KEBIJAKAN PRIVASI
By Mimin CS
By Mimin CS
Informasi Kebijakan Policy
Privacy Policy
PRIVACY POLICY 1. Introduction PT Arasys Inovasi Indonesia, hereinafter referred to as “Arasys”, “we”, “us”, “our”, or “the company”, respects and protects the privacy of every user, customer, prospective customer, partner, and other party who communicates with us through our website, applications, customer service channels, social media, Instagram, Facebook Messenger, WhatsApp, email, online forms, or other official communication channels. This Privacy Policy explains how we collect, use, store, protect, share, and delete personal data that we receive in connection with our services, including when users contact our official social media accounts or use customer support services integrated with third-party systems such as Chatwoot, Meta, Instagram, Facebook, WhatsApp, email, and other supporting systems. By contacting us, using our services, sending messages to our official accounts, submitting forms, placing orders, or using our customer support features, users are deemed to have read and understood this Privacy Policy. 2. Scope of This Policy This Privacy Policy applies to all data processing activities carried out by Arasys in connection with: 1. Customer support and business communication. 2. Product or service information requests. 3. Management of incoming messages from Instagram, Facebook Messenger, WhatsApp, email, website, live chat, or other official channels. 4. Quotations, orders, contracts, invoices, technical support, and after-sales services. 5. Integration with third-party platforms, including Meta Platform and Chatwoot. 6. Administrative, operational, security, audit, and legal compliance purposes. This Policy does not apply to third-party websites, applications, or services that we do not directly manage, even if links to such services are available through our communication channels. 3. Types of Data We Collect We may collect and process the following types of data, as needed for our services: a. Identity Data This may include name, social media account name, Instagram or Facebook username, business name, organization name, position, and other identity information voluntarily provided by users. b. Contact Data This may include phone number, WhatsApp number, email address, office address, service address, shipping address, and other contact information required for communication or service delivery. c. Conversation and Customer Support Data This may include message content, conversation history, attachments sent by users, responses from our team, ticket status, internal customer support notes, message timestamps, and information related to user needs or complaints. d. Data from Meta Platform If users contact us through Instagram, Facebook Messenger, or other Meta channels, we may receive certain data provided by Meta in accordance with platform permissions and terms, such as platform user ID, profile name, username, profile picture where available, message content, media attachments, message reactions, message status, and communication metadata required to receive and respond to messages through our customer support system. e. Transaction and Administrative Data This may include order information, quotations, invoices, payment proof, service history, administrative documents, company data, tax information where required, delivery information, and other transaction-supporting data. f. Technical Data This may include IP address, browser, device, operating system, access logs, access time, cookies, security data, and other technical information used to maintain security and improve our services. g. Voluntarily Provided Data Users may voluntarily provide additional information, such as project requirements, technical issues, service preferences, images, videos, documents, or other information sent to us. 4. Sources of Data We may obtain personal data from: 1. Users directly through conversations, forms, email, telephone, WhatsApp, Instagram, Facebook, or live chat. 2. Third-party communication platforms, such as Meta, Instagram, Facebook, WhatsApp, Chatwoot, email providers, and other supporting service providers. 3. Business partners, corporate customers, or parties representing the user’s organization. 4. Our internal systems that record customer service, transaction, and technical support activities. We do not intend to collect personal data that is irrelevant to the purpose of our services. Users are advised not to send unnecessary sensitive information, such as passwords, PINs, OTP codes, confidential bank data, health data, children’s data, or other confidential information through general conversation channels. 5. Purposes of Data Use Personal data is used for the following purposes: 1. Responding to user questions, complaints, and requests. 2. Providing customer support through Chatwoot, Instagram, Facebook Messenger, WhatsApp, email, or other official channels. 3. Processing quotation requests, orders, contracts, invoices, payments, deliveries, and technical support. 4. Managing service tickets, communication history, follow-ups, and issue resolution. 5. Sending service-related information, request status updates, reminders, and administrative communications. 6. Improving service quality, system security, and user experience. 7. Preventing abuse, spam, fraud, unauthorized access, and unlawful activities. 8. Conducting internal analysis, reporting, audits, and service development. 9. Fulfilling legal, regulatory, tax, accounting, and lawful authority requests. 10. Protecting the rights, security, and legal interests of Arasys, users, customers, partners, and other related parties. We do not sell users’ personal data to third parties. 