Privacy Policy

1. What we collect

• Email address — for account creation and sign-in (via Resend).
• Search queries — stored locally in structured event logs for debugging and quality monitoring only.
• Contact form messages — forwarded to our operational inbox.

2. How we use your data

• To provide the medical literature search service.
• To send sign-in codes and contact-form confirmations via Resend.
• To monitor service health and investigate errors (logs are local, not shipped to third parties).

3. Data processing locations

Your data flows through several providers:

• Cloudflare (US) — DNS, CDN, email routing
• Tencent Cloud (Singapore) — application hosting (VPS)
• Amazon S3 (Singapore) — LanceDB corpus storage
• Resend (US) — transactional email delivery
• Netra / DeepSeek (China) — LLM inference

4. Data retention

• Query logs — retained for 30 days for debugging, then deleted.
• Account data — retained while your account is active. Delete on request.
• Contact messages — forwarded to operational inbox; retained per our email retention policy.

5. Your rights (Indonesia PDP)

Under Indonesia's Personal Data Protection (PDP) Law (Law No. 27 of 2022), you have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing
• Withdraw consent

Contact us at privacy@cokro-tech.my.id.

6. Children's privacy

Cokro is not intended for children under 13. We do not knowingly collect personal data from children.

7. Changes

We may update this policy. Changes will be posted on this page with a revised date.