Privacy Policy
Last updated: 5 October 2026
This policy explains what personal data we collect when you visit getsherlock.io, buy or use DomMCP, buy a report or book a Gameplan call, and what we do with it.
Who is responsible for your data
PT Just Digital Lindgren, a limited liability company registered in Indonesia (business ID/NIB 2211240055706), trading as Just Digital.
Badung, Bali, Indonesia (full address shown in your browser)
Privacy questions and requests: support [at] getsherlock [dot] io
1. What we collect and why
| Data | Why we use it |
|---|---|
| Your name and email address, from checkout | To create your DomMCP access, send you your connection link and receipts, and answer support requests. |
| Purchase details: what you bought, the price, the currency, your plan and its status, and reference numbers from the payment provider | To give you the right access, end access when a membership is cancelled or a payment fails, and keep the accounting records the law requires. |
| Your personal access token | To check that a request to DomMCP comes from a paying customer. It is part of your connection link. |
| Usage records: which tool was run and when, and how many runs you have used | To apply trial limits and plan limits, and to see which tools people use. |
| Answers you give in a post-purchase intake form | To prepare a report or a Gameplan call for you. |
| Booking details for a Gameplan call (name, email, chosen time) | To schedule and hold the call. |
We don't see your full card details. Payments are handled by our payment providers, who process your card data under their own privacy policies.
2. What happens to what you type into the tools
DomMCP runs inside your own Claude account. When you run a tool, the information you give it, such as website copy, a description of your buyers or a competitor's name, is sent to our server. The server adds it to the tool's instructions and sends it straight back to your Claude, which does the actual work. We don't save that content, and we don't send it to any other company.
Your Claude account is provided by Anthropic. What Anthropic does with your conversations is covered by Anthropic's own terms and privacy policy, not this one. If you connect other tools to Claude, such as a search or SEO data connector, those providers' policies apply to them.
3. Emails we send
We send emails you need: your connection link, receipts and important account notices. If you bought the TAM Revenue Projection, we also send a short series of follow-up emails about getting the most out of it, through our email provider Kit. Every one of those has an unsubscribe link.
4. Cookies, analytics and ads
Some of our pages use third-party tools that can set cookies or collect your IP address, browser details and how you use the page:
- Google Fonts, to show the page's fonts (your browser requests them from Google).
- Meta Pixel, on some sales and checkout pages, to measure purchases and show our ads to people likely to be interested.
- Microsoft Clarity, on some pages, to see where visitors get stuck.
- Google Analytics, on report pages, to count visits.
- Cloudflare Web Analytics, on the DomMCP server pages, for basic visit counts.
- Embedded videos (Loom) and booking calendars (TidyCal), which collect data under their own policies when they load.
You can block or delete cookies in your browser settings, and you can manage ad personalisation in your Meta and Google account settings.
5. Who else handles your data
We use these service providers to run DomMCP. Each of them only gets what it needs for its job:
- Payment providers (Stripe, Creem or Midtrans, depending on the product), for checkout, billing and refunds.
- Cloudflare, which hosts the DomMCP server and its database. Cloudflare's request logs, which can include your connection link, are kept for a few days.
- All-Inkl, which hosts the getsherlock.io website.
- Resend, which delivers emails such as your connection link.
- Kit, for the follow-up emails described above.
- Google, for intake forms and our business email.
- Slack and Telegram, which we use for internal notifications of new purchases (name, email and amount).
We don't sell your personal data, and we don't share it with anyone else unless the law requires it.
6. Where your data is processed
We are based in Indonesia, and our service providers process data in other countries, including the United States and countries in the European Union. When data leaves the country you live in, we rely on our providers' standard data protection terms.
7. How long we keep it
- Account and usage records: for as long as you have access, and then until you ask us to delete them.
- Invoices and payment records: for as long as Indonesian tax law requires us to keep them (currently up to 10 years).
- Marketing email data: until you unsubscribe.
8. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you,
- correct it,
- delete it (except records we must keep by law),
- stop using it for marketing, or
- withdraw any consent you gave.
Email support [at] getsherlock [dot] io from the address we have on file, and we will answer within 30 days. These rights come from Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and you may have similar or extra rights under the law where you live, such as the GDPR in the EU or the Privacy Act in Australia. You can also complain to your local data protection authority.
9. Keeping your data safe
Access to customer data is limited to us, and our systems use encrypted connections. Your connection link works like a password, so please keep it private. If you think someone else has it, email us and we will issue a new one.
10. Children
DomMCP is for businesses and is not meant for anyone under 18.
11. Changes
If we change this policy, we update the date at the top. If a change matters for active customers, we will tell you by email.