6. Legal Basis for Processing We process personal data based on one or more of the following grounds: 1. User consent, for example when users contact us or provide data through official channels. 2. The necessity to provide services, respond to requests, or perform a contractual relationship. 3. Our legitimate interest in providing customer support, maintaining security, and improving services. 4. Compliance with legal obligations or lawful requests from competent authorities. 7. Use of Data from Instagram, Facebook, and Meta Platform If users send messages to our official Instagram or Facebook account, conversation data may be received through Meta’s official API or services and forwarded to our customer support system. Such data is used only to: 1. Receive and read user messages. 2. Respond to user messages through the same channel. 3. Manage conversations within our customer support system. 4. Provide support, product information, technical services, and request follow-up. 5. Maintain conversation history so that services can be continued consistently. We do not use data from Meta Platform for purposes not described in this Privacy Policy. We also do not sell, rent, or trade data obtained from Meta Platform to third parties. 8. Integration with Chatwoot and Third-Party Service Providers To manage customer conversations, we may use Chatwoot or other customer support systems. Such systems help us receive, manage, assign, and respond to messages from various communication channels in one dashboard. We may also use other service providers for hosting, email, data storage, security, analytics, payment support, notification delivery, and business operations. These third parties are only granted access as necessary for service purposes and are expected to maintain confidentiality and data security in accordance with applicable requirements. 9. Data Sharing with Third Parties We may share personal data in a limited manner with: 1. Customer support system providers such as Chatwoot. 2. Communication platform providers such as Meta, Instagram, Facebook, WhatsApp, and email providers. 3. Hosting, server, cloud, storage, security, and IT infrastructure providers. 4. Technical partners or vendors assisting in service delivery, installation, technical support, delivery, or maintenance. 5. Legal, accounting, tax, or audit consultants where necessary. 6. Government institutions or competent authorities when required by law. We will not share personal data unlawfully or outside reasonable service purposes. 10. Data Storage and Retention We retain personal data for as long as necessary for service delivery, administration, issue resolution, business records, legal compliance, audits, security, and dispute resolution. In general, conversation history and customer support data may be stored while the service relationship remains active or as long as required for operational and legal purposes. Once no longer needed, data may be deleted, anonymized, or archived in accordance with our internal policies and applicable laws. 11. Data Security We make reasonable technical and organizational efforts to protect personal data from unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include: 1. Limited access for authorized personnel. 2. Server and communication system protection. 3. HTTPS usage for online services. 4. Credential and access rights management. 5. System activity logging where necessary. 6. Internal access restrictions based on job requirements. However, no electronic system is entirely risk-free. Users are also responsible for maintaining the security of their accounts, devices, and information sent to us. 12. User Rights Subject to applicable laws and requirements, users may have the right to: 1. Request information regarding personal data we process. 2. Request correction of inaccurate data. 3. Request deletion of certain personal data. 4. Request restriction of data processing under certain conditions. 5. Withdraw consent, where processing is based on consent. 6. Object to certain processing activities. 7. Submit questions or complaints regarding personal data protection. Requests may be sent to the contact email listed in this Privacy Policy. 13. User Data Deletion Request Users may request deletion of personal data related to our services by contacting: Email: info@arasys.co.id Email Subject: Data Deletion Request In the request, users are advised to include: 1. Full name. 2. Instagram/Facebook/WhatsApp/email account used to communicate with us. 3. The type of data or conversation the user wants to delete. 4. Proof that the user owns the account or is an authorized party, if required. After receiving the request, we will conduct reasonable verification. If the request is valid and does not conflict with legal obligations, legitimate interests, transaction records, dispute resolution, or administrative requirements, we will delete or anonymize the relevant data within a reasonable period. Some data may remain retained where necessary to comply with legal obligations, accounting, security, fraud prevention, legal claims, or dispute resolution. 14. Children’s Data Our services are not intended for children under the age required by applicable law. We do not knowingly collect personal data from children without consent from a parent or legal guardian. If a parent or guardian becomes aware that a child has provided personal data to us without permission, please contact us so that the data can be reviewed and, where necessary, deleted. 15. Cross-Border Data Transfer and Storage In using third-party services, hosting, cloud, Meta Platform, Chatwoot, or other technology providers, data may be processed or stored on servers located outside Indonesia. By using our services, users understand that cross-border processing may occur as required for operational purposes and according to the relevant provider’s terms. We will make reasonable efforts to ensure such processing remains appropriately protected. 