Privacy Policy

1.Introduction

Welcome to MyWarta ("Service"), a product of Mismaiti ("us").this service allows churches to create digital congregational news applications through the mywarta.mismaiti.ai and platforms manage content via CMS Admin.

This Privacy Policy explains how we collect, use, store and protect your data when using our Services, including:

• MyWarta website — mywarta.mismaiti.ai (gallery, builder and public pages)
• CMS admin — admin panel for managing church content
• Mobile application — congregational news application produced for each church

By using our Services, you agree to the collection and use of data in accordance with the policy this.

2.Definition

In this policy, the following terms have special meanings:

• "Church Admin" — user who manages church content via CMS Admin (max 5 people per church)
• "Congregation" — end users who use the congregational news application on their cellphones
• "Church Content" — news, schedules, devotionals, songs, prayer points, media, and information others uploaded or managed by Church Admin
• "Church Data" — church name, denomination, city, logo, theme colors, and configuration other
• "Document" — PDF file, DOCX, or bulletin image uploaded for parsing by AI

3.Data We Collect

3.1 Church Admin Data

When you register and use CMS Admin, we collect:

• Full name
• Email address
• Password (stored encrypted, never in original text)
• Church information: name, denomination, city, address, WhatsApp number, website
• Uploaded church logos and images
• Theme preferences: colors, templates

3.2 Congregation Data (Application Users)

When congregations register and use the news application, we collect:

• Name
• Email address or Google account (if logged in via Google OAuth)
• Church code (to connect to the right church)
• Notification preferences

3.3 Church Content

Content managed by Church Admin via CMS:

• Text of news and announcements
• Worship schedule and servants on duty
• Daily devotional text
• List of worship songs
• Congregation prayer points
• Offering account information
• YouTube URL for live streams and recordings
• Bulletin document (PDF/DOCX) uploaded for parsing

3.4 Automatically Collected Data

• IP Address
• Device type, operating system, and browser version
• Pages visited and duration of visit
• Referral source
• App usage data: opened screens, usage frequency

3.5 Data We DO NOT Collect

• Credit card information (processed by third party payment provider)
• Real-time GPS location
• Mobile phone contacts, photo gallery, or other device data
• Audio or video recording of the congregation

4.How We Use Data

4.1 Provision of Services

• Create and manage congregational news applications for your church
• Display church content to the congregation via the application
• Process user registration and authentication
• Send notifications regarding worship schedules and new editions
• Display church information on the MyWarta public page

4.2 AI Processing

• Parses uploaded bulletin documents (PDF/DOCX) into a structured format
• Generates splash screen and onboarding images (if not uploaded manually)

4.3 Operations

• Processing subscription payments
• Provide technical support
• Improve the quality of Services based on usage patterns (anonymous data)
• Send service-related emails (verification, important updates)

4.4 What We DON'T Do

5.AI Processing

5.1 Document Parsing (PDF Bulletin → Edition)

When a Church Admin uploads a bulletin document, the following process occurs:

1. The document is uploaded to secure storage (AWS S3)
2. Text extracted from document
3. The text is sent to the AI service (Anthropic Haiku) to be identified into parts: news, servants on duty, songs, prayer points
4. Parse results are displayed to Admin for review before publishing
5. Admin can edit, accept, or reject parse results

5.2 Image Generation

If the Church Admin does not upload a splash screen or onboarding image, AI will generate an image automatically based on:

• Church name
• Denomination
• Selected theme color

The resulting image becomes the property of the church and is stored in your storage.

5.3 Code Generation

The congregational news application is generated from a pre-prepared code template, with configuration based on church info (name, colors, logo).This process does NOT use AI to write the code — the code is generated from the deterministic Jinja2 template.

6.Third Parties & Data Storage

6.1 Service Provider

6.2 Data Isolation Between Churches

6.3 What We DO NOT Share

• Congregation data is never shared with other churches
• Church content is not used for other churches
• Personal data is not sold to advertisers or third parties

7.Data Retention

7.1 Account Deletion

You can request deletion of your account and data at any time via:

• CMS Admin: Settings → Delete Account
• Email to: [email protected]

Deletion will be processed within 30 working days.Some data may be retained for legal compliance.

7.2 Deletion of Church Data

If a church terminates a subscription or requests removal:

1. Mobile application removed from distribution
2. All church content is removed from the database within 90 days
3. Images and files are deleted from storage
4. Code repository archived or deleted
5. Congregation data connected to the church is anonymized

8.Data Security

We implement technical and organizational security measures to protect your data:

8.1 Technical Steps

• Transit encryption: All data is encrypted in transit using TLS/SSL (HTTPS)
• Storage encryption: Passwords are hashed using bcrypt, never stored in the original text
• Authentication: JWT token with limited validity period, refresh token with rotation
• Row-Level Security: Data isolation between churches at the database level
• Backup: Automatic database backup with encryption

8.2 Organizational Steps

• Access to the production database is limited to authorized internal teams
• The principle of minimum access (least privilege)
• Periodic security review

9.Your rights

9.1 Rights of All Users

• Access: Request a copy of your personal data
• Correction: Correct inaccurate data
• Deletion: Request deletion of your data
• Withdrawal of consent: Withdraw consent for data processing at any time
• Opt-out: Stop receiving marketing emails (service emails will still be sent)

9.2 Church Admin Rights

• Data portability: Export all church content in standard format (JSON/CSV)
• Church deletion: Delete all church data and applications
• Admin management: Add or remove other admins (max 5)
• Content control:Edit, delete, or hide content at any time

9.3 Rights of the Congregation

• Account deletion: Delete the account from the church application
• Notification controls: Set notification preferences
• Prayer anonymity:Send prayer items anonymously

9.4 Special Rights (According to the Indonesian PDP Law)

In accordance with the Personal Data Protection Law (Law No. 27 of 2022), you have additional rights:

• The right to obtain information about the processing of personal data
• Right to complete, update and correct data
• Right to end processing and delete data
• Right to withdraw consent
• The right to object to actions based on automated decision making
• The right to sue and receive compensation

9.5 How to Exercise Your Rights

Contact us via:

• Email: [email protected]
• Response time: maximum 14 working days
• Identity verification is required for data requests

10.Cookies & Tracking Technologies

10.1 Cookies We Use

10.2 Cookie Control

You can control cookies through your browser settings.Disabling essential cookies may have an impact Service functionality.

We do not use third-party tracking cookies for advertising.

11.Children's Privacy

Our services are intended for users aged 13 years and over.We don't intentionally collect personal data from children under 13 years of age.

For users aged 13-17 years, parental or guardian consent is recommended.If you know that a child under 13 has provided data to us, contact us at [email protected] and we will delete it.

12.International Data Transfer

Your data may be transferred and processed in countries outside Indonesia, including:

• Singapore — AWS (main database and storage)
• United States — GitHub (code), Dodo Payments (international payments), Anthropic (AI processing)
• Indonesia — Xendit (local payments)

We ensure that these service providers have adequate data protection standards.Data transfer carried out in accordance with applicable regulations, including the Indonesian PDP Law.

13.Privacy Policy Changes

We may update this Privacy Policy from time to time.Changes will take effect after published on this page.

For material changes:

• We will send an email notification to the Church Admin
• We will display a notification in the CMS Admin
• Continued use after changes means agreement to the new policy

We maintain an archive of previous versions of this policy.

14.Contact Us

For privacy-related questions, requests or complaints:

Response time: maximum 14 business days for privacy inquiries, 48 hours for security reports.