Law Enforcement Access Policy
How we handle requests for user information. Last updated: 2026-10-12
Good-faith draft written by the team that built the product. It describes current behaviour accurately but has not been reviewed by a lawyer, so it is not legal advice.
Our position
People trust us with information about themselves and we treat that seriously. We also comply with valid legal obligations. This policy explains how we tell the difference.
Where to send a request
By email to contact-us@linkgrowth.id, or in writing to PT Ngopi Dulu Bos, Blok TM no 3, Jl. Yudhistira No.RT.002, RT.002/RW.006, East Karang, Karang Tengah, Tangerang City, Banten 15157. We have one office and one channel; we do not operate regional legal entities.
What a request must contain
Requests missing any of the following cannot be assessed and will be returned:
- the agency making the request, and the matter it relates to;
- the specific law the request is made under;
- the name, identification number and direct contact details of the officer who authorised it;
- an exhaustive list of the data sought;
- the date by which a response is required.
Data not on that list will not be provided. We do not respond to open-ended requests for all information held.
Requests from outside Indonesia
PT Ngopi Dulu Bos is an Indonesian company, but the database is hosted in the United States, so a US authority may assert its own process over the hosting provider. . We do not act on requests sent directly by authorities outside Indonesia. Those must come through mutual legal assistance or another proper diplomatic or judicial channel.
How we assess one
We check that the request was validly issued, rests on a substantiated legal basis, and binds us. We may come back for more detail before deciding. If we conclude we must disclose, we disclose only what is legally required — no more.
We will normally tell the user
Unless we are legally prohibited, we contact the affected person before disclosing anything about them. If there is a legal basis for us not to, say so in the request with supporting detail.
Emergencies
Where we reasonably believe there is a serious and imminent threat to someone's life, health or safety, we may disclose without a formal request. We do not take that lightly and use it only for a genuine emergency.
What we actually hold
Worth knowing before you ask. For a creator: an email address, a username, page content they published, and timestamps. For visitors: aggregate view and click counts tied to a page rather than a person, and — only where the visitor accepted analytics — event records with a short-lived session id.
We do not hold identity documents, payment details, message content, precise location, or advertising identifiers. We do not log visitor IP addresses against events. The Privacy Notice is the full inventory.
Costs and reporting
Where responding involves material cost we may seek reimbursement. We publish the number of requests received and actioned in each Transparency Report.