1. Scope and data controller
This Policy applies when you use the 321.id website, web application, accounts, and features. PT Aidi Digital Global controls the processing of personal data by 321.id. For user-created activities such as Polling or Quiz, the activity creator may also decide what information to request from participants.
Read this Policy together with our Terms of Service. Separate policies apply to third-party services you visit or connect through 321.id.
2. Data we collect
The data we collect depends on the features you use and may include:
- Account and profile data: name, email address, phone number if provided, hashed password, photo, username, bio, verification status, and profile settings.
- Sign-in and integration data: account ID, name, email, profile photo, and connection tokens supplied by services such as Google or another service you connect.
- Content and activity: Polling, Quiz, Frame, Spin Wheel, questions, answers, images, comments, participant responses, results, saved content, reports, and feedback.
- Transaction data: plan, amount, currency, payment status, invoice number, and payment-provider references. Full card details or payment credentials are generally processed directly by the payment provider and are not stored by 321.id.
- Technical and usage data: IP address, user agent, device type, browser, operating system, time zone or approximate location, referring page, pages visited, interactions, access time, error logs, and security activity.
- Communications: support messages, contact forms, survey responses, abuse reports, and other communications with us.
3. Where data comes from
We receive data directly from you, automatically when your device interacts with the service, from a content creator when you join an activity, and from third parties you choose to use, such as sign-in or payment providers.
4. How we use data
We process personal data only for relevant purposes, including to:
- create and manage accounts, verify identity, and provide requested features;
- store and display content according to publication settings or shared links;
- process transactions, activate plans, issue invoices, and provide customer support;
- measure use, improve performance, develop features, and understand service effectiveness;
- detect spam, fraud, abuse, security incidents, and violations of our Terms;
- send service, security, and verification notices and—where allowed—product or promotional information; and
- comply with legal duties, respond to lawful requests, and protect 321.id and other users.
5. Legal bases for processing
Depending on the context, we process data based on your consent, the need to perform a contract or fulfill your request, legal obligations, protection of vital interests, and legitimate interests such as security, abuse prevention, and service improvement balanced against your rights.
Where processing relies on consent, you may withdraw it. Withdrawal does not undo processing that was already lawful and may prevent some features from working.
6. Public content and creator analytics
Usernames, photos, bios, content, or results you make public can be viewed by anyone and may appear in search engines or be reshared. A link that is not listed in search can still be forwarded by its recipients. Remove unnecessary personal data before publishing.
When you join Polling, Quiz, Frame, Spin Wheel, or another activity, its creator may receive your responses, results, and related activity analytics. Depending on the feature and how you participate, data may be associated with your account or device. Contact the activity creator to understand how they use information they collect outside 321.id.
7. Tools that run in your browser
Many image, PDF, text, color, and classroom tools process material directly in your browser. Unless the interface says a file will be uploaded, the contents of a selected file are not sent to our server for processing. We may still receive activity data such as the tool used, file type and approximate size, processing time, success, or an error message—not the file contents.
Other features, such as creating a campaign frame or publishing content with media, do require an upload. Those feature interfaces will ask you to select or submit a file.
10. Storage and cross-border transfers
321.id and our service providers may store or process data outside the region where you live. When data is transferred across borders, we will use safeguards required by law and choose providers offering appropriate protection.
11. How long we keep data
We keep data only for as long as needed for the purposes in this Policy. Retention depends on how long an account or content remains active, the need to provide the service, your choices, security and abuse prevention, dispute resolution, and tax, accounting, or legal duties.
When data is no longer needed, we delete, destroy, or anonymize it. Removal from backups may take additional time. We may retain certain records when legally required or needed to prevent abuse and enforce rights.
12. Data security
We use reasonable technical and organizational measures to protect data, such as access controls, credential protection, monitoring, and secured communications. No internet system is completely secure. Use a strong password, do not share credentials, and tell us if you notice suspicious activity.
If a personal-data incident occurs, we will respond and notify affected people and authorities as required by law.
13. Your rights and choices
Subject to applicable law and permitted exceptions, you may ask to:
- understand how your data is processed and access or receive a copy of it;
- complete, update, or correct inaccurate data;
- delete data, end or restrict processing, or withdraw consent;
- object to automated decisions that have legal or similarly significant effects; and
- receive data in a commonly used format or transfer it where applicable and technically feasible.
14. How to make a privacy request
Send a written request to info@321.id from the email linked to your account and describe what you need. To protect data, we may first verify your identity and authority. We will respond within the period required by applicable law.
Some rights may be limited when a request affects another person’s rights, conflicts with a legal duty, compromises security, or falls under another lawful exception. Where legally required, we will explain a refusal.
15. Children’s privacy
Users under 18 must use 321.id with the permission and supervision of a parent or legal guardian. Activity creators involving children are responsible for ensuring required notices and consents are in place. If you believe a child’s data has been processed without proper permission, contact us so we can review and respond.
16. Changes and contact
We may update this Policy when our services, practices, or rules change. The latest date will appear above, and material changes will be announced through the site, account, or email where required.
For questions, complaints, or personal-data requests, email info@321.id or use our Contact Us page.