16. Cookies and Similar Technologies Our website or systems may use cookies, logs, pixels, or similar technologies to manage user sessions, improve performance, understand service usage, maintain security, and support website functionality. Users may manage cookie preferences through their browsers. However, disabling certain cookies may affect service functionality. 17. Third-Party Links Our services may contain links to third-party websites, applications, or services. We are not responsible for the privacy policies, security, content, or data processing practices of such third parties. Users are advised to read each third party’s privacy policy. 18. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in services, technology, law, or operational needs. Changes will be effective from the update date stated in this document or when published through our website/official channels. 19. Contact If users have any questions, requests, or complaints regarding this Privacy Policy, users may contact: PT Arasys Inovasi Indonesia Email: info@arasys.co.id Website: https://arasys.co.id
Term of Services
1. Introduction These Terms of Service govern the use of services, websites, communication channels, customer support, social media, and supporting systems provided by PT Arasys Inovasi Indonesia, hereinafter referred to as “Arasys”, “we”, “us”, “our”, or “the company”. By using our services or contacting us through Instagram, Facebook, WhatsApp, email, website, live chat, or other official channels, users are deemed to have read, understood, and agreed to these Terms of Service. If users do not agree to these Terms of Service, users may stop using the services and discontinue communication or transactions with us. 2. Definitions In these Terms of Service: 1. “Services” means all products, services, technical support, customer support, systems, websites, applications, communication channels, and business activities provided by Arasys. 2. “User” means any individual, customer, prospective customer, partner, company representative, or other party who uses or communicates with our services. 3. “Official Channels” means websites, email, telephone numbers, WhatsApp, Instagram, Facebook, live chat, Chatwoot, or other communication media officially used by Arasys. 4. “User Content” means messages, documents, images, videos, data, information, or other materials submitted by users to us. 5. “Third Party” means service providers, platforms, vendors, partners, or systems outside the direct control of Arasys. 3. Scope of Services Arasys may provide services including, but not limited to: 1. Information technology consultation, development, implementation, and support. 2. Procurement, installation, maintenance, and repair of devices or systems. 3. Network, application, website, digital system, automation, and integration services. 4. Customer support through Chatwoot, Instagram, Facebook Messenger, WhatsApp, email, website, and other official channels. 5. Quotations, orders, invoices, contracts, administration, and after-sales services. The detailed scope of specific services may be further regulated in proposals, quotations, purchase orders, invoices, contracts, MoUs, SLAs, or separate cooperation documents. 4. Use of Communication Channels Users may contact us through available official channels. We will make reasonable efforts to respond within a reasonable time, depending on operating hours, service priority, and team availability. Users understand that: 1. Service response may depend on message volume, urgency level, request type, and operating hours. 2. Messages sent through Instagram, Facebook, WhatsApp, email, or live chat may be managed through customer support systems such as Chatwoot. 3. Conversation history may be stored for follow-up, communication evidence, audit, and service improvement purposes. 4. We may request additional information to verify requests, resolve issues, or continue service processes. 5. User Obligations Users must: 1. Provide true, accurate, complete, and non-misleading information. 2. Use the services reasonably, lawfully, and in accordance with applicable regulations. 3. Not send content that is unlawful, fraudulent, defamatory, threatening, harassing, pornographic, hateful, spam, malware-related, or otherwise harmful. 4. Not attempt to access systems, accounts, data, servers, or services unlawfully. 5. Not misuse communication channels for spam, illegal promotion, fraud, or activities that harm others. 6. Maintain the confidentiality of sensitive data such as passwords, OTP codes, PINs, and account credentials. 7. Provide supporting evidence or documents when required for service verification. 6. Prohibited Use Users are prohibited from using our services to: 1. Conduct actions that violate applicable laws or regulations. 2. Send or distribute malware, viruses, harmful scripts, or activities that disrupt systems. 3. Perform scraping, reverse engineering, hacking, brute force, or unauthorized access. 4. Misuse another person’s identity or provide false data. 5. Disrupt service operations, system security, or the comfort of other users. 6. Send content that violates intellectual property rights, privacy, or the rights of others. 7. Use the services for activities prohibited by Meta, Instagram, Facebook, WhatsApp, or related third-party platform policies. We reserve the right to restrict, suspend, refuse, or terminate services if users violate these Terms of Service. 