Privacy Policy

What we collect

• Account info: email, name, phone number you provide
• Booking history: classes you reserved, attended, or cancelled
• Payment metadata: transaction IDs (not card details — those are with Midtrans)
• Marketing source: UTM parameters when you arrive via a tracked link

What we don't collect

Card numbers, biometric data, or your physical location outside the studio. Payments are processed by Midtrans — we never see your full card details.

How we use it

• To run your bookings, payments, and class attendance
• To send WhatsApp/email confirmations and reminders
• To analyze attendance patterns and improve scheduling
• To send occasional studio updates (you can opt out)

Who we share with

Only the service providers we need to run the studio: Midtrans (payments), Supabase (our database), Fonnte (WhatsApp), Vercel (hosting). None of these sell your data. We don't sell, rent, or trade your personal information to third parties.

Your rights

• Access your data via your account page
• Request correction of inaccurate info
• Request deletion (your bookings history will be anonymized)
• Opt out of marketing emails any time

Retention

Active accounts: retained while you use the service. Inactive accounts (no booking in 24 months): we'll send a reminder and may anonymize the account thereafter, except where required for tax/accounting record-keeping (typically 7 years).

Cookies

We use session cookies to keep you signed in. No third-party tracking cookies beyond what Vercel and Supabase set for their own analytics on their respective dashboards.

Contact

For data-related requests, reach us at hello@onmat.id.