account data and usage metadata are deleted or anonymized within 30 days, except transaction records, which must be kept for 10 years.
10. Personal data protection failures
If a personal data protection failure occurs, we notify you and the competent authority within 3×24 hours as required by the PDP Law: what data was affected, when and how it happened, and the handling and recovery steps we have taken.
11. Children
The Service is not intended for children under 18 without the permission and supervision of a parent or guardian.
12. Changes to this policy
We announce material changes to this policy at least 7 days before they take effect, by email and in the dashboard.
13. Contact
Questions, personal data requests, or complaints: halo@classai.id.