Privacy policy

Operator and contact

Elastis is operated by PT. THE CODE KRAF in Indonesia. Contact pram@elastis.co about your account or data. Security reports go to pram@elastis.co. Postal code: 80352, Indonesia.

Information used by the application

The application processes account and membership details; CRM records and custom fields; uploaded files; conversations, proposals and feedback; authentication and support-access records; and subscription and credit transactions. These support account access, collaboration, CRM workflows, reviewed assistant changes, billing and recovery.

Service boundaries

Each client has one workspace. Client API and MCP access use current membership permissions and granted token abilities. Staff uses separate credentials and mandatory MFA. Support access requires a reason, expires, and is audited. Creem handles payment transactions. AI requests use the client's approved and configured provider paths. No unconfigured provider is enabled by publication of this page.

Deletion and retention

Account and workspace deletion have an application grace period of 30 days. Failed import rows and CRM activity use their recorded retention rules. After account or workspace deletion, the intended retention period for Elastis-controlled authentication/support audit records, ordinary billing records and backups is up to 30 days, followed by deletion or anonymization. This post-deletion period is separate from the application's deletion grace period.

Records required for tax/accounting or other legal obligations are retained for the applicable statutory period. Indonesia requires relevant accounting/tax records to be kept for ten years under Article 28(11). Creem independently retains records under its own policy, which includes seven years for accounting data; deleting an Elastis account does not shorten that period. Indonesian tax-law compilation, Creem privacy notice.

Requests and applicable jurisdiction

Contact pram@elastis.co with account or data requests. Jurisdiction: Indonesia.