Rights in the EU and EEA
- The right to know whether personal data is being processed
- The right to request access to personal data and related information
- The right to request correction, deletion, or restriction where applicable
- The right to object to processing based on legitimate interests in some cases
- The right to withdraw consent without affecting earlier lawful processing
- The right to receive certain data in a portable form where applicable
- The right to complain to a supervisory authority in the relevant jurisdiction
U.S. state privacy rights
State privacy laws vary, but commonly provide rights to know, access, delete, correct, and opt out of some sales, sharing, or targeted advertising practices.
IndoPac does not sell personal information, share it for cross-context behavioral advertising, or build targeted advertising audiences. Readers can unsubscribe from editorial email and turn audience measurement off in the footer.
Account and subscription controls
- Edit or clear optional display name, biography, social links, and other profile fields
- Keep the public-profile preference off, which is the default; no public profile endpoint is available in this release
- Change email products, regions, topics, cadence, format, delivery window, pause, or unsubscribe
- Remove a profile image and replace it with the generic account image
- Download an authenticated JSON copy of available account, profile, and preference data
- Delete the account, private profile image, active profile and preferences, and Cognito identity after explicit confirmation
Withdrawal, deletion, and suppression
Withdrawing from editorial email must be as easy as signing up. A reader can use preferences or the unsubscribe control in an edition. Withdrawal applies to the selected editorial product or, when chosen, all editorial email. It does not prevent a necessary account-security, verification, export, or deletion message.
Account deletion and email withdrawal are separate choices. IndoPac may retain a minimal suppression record after either action so it can honor a do-not-contact request. Limited fraud, security, transaction, consent, or legal records may also be retained where an exception applies.
Children and sensitive information
IndoPac is not directed to children under 13 and is not designed to knowingly collect sensitive reader profiles or payment records. Readers should not put sensitive personal information in a biography, image, or social link.
Where applicable law requires an appeal from a denied privacy request, IndoPac will provide instructions with that decision. A reader may also complain to the data-protection authority or regulator in the relevant jurisdiction.
Making a request
Use the signed-in profile, preferences, and privacy controls for routine correction, JSON export, and deletion. Signing in provides reasonable identity verification and helps prevent someone else from changing or deleting an account. Deletion also requires explicit confirmation and the current account version. Do not send a password, access token, or signed profile-image link in a request.
Self-service export covers data associated with the authenticated reader account; it may not include de-identified analytics, security information that cannot reasonably be linked to the reader, data that identifies another person, or records protected by a legal exception. IndoPac does not currently publish a separate privacy mailbox or postal address.