Privacy Policy

1. Who we are

AppGrout is operated by Cendrawasih Technologies, LLC, a Delaware limited liability company ("AppGrout," "we," "us," or "our"). For the website, checkout, client account, and our own business records, Cendrawasih Technologies, LLC is generally the organization that determines why and how personal information is processed.

Registered address: 651 N Broad St, Suite 201, Middletown, Delaware 19709, United States. AppGrout operates remotely through personnel who may be located in Indonesia or other countries.

If a project requires AppGrout to handle regulated personal data on a Client's behalf, the parties will agree any additional data-processing terms needed for that project.

Privacy requests may be sent to admin@cendra.co. Do not send credentials, source code, private keys, or customer datasets by email.

2. Information we collect

Website and device information

Our hosting and security systems may process IP address, request time, requested URL, browser or device information, referrer, and diagnostic or security events. AppGrout does not currently use advertising pixels, session replay, or third-party analytics on the public website.

Information you provide

• Name, business email address, company details, and communications.
• Service selection and a short, non-confidential project description.
• Quote acceptance, payment status, invoice details, and transaction references.
• Portal identity, project intake, technology stack, goals, timezone, and availability.
• NDA status, authorization records, delivery updates, and report access information.

Project materials

If an engagement requires private repositories, test accounts, logs, screenshots, or other technical evidence, we agree the permitted materials, access method, environment, and handling terms first. The AppGrout portal does not accept source archives, credential uploads, production database dumps, or customer datasets.

Browser-only information

Theme preference and free-checklist progress are stored locally in your browser. They are not submitted to AppGrout unless you separately choose to send related information to us.

3. How and why we use information

• Respond to inquiries and decide whether a requested service fits our scope.
• Create and secure checkout and portal records.
• Verify payments, prevent duplicate fulfillment, issue invoices, and handle disputes.
• Perform the agreed review or repair and deliver findings, code, or handover materials.
• Schedule requested calls and communicate operational changes.
• Protect the website, accounts, clients, and our legal rights.
• Meet accounting, tax, contractual, and other legal obligations.

Where applicable law requires a legal basis, we rely on steps requested before a contract, performance of a contract, compliance with legal obligations, and legitimate interests in operating and protecting our service. We use consent where the law requires it. You may withdraw consent, but this does not affect processing already lawfully completed.

4. How information is shared

We may disclose the minimum necessary information to:

• Google Cloud and Firebase, which provide hosting, authentication, database, and related infrastructure.
• Wise or Stripe, according to the payment method you select.
• Repository, communication, report-hosting, or signing providers agreed for an engagement.
• Privacy-vetted AI services used to assist the agreed technical work.
• Professional advisers, insurers, auditors, or authorities where reasonably necessary or legally required.
• A successor in a merger, financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and applicable law.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not publish client names, private materials, screenshots, findings, or case studies without prior written permission. AppGrout may use AI services whose applicable business or API privacy terms state that customer data is not used to train shared models. We minimize what is submitted, exclude credentials and unnecessary personal data, and apply human review. Stricter signed terms still apply.

5. Payments

Wise and Stripe process payment and financial information under their own notices and systems. AppGrout receives and retains limited transaction details needed to match a payment to an order, maintain business records, process a refund, and respond to disputes. We do not store full card numbers or online-banking credentials.

6. Retention

Unpaid checkout records

Normally deleted or de-identified after 30 days.

Unsuccessful inquiries

Normally deleted after 90 days unless continued contact or a legal need applies.

Technical evidence and working copies

Normally deleted within 30 days after an engagement closes. Closure follows any included client-review and retest window. A shorter period may be agreed when operationally possible. A written scope, active dispute, or legal obligation may require a different period.

Portal, contract, delivery, and payment records

Kept for the engagement and then as reasonably necessary for warranty, dispute, accounting, tax, fraud-prevention, and other legal obligations.

Deletion from active systems may not immediately remove information from restricted backups that rotate on a defined schedule. Retained information remains subject to access controls and is not used for unrelated purposes.

7. International handling

AppGrout is a United States company with a remote team and service providers that may work from different countries. Private project access remains limited to people and tools needed for the engagement and subject to confidentiality and security requirements. Additional transfer or data-processing terms will be used when a specific project legally requires them.

8. Security

We use measures intended to match the nature of the information, including restricted accounts, least-privilege access, server-side authorization, encrypted transport, payment verification, and access revocation at handover. No online transmission or storage system can be guaranteed completely secure. If you believe information has been exposed, contact us promptly without including additional secrets in the message.

9. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to appeal or complain to a regulator. We may need to verify your identity and authority before responding. Some records cannot be deleted immediately where retention is required by law or necessary to establish or defend legal claims.

Because AppGrout does not currently sell personal information or use cross-site behavioral advertising, a browser Do Not Track or Global Privacy Control signal does not change those practices. If those practices change, we will update this policy and implement legally required controls before the change takes effect.

10. Children

AppGrout is a professional technology service and is not directed to children. You must be legally able to enter into a contract and, when acting for an organization, authorized to bind it.

11. Changes and contact

We may update this policy when our services or practices change. The effective version will state its date, and material changes will be communicated where required. Questions and privacy requests may be sent to admin@cendra.co.