This Privacy Policy explains how Hayu Apps (“we”) collects, uses, stores, and protects your personal data when you use the hayuapp.com website and Hayu Apps applications (together, the “Services”). By using the Services, you agree to the practices described in this policy.
This policy has been prepared with reference to the laws and regulations in force in Indonesia, including Law Number 27 of 2022 on Personal Data Protection.
Data we collect
We only collect the data needed to provide and improve the Services, namely:
- Account data, such as your name, email address, phone number, and business name that you provide when signing up.
- Business data, which is the data you enter into the apps, such as transactions, products, orders, customers, and financial records.
- Technical data, such as device type, operating system, IP address, and activity logs needed to keep the Services running and secure.
- Communication data, which is the content of your messages when you contact us by email, WhatsApp, or other channels.
How we use data
Your data is used to:
- provide, operate, and maintain the Services;
- create and manage accounts, including signing in;
- provide support and answer your questions;
- send important information about the Services, such as feature updates or changes to the terms;
- understand how the Services are used in order to fix and develop features;
- keep the Services secure and prevent misuse and fraud;
- comply with applicable legal obligations.
Ownership of business data
The business data you enter into the apps remains yours. We process that data only to run the Services as you request and do not use it for any other purpose without your consent.
Sharing data with other parties
We do not sell your personal data. Data may only be shared with:
- supporting service providers, such as cloud infrastructure and messaging service providers, who process data on our behalf and are required to keep it confidential;
- authorities, when required by law or by an official order from a competent authority;
- other parties, only with your consent.
Data storage and security
We keep data for as long as your account is active or as long as needed to provide the Services and meet legal obligations. We apply reasonable technical and organizational measures to protect data from unauthorized access, alteration, or disclosure.
That said, no system is completely risk-free. We therefore also ask you to keep your account password confidential.
Your rights over your personal data
In accordance with applicable regulations, you have the right to:
- access and request a copy of your personal data;
- update or correct inaccurate data;
- withdraw consent to certain data processing;
- request deletion of your account and personal data through the Delete Account page.
To exercise these rights, contact us using the details at the end of this page. We may ask you to verify your identity before processing your request.
Cookies and similar technologies
The Services may use cookies or local storage needed for features to work properly, for example to keep you signed in or to remember your chosen language. You can manage or delete cookies through your browser settings, but some features may not work optimally.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page, together with its update date. For significant changes, we will notify you through the Services or another appropriate communication channel.