Sadework ("we", "us") is an internal content-operations system operated by Danang Giri Sadewa, an individual based in Yogyakarta, Indonesia, who publishes educational content under the name @thesadewa. Danang Giri Sadewa is the data controller for the personal data described here.
Contact for all privacy matters: thesadewa.business@gmail.com. This inbox is monitored.
Sadework is used only by our own team (about five people). It is not offered to the public and has no public sign-up. It connects only to social media and Google accounts that we own and manage ourselves.
| Category | Examples | Source |
|---|---|---|
| Our own platform account data | Access tokens, account and channel IDs, profile name, our published content and its metadata, performance statistics of our own accounts | YouTube, Instagram, Facebook, TikTok, when we connect our own accounts |
| Public data from other Instagram Business accounts | Username, display name, follower count, media count, and for public posts: link, caption (first 300 characters), date, format, like and comment counts | Instagram Graph API (Business Discovery) |
| Public interactions on our content | Comments and public replies on our own posts and videos | The same platforms |
| Business contact data | Name, role, email, phone number, organisation of clients and prospective partners | Directly from the people concerned, or their public business profiles |
| Content participant data | Voice, image and interview transcripts of people who appear in our content | The participants, with their consent |
| Technical data | System logs and timestamps | Generated automatically |
We read public metrics of Instagram Business or Creator accounts owned by universities, creators and similar organisations, through the Instagram Graph API Business Discovery endpoint. We read username, display name, follower count, media count, and for recent public posts the link, caption, date, format, and like and comment counts. We use this only for content research (understanding what works in our field) and to prepare partnership proposals for those organisations. We do not read direct messages or any private data, we do not access accounts that are not Business/Creator accounts, we do not sell this data, and we do not use it for advertising or profiling. Lookups are limited (at most 20 watched accounts once a day, plus occasional single lookups by our team), and we do not use scraping. Stored figures are kept as a history of numbers for the accounts we watch, for as long as we watch them; the account owner can ask us to delete them at any time (see section 10 and our data deletion page).
We do not sell personal data, and we do not use it for advertising profiles.
Sadework uses the YouTube Data API and related Google APIs only to upload, update and manage videos on our own YouTube channel and to read that channel's statistics.
Sadework's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalised AI or machine-learning models.
You can review and revoke Sadework's access at any time at myaccount.google.com/permissions. See also the Google Privacy Policy.
| Recipient | Purpose | Location |
|---|---|---|
| Hostinger | Server hosting | Malaysia |
| Backblaze | Encrypted off-site backups (the provider cannot read the contents) | Outside Indonesia |
| Google (Workspace, YouTube) | Internal spreadsheets; publishing to our YouTube channel | Outside Indonesia |
| Meta (Instagram, Facebook), TikTok | Publishing to and reading statistics from our own accounts; Meta also supplies the public Business Discovery data described in section 3 | Outside Indonesia |
| AI model providers | Processing text as described in section 6 | Outside Indonesia |
Some recipients are located outside Indonesia. We use them only for the purposes above and choose providers with appropriate security measures.
| Data | Retention |
|---|---|
| Platform access tokens | Until we disconnect the account or access is revoked |
| Automation execution logs | 30 days |
| Operational event logs | 12 months |
| Audit trail (who approved and published what) | Up to 7 years, for incident investigation |
| Public Instagram figures of other accounts (Business Discovery) | Kept as a history while we watch the account; deleted when we stop watching it or when the account owner asks |
| Business contacts who did not respond | 12 months, then deleted |
| Interview transcripts | While the related content remains published, or until the participant asks for removal |
| Backups | 30 days on the server; encrypted off-site copies up to 90 days |
Data is encrypted in transit (HTTPS). Server access is restricted to key-based login. Access within the team is limited by role. Actions are recorded in an audit log that the automation itself cannot alter. Backups are encrypted before leaving the server and are regularly tested by restoring them.
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) you may request access to, correction of, or deletion of your personal data; withdraw consent; object to processing; and lodge a complaint. Email thesadewa.business@gmail.com. We acknowledge requests within 3 working days and respond within the time limits set by law.
If you appear in our content and want it taken down, email us with a link to the content. We will review the request promptly and, where it is based on withdrawn consent, remove the content from the platforms we control.
If a breach affects your personal data, we will notify you and the relevant authority as required by Law No. 27 of 2022, including within the 3 × 24 hour period it sets.
Sadework is an internal tool and is not directed at children.
We will post any change to this policy on this page with a new effective date.
Sadework ("kami") adalah sistem internal pengelolaan konten yang dioperasikan oleh Danang Giri Sadewa, perorangan yang berdomisili di Yogyakarta, Indonesia, dan menerbitkan konten edukasi dengan nama @thesadewa. Danang Giri Sadewa adalah pengendali data pribadi yang dijelaskan di sini.
Kontak untuk semua urusan data pribadi: thesadewa.business@gmail.com. Kotak masuk ini dipantau.
Sadework hanya dipakai oleh tim kami sendiri (sekitar lima orang). Sadework tidak ditawarkan ke publik dan tidak menerima pendaftaran umum. Sadework hanya tersambung ke akun media sosial dan akun Google yang kami miliki dan kelola sendiri.
Kami tidak menjual data pribadi dan tidak memakainya untuk profil iklan.
Sadework memakai YouTube Data API dan Google API terkait hanya untuk mengunggah, memperbarui, dan mengelola video di kanal YouTube milik kami sendiri, serta membaca statistik kanal tersebut. Penggunaan dan pemindahan data yang diterima dari Google API oleh Sadework tunduk pada Google API Services User Data Policy, termasuk ketentuan Limited Use. Kami tidak memakai data pengguna Google untuk iklan, tidak menjualnya, dan tidak memakainya untuk melatih model AI umum. Akses Sadework dapat dicabut kapan saja di myaccount.google.com/permissions.
Hostinger (server, Malaysia); Backblaze (backup terenkripsi yang isinya tidak dapat dibaca penyedia); Google (Workspace dan YouTube); Meta (Instagram, Facebook; juga sumber data publik Business Discovery) dan TikTok (publikasi dan statistik akun kami sendiri); serta penyedia model AI (pemrosesan teks). Sebagian penerima berada di luar Indonesia.
Data dienkripsi saat dikirim (HTTPS). Akses server hanya dengan kunci SSH. Akses di dalam tim dibatasi per peran. Setiap tindakan dicatat dalam log audit yang tidak dapat diubah oleh sistem otomasi. Backup dienkripsi sebelum keluar dari server dan diuji pemulihannya secara berkala.
Berdasarkan UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, Anda berhak meminta akses, perbaikan, atau penghapusan data pribadi Anda; menarik persetujuan; menolak pemrosesan; dan mengajukan keluhan. Kirim email ke thesadewa.business@gmail.com. Kami mengonfirmasi penerimaan permintaan dalam 3 hari kerja dan menanggapinya dalam batas waktu yang ditetapkan undang-undang.
Jika Anda tampil di konten kami dan ingin konten itu diturunkan, kirim email beserta tautan kontennya. Kami meninjau permintaan itu secepatnya dan, jika didasarkan pada penarikan persetujuan, menurunkan konten dari platform yang kami kelola.
Jika terjadi kebocoran yang memengaruhi data pribadi Anda, kami memberi tahu Anda dan lembaga yang berwenang sesuai UU No. 27 Tahun 2022, termasuk dalam batas waktu 3 × 24 jam yang ditetapkannya.
Setiap perubahan kebijakan ini akan dimuat di halaman ini dengan tanggal berlaku yang baru.