Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our service (the "Service"). By using the Service, you agree to the practices described in this policy.

This policy is prepared with reference to Indonesian Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and related applicable regulations in Indonesia.

We collect the following data to run the Service:

• •Account data: name, phone number, email address, and the identity of the messaging app you use to sign in.
• •Operational data: tasks, reports, tickets, schedules, and activity records you create within the Service.
• •Photos and metadata: photos taken via the camera along with a server timestamp and location coordinates (GPS) for verifying work evidence.
• •Location data: device coordinates while performing location-based tasks (geofencing).
• •Limited biometric data: face photos (selfies) if face-based attendance is enabled by your organization.
• •Device & technical data: device type, operating system, IP address, and usage logs for security and maintenance.

• •Providing, operating, and maintaining the Service.
• •Verifying the authenticity of work evidence (photo, time, location) as a core function of the Service.
• •Generating reports and summaries for managers and property owners.
• •Translating content across languages to facilitate communication.
• •Processing subscriptions and payments.
• •Maintaining security, preventing misuse, and fulfilling legal obligations.

Personal data processing is carried out based on your consent, performance of a contract (providing the Service), and/or legitimate interests that do not override your rights.

For location data and face photos, we ask for explicit consent beforehand. You may withdraw consent at any time, although doing so may affect certain functions.

We do not sell your personal data. We only share data with:

• •Trusted cloud infrastructure providers for storage and processing.
• •Payment gateway providers to process subscription transactions.
• •Authorities where required by applicable law.

An organization's operational data and photos are accessible only to that organization's members, according to their respective roles.

Data is stored in data centers in locations we determine to maintain reliability and compliance.

Photos and work evidence are stored as long as needed for operational purposes and may then be moved to lower-cost storage or deleted in line with our retention policy. Data related to an active dispute is excluded from deletion until the dispute is resolved.

We implement reasonable technical and organizational measures to protect data, including encryption in transit, role-based access controls, and server access restrictions. However, no system is completely risk-free.

Under the PDP Law, you have the right to:

• •Access and obtain a copy of your personal data.
• •Correct inaccurate data.
• •Delete personal data within certain limits.
• •Withdraw consent to processing.
• •Object to certain processing.

To exercise these rights, contact us via the Contact Us page (villaops.studiokami.co.id/contact) or an in-app support channel.

Some features allow guests or third parties to submit requests without creating an account. Such pages are designed to avoid storing unnecessary personal data and are temporary in nature.

The Service is intended for business use and is not intended for individuals under the legal age. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service. Continued use after an update means you accept the updated policy.

For questions about this policy or your personal data, contact us via the Contact Us page (villaops.studiokami.co.id/contact) or an in-app support channel.