What data we keep, and why.

• Account: email, name, language, and when you were last active; phone number and business name if you provide them. Passwords are stored as an argon2id hash, never as plain text. If you log in with Axiona, we receive your Axiona account identifier, its email, and its email verification status from Axiona.
• Billing profile (optional): billing name, business name, tax ID (NPWP), and address, for billing documents.
• Sessions and security: the IP address and browser type (user agent) of each login session, and the IP address when an email verification token or other one-time token is created.
• Payments and balance: orders, amounts, status, payment method and channel, fees, balance entries (top-ups, deductions, renewals, refunds), and billing documents and payment receipts.
• Services you run: deployment metadata (name, template, plan, subdomain or custom domain, status, timestamps), usage data for billing such as active minutes and traffic, and any private registry credentials you save (encrypted).
• Your application content: the applications, databases, and files you run are stored on our infrastructure. We treat them as yours and process them only to run the service.
• Forms on xpod.dev: the template request form stores your name, email, phone number (optional), the requested app, and your message; the newsletter form stores your email address and sign-up time. A copy of each template request is also forwarded to XPod’s staff inbox.
• Technical logs: our servers and applications, and Cloudflare in front of them, record IP address, browser type, requested address, and access time. Actions by XPod staff that change your customer account (for example a balance correction) are recorded in an audit log that cannot be edited.

• Creating and securing your account, verifying your email, and preventing abuse.
• Running the services you order, billing, and processing payments and renewals.
• Sending service emails: verification, password reset, payment receipts, renewal reminders, and low-balance or suspension notices.
• Answering template requests and questions you send, and sending the newsletter to those who subscribed. You can unsubscribe from the newsletter at any time by writing to [email protected].
• Meeting accounting and legal obligations, and handling disputes.

Our bases for processing: performing our agreement with you (account and services), your consent (newsletter and forms), legal obligation (financial record keeping), and legitimate interests (security and abuse prevention).

We do not sell your personal data. It reaches the parties below only as far as needed to run the service:

• AxiPay (Axiona’s payment service): processes top-ups. To create a payment session we send your name, email, phone number (if any), the amount, and the order reference. You pay on the AxiPay page.
• Axiona (identity provider): only if you choose “Login with Axiona”.
• An email delivery provider: delivers service emails, so it receives the email address, name, and content of those emails.
• Cloudflare: DNS and proxy in front of xpod.dev and its subdomains (including the console and API), so traffic to the site and console passes through it.
• Google reCAPTCHA v3: protects the template request and newsletter forms from bots. Its script loads only when you start filling in a form, and Google receives signals from your browser to judge whether you are human, under Google’s own privacy policy and terms. Our server sends the reCAPTCHA token to Google to verify it.
• The help widget (help.axiona.co.id, operated by Axiona): loaded on the production site. Messages you write in the widget are processed by that help system, not by this site’s database.
• The infrastructure provider our servers run on, which holds data physically on our behalf.
• XPod and Axiona staff who need access for support, billing, and security.
• Competent authorities, where the law requires it.

Some of the parties above (for example Google and Cloudflare) operate globally, so your data may be processed outside Indonesia.

• The xpod.dev site sets only one cookie of its own: NEXT_LOCALE, which remembers your language choice (id or en). It is functional, does not track you, and disappears when you close the browser.
• The site uses no localStorage or sessionStorage, and loads no analytics or advertising scripts.
• Google reCAPTCHA (when you fill in a form) and the help widget (on the production site) load from their own domains and may store cookies or other data in your browser under their own policies; we do not control them.
• The XPod API and console use functional cookies for login sessions: __Host-xpod_rt (keeps you logged in), __Host-xpod_reg (binds the email verification link to the browser that signed up), and __Host-xpod_oidc (protects the “Login with Axiona” flow for 10 minutes). All are HttpOnly and Secure.

Because the only cookies we set ourselves are those needed for the site and login to work, we do not show a cookie consent banner.

• Services you run: for as long as you subscribe. After suspension, data is kept 30 days and then permanently deleted; after you delete a service, it is permanently deleted after 7 days. Details are in the Terms of Service.
• Verification and other one-time tokens: deleted 7 days after use or expiry. Login session records, including IP and user agent: deleted 30 days after the session ends or is revoked.
• Balance, payment, and billing document records: kept indefinitely. Our balance ledger is designed so entries cannot be edited or deleted (mistakes are fixed with a new entry), and we need to keep it for accounting and legal obligations.
• Form data on xpod.dev (template requests and newsletter): kept until you ask for deletion; nothing is deleted automatically. The copy in the staff inbox is deleted too if you ask.
• The form rate limiter holds your IP address only in server memory for a 10-minute window, and it is lost when the server restarts.
• Technical logs are kept as needed for security and troubleshooting. The audit log of staff actions is permanent.

Traffic to the site and console uses HTTPS. Passwords are stored with argon2id, private registry credentials are stored encrypted, and console session cookies are marked HttpOnly and Secure. No system is completely immune; if we learn of an incident involving your personal data, we will notify you as the PDP Law requires.

Under the PDP Law you have the right, among others, to know and access your personal data, ask for correction, ask for deletion or destruction, withdraw consent (for example, unsubscribe from the newsletter), object to certain processing, and ask for a copy of your data.

To use them, write to [email protected] from your account email (or the email you used on a form). We currently handle account deletion requests by email. We may ask for proof that the data is yours before acting.

Some data cannot be deleted on request: balance, payment, and billing records that we must keep for accounting and legal obligations, and data we need to handle disputes. We delete the rest.

XPod is meant for business owners and technical teams, not children. We do not knowingly collect children’s personal data. If you think we hold some, tell us at [email protected] and we will delete it.

We may update this policy; the date at the top of the page shows the latest version. Questions or requests about personal data can be sent to [email protected]. The rules for using the service are in the Terms of Service.