Privacy Policy

Last updated: 8 May 2026

This Privacy Policy explains how tuju ("we", "us") collects, uses, stores, and shares personal information when you join the waitlist or interact with our pre-launch site at tuju.online. This Policy is published under the Indonesian Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi — "UU PDP").

1. Who we are

tuju is a pre-launch invite-only marketplace based in Bali, Indonesia, connecting verified creators and local businesses for paid and barter collaborations. The data controller for waitlist sign-ups is the tuju founding team. You can reach us at hi@tuju.online.

2. Personal data we collect

• Identification: full name (creators), business name + contact name (brands)
• Contact: WhatsApp number (Indonesian, +62)
• Profile: Instagram handle (required for creators, optional for brands)
• Account type: creator or brand selection
• Technical: IP address, browser metadata, source form identifier, timestamp
• Marketing preference: your consent to receive updates (you must be 18+)

3. Why we collect it (purpose)

• Operate the waitlist and prioritise invites by referral and signup order
• Send you updates about your early-access status
• Verify creator follower counts and brand legitimacy before opening access
• Prevent spam, duplicate sign-ups, and abuse
• Comply with legal obligations under Indonesian law

4. Legal basis (UU PDP Art. 20)

We process your data based on your explicit consent (granted via the consent checkbox on the sign-up form), and our legitimate interest in operating and securing the waitlist service. You may withdraw consent at any time (see Section 7).

5. How we share your data

We do not sell your data. We share it only with:

• Infrastructure providers we use to run the service (hosting, email delivery), under data-processing agreements
• Authorities when required by Indonesian law

Your data is processed and stored on servers we operate. Some processors may operate outside Indonesia; in such cases we rely on standard contractual safeguards.

6. Retention

Waitlist data is retained until you ask us to delete it, or until 24 months after public launch, whichever is sooner. After deletion or expiry, your record is removed from active systems within 30 days; backup copies cycle out within 90 days.

7. Your rights under UU PDP

• Access — get a copy of the data we hold about you
• Rectify — correct inaccurate or outdated information
• Erase — delete your record from the waitlist
• Withdraw consent — stop further processing for marketing updates
• Restrict / object — limit how we use your data
• Port — receive your data in a portable format

To exercise any of these rights, email hi@tuju.online with the subject "Data Request" and include the WhatsApp number you used to sign up. We respond within 14 business days.

8. Security

Data is transmitted over HTTPS. Access is limited to the founding team. We follow reasonable technical and organisational measures appropriate to a pre-launch waitlist; we will harden controls as we approach public launch.

9. Children

tuju is for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

10. Cookies and tracking

The waitlist site uses local storage to remember your queue position and referral code. We do not use third-party advertising cookies on the waitlist site.

11. Changes

We will update this Policy as we approach launch. The "Last updated" date above always reflects the current version. Material changes will be sent to you by email if we have your address.

12. Contact

Questions, requests, or complaints: hi@tuju.online · WhatsApp tuju community group · Telegram tuju group.