Privacy Policy
Effective June 1, 2026 · Version 1.0
This document is available in Indonesian and English. In case of any discrepancy, the Indonesian version prevails.
1. Data Controller
Numu is operated by a company registered in Indonesia, which acts as the data controller for the processing described in this policy. The legal entity’s details are available on request via our official contact shown below.
2. Data We Collect
- Emails you forward — marketplace transaction-notification emails you forward to your Numu address. These may contain your buyers’ personal data (names, addresses, order details).
- Account information — your name and email when you register.
- Usage data — how you use the dashboard, to maintain and improve the service.
- On this site — if you join the waitlist, we store your email address. We also use cookieless analytics that do not track you across sites and collect no personal data.
3. Basis & How We Process
We process data to: extract transaction information from emails, display a net-profit summary on the dashboard, send account-related notifications, and provide and secure the service. Our bases for processing include performing our contract with you, your consent, and our legitimate interest in operating the service.
4. Third-Party Service Providers
We do not sell your data, and we do not share it with third parties for their own marketing. To operate the service, we use trusted service providers in the following categories:
- AI processing to read email content — this processing may take place outside Indonesia;
- Email delivery for account notifications;
- Hosting and content-delivery network (CDN).
These providers process data only as needed to run the service, on our instructions.
5. Storage, Security & Retention
- We encrypt email content before it is stored, and connections to the service use HTTPS.
- Source emails are automatically deleted after 30 days from receipt.
- Extracted transaction data is retained while your account is active — this is your profit history — and is deleted when you delete your account or ask us to.
- We apply reasonable technical and organisational measures to protect data; however, no system is entirely free of risk.
6. Buyer Data & Your Responsibility
The emails you forward may contain your buyers’ personal data. For that data, you act as the data controller and Numu processes it on your behalf. You are responsible for ensuring you are entitled to forward that data, as set out in Terms of Service Section 7.
7. Your Rights
Under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), you have the right to: access your data, request correction, request deletion, withdraw consent, and object to certain processing. To exercise these rights, contact us at the email shown below; we will respond within a reasonable time.
8. Children
The service is intended for users at least 18 years old and is not directed at children. We do not knowingly collect children’s personal data. If you believe a child has provided us their data, contact us so we can delete it.
9. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you by email or in-app notice before the change takes effect.
10. Contact
For questions or requests regarding your personal data, contact us at the official email shown below.
Numu is operated by a company registered in Indonesia; the legal entity's details are available on request.