プライバシーポリシー
最終更新:2026年2月
- 1. はじめに
SmallPictはお客様のプライバシーを尊重し、個人データの保護に努めています。このプライバシーポリシーは、WordPress画像最適化サービスをご利用の際に、どのように情報を収集、使用、保護するかを説明します。
- 2. 収集するデータ
以下の種類の情報を収集します:
- アカウント情報:プラグイン有効化時のメールアドレスとウェブサイトURL。
- 利用データ:処理した画像数、ファイルサイズ、最適化統計。
- 技術データ:互換性のためのWordPressバージョン、PHPバージョン、プラグインバージョン。
- 3. 画像処理と保存
お客様の画像は保存しません。サービスを通じて画像をアップロードする際:
- 画像は安全なクラウドインフラで一時的に処理されます。
- 最適化された画像は即座にWordPressサイトに送り返されます。
- オリジナルと最適化版は数分以内にサーバーから削除されます。
- 画像のコピーは一切保持しません。
- 4. データセキュリティ
転送時暗号化(HTTPS/TLS)、安全なクラウドインフラ、定期的なセキュリティ監査など、業界標準のセキュリティ対策を実施しています。
- 5. お客様の権利
個人データへのアクセス、訂正、削除の権利があります。データ関連のリクエストはprivacy@tuxnoob.comまでご連絡ください。
- 6. お問い合わせ
このプライバシーポリシーに関するご質問は:privacy@tuxnoob.com
- Legal Basis for Processing
We process your personal data under the following legal bases: performance of a contract (account creation, billing, and service delivery), legitimate interest (fraud prevention, service analytics, and security monitoring), and consent (marketing communications, which you may withdraw at any time). Where Indonesian law applies, processing is likewise based on your consent, contractual necessity, or our legitimate interest as data controller under UU PDP No. 27/2022.
- Your Rights Under Indonesian Law
If you are located in Indonesia, in addition to the rights described elsewhere in this Policy, UU PDP No. 27/2022 grants you the right to: obtain information about the clarity of identity, legal basis, purpose, and accountability for the processing of your personal data; complete, update, or correct errors in your personal data; access and obtain a copy of your personal data; terminate the processing, delete, and/or destroy your personal data; withdraw your consent; object to automated individual decision-making, including profiling; and request compensation for violations of the processing of your personal data in accordance with applicable law. To exercise any of these rights, contact us at privacy@tuxnoob.com.
- Data Breach Notification
If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users without undue delay. For users protected under UU PDP No. 27/2022, this notification will occur within 3x24 (seventy-two) hours of us becoming aware of the breach, as required by Indonesian law. For users protected under GDPR, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals directly where the breach is likely to result in a high risk to their rights and freedoms.
- Cross-Border Data Transfer
SmallPict's infrastructure, including cloud compute, storage, and content delivery services, may process your data in countries other than your own. Where we transfer personal data of EU/EEA users outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses. Where we transfer personal data of Indonesian users outside Indonesia, we do so in accordance with Article 56 of UU PDP No. 27/2022, ensuring the receiving country provides an equivalent or higher level of personal data protection, or that appropriate binding safeguards are in place.
- Data Retention
We retain your account data, uploaded images, and backups for as long as your account remains active. If you close or cancel your account, we retain your data for 7 days to allow for account recovery, after which it is permanently deleted from our production systems, subject to any legal obligation to retain certain records longer (e.g., billing records for tax purposes).
- Children's Data
SmallPict is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18 (or the age of majority in your jurisdiction, if different). If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete that data promptly.
- Data Protection Contact
For any questions, requests, or complaints regarding this Privacy Policy or our data processing practices, contact us at privacy@tuxnoob.com.