Privacy policy
Who we are
Oulas (oulas.app) is run by Ottmar Muhammad F. D., an individual in Indonesia (NIB 1810260009421). Ottmar Muhammad F. D. decides how your data is used (the “data controller” under UU PDP). Write to [email protected] about anything on this page.
What we keep about you
- Your email address, to sign you in and send your daily email.
- Sign-in links (they work once, for 15 minutes) and sign-in sessions (up to 30 days).
- The restaurants you add: name, locations and the Google Maps links you save.
- What you do in Oulas: “I fixed it”, “Thanked”, “Not about us”, Hide and Undo.
- The daily emails we send you.
- Your payments: the orders you start and the payment statuses Midtrans sends us.
What we read about your restaurant
Public posts and reviews from TikTok, Instagram Reels, X, Threads and Google Maps: the link, the text, the author’s public username and name, the date, the view count, and for Google Maps the stars. Oulas reads each one automatically for tone, element (Food, Service, Value, Ambience, Convenience) and aspect. These readings are automatic and can be wrong. We never import customer lists or private messages.
Why
To run the service you signed up for: your account, your To do list and your daily email. And our legitimate interest in showing restaurant owners what the public says about them.
Who helps us
- Hetzner (servers in Finland): hosting and the database.
- Cloudflare: domain name (DNS) and network.
- Brevo: sending sign-in links and daily emails.
- A web data service: collects public posts and reviews for us. Outside Indonesia.
- An AI service: reads captions to label tone and topics. Outside Indonesia.
- Midtrans: the payment processor. It receives your email address, the order number, the plan and the amount. You pay in the Midtrans payment window; we never see or store card or bank details.
Write to us if you want the names of these services.
Some of them handle data outside Indonesia, for example in the European Union and the United States. We use only providers that protect it at least as well as Indonesian law asks.
How long
Your account data stays until you delete your account. Public posts, readings and your step actions stay while Oulas runs. Nightly backups are kept 14 days, then deleted. Payment records stay 10 years, as Indonesian tax law requires, also after you delete your account.
Deleting your account
On your Account page. It removes your email address, sessions and sign-in links, and archives your restaurants. Public posts, readings and step actions stay, linked to no address. Backups that still hold your address are gone within 14 days.
Your rights
Under UU PDP you can ask what we hold about you, get a copy, correct it, ask us to stop or delete it, and withdraw your consent. Write to [email protected]; we reply within 3 days. If your own public post or review appears in Oulas and you want it removed, write to the same address with the link. You can also complain to Indonesia’s data protection authority.
Cookies
One cookie keeps you signed in. No ads, no tracking.
Changes
We will email account holders before an important change.
Last updated 18 October 2026.