7. Services Through Instagram, Facebook, and Meta Platform If users interact with us through Instagram, Facebook, or other Meta platforms, users are also subject to the applicable terms and policies of those platforms. We use access to such platforms only to receive, read, manage, and respond to user messages through our official accounts. We are not responsible for disruptions, restrictions, API changes, account limitations, or policies imposed by Meta or other third-party platforms. 8. Integration with Third-Party Systems In providing services, we may use or integrate with third-party systems, including but not limited to Chatwoot, Meta, Instagram, Facebook, WhatsApp, email providers, hosting providers, payment providers, cloud providers, and other technical vendors. Users understand that third-party services may have their own terms, privacy policies, limitations, disruptions, downtime, feature changes, or restrictions beyond our control. 9. Quotations, Prices, and Transactions Information regarding prices, products, services, and availability may change at any time unless agreed in writing in official documents such as proposals, invoices, purchase orders, contracts, or other cooperation documents. Prices displayed or communicated through chat, websites, social media, or informal channels are preliminary information and may require further confirmation. Payment obligations, taxes, additional costs, work scope, quotation validity period, warranties, and other terms shall follow the transaction documents agreed by the parties. 10. User Content By sending messages, documents, images, videos, or other materials to us, users grant us permission to use such content to the extent necessary to answer questions, provide services, conduct verification, resolve issues, prepare quotations, perform transactions, or comply with legal obligations. Users represent that the content submitted does not violate the rights of others and that users have the necessary rights or permission to share such content with us. 11. Intellectual Property Rights All trademarks, logos, designs, texts, documents, systems, applications, source codes, concepts, proposals, presentation materials, and other materials created or owned by Arasys remain the property of Arasys or their rightful owners, unless otherwise agreed in writing. Users are not permitted to copy, distribute, modify, sell, rent, or use Arasys materials without written permission. 12. Confidentiality The parties must maintain the confidentiality of confidential information, including business data, technical data, customer data, quotation documents, system access, configurations, credentials, and other information reasonably considered confidential. Confidentiality obligations do not apply to information that has become public without breach, has been lawfully obtained from another party, is required to be disclosed by law, or has been approved for disclosure in writing. 13. Security and System Access If the services involve access to user systems, servers, applications, networks, accounts, or devices, users are responsible for providing lawful access and ensuring that such access has obtained the required internal approval. We will use such access only for the agreed service purposes. Users are advised to change or revoke credentials after work is completed where necessary. 14. Service Availability We make reasonable efforts to keep services available and functioning properly. However, we do not guarantee that services will always be uninterrupted, error-free, fully secure, or continuously available. Disruptions may occur due to maintenance, technical issues, internet disruptions, server issues, third-party platform issues, force majeure, platform policy changes, or other factors beyond our control. 15. Limitation of Liability To the extent permitted by law, Arasys shall not be liable for indirect losses, loss of profits, data loss, business interruption, reputational damage, third-party claims, or other consequential damages arising from service use, delays, disruptions, user errors, third-party services, or events beyond our control. Our liability, if any and legally proven, is limited to the value of the service directly related to the disputed issue, unless otherwise required by law or applicable written agreement. 16. Suspension or Termination of Services We may suspend, restrict, or terminate services if: 1. Users violate these Terms of Service. 2. Users use the services for illegal or harmful activities. 3. Abuse, spam, threats, or system disruption occurs. 4. Payment or administrative obligations have not been fulfilled, where applicable. 5. It is necessary for legal compliance, security, or protection of others’ rights. 6. Third-party platforms restrict, suspend, or revoke access to related services. 17. Privacy and Data Protection Personal data processing in our services is subject to Arasys Privacy Policy, which forms an integral part of these Terms of Service. By using our services, users also understand and agree that data may be processed for service purposes as described in the Privacy Policy. 18. Changes to These Terms of Service We may update these Terms of Service from time to time to reflect changes in services, law, technology, or operational needs. Changes are effective from the update date or when published through our website/official channels. Users are advised to review these Terms of Service periodically. 19. Governing Law and Dispute Resolution These Terms of Service are governed by and interpreted in accordance with the laws of the Republic of Indonesia. In the event of a dispute, the parties agree to first resolve it amicably and in good faith. If no resolution is reached, the dispute may be resolved through the competent dispute resolution forum in accordance with applicable Indonesian law. 20. Contact For questions regarding these Terms of Service, users may contact: PT Arasys Inovasi Indonesia Email: info@arasys.co.id Website: https://arasys.co.id