Privacy Policy

1. Introduction

Wekadata is committed to protecting the privacy and security of its users’ personal data. This Privacy Policy transparently explains what data we collect, how we use it, and the rights you have over your data.

This policy applies to all Wekadata services, including our web platform, API, and official communication channels. By using Wekadata’s services, you agree to the practices described in this policy.

This Privacy Policy is prepared in accordance with Law Number 27 of 2022 on Personal Data Protection (UU PDP) of the Republic of Indonesia.

2. Data We Collect

2.1 Data You Provide Directly

When registering and using Wekadata, we collect:

• Identity data: full name, business name, email address, WhatsApp number.
• Account data: encrypted password, notification preferences, team access settings.
• Business data: transaction, sales, menu, and restaurant operational data that you upload or sync to the platform.
• Communication data: messages you send via our contact form or email to our team.

2.2 Automatically Collected Data

When you access the platform, we automatically record:

• Technical data: IP address, browser type, operating system, screen resolution.
• Usage data: pages visited, features used, session duration, access time.
• Device data: device identification for account security purposes.

2.3 Data from Third Parties

If you connect a POS system such as Moka POS or Majoo, we receive transaction data from those platforms according to the permissions you grant during the integration process.

3. How We Use Data

We use the collected data to:

• Provide the service — run dashboards, generate reports, and send alerts according to your account configuration.
• Improve the service — analyze usage patterns to develop new features and improve the user experience.
• Communication — send technical notifications, billing reminders, policy updates, and responses to your inquiries.
• Security — detect and prevent unauthorized access, fraud, or service abuse.
• Legal obligations — fulfill reporting obligations or requests from authorized authorities in accordance with applicable law.

We do not use your data for third-party advertising, sell or rent it to any party, or for purposes beyond those stated in this policy without your consent.

4. Legal Basis for Data Processing

In accordance with UU PDP, we process your personal data based on:

• Contract performance — processing necessary to provide the service you subscribed to.
• Legitimate interests — usage analysis for service improvement, as long as it does not override your rights.
• Consent — for marketing communications or processing beyond core service needs, which you may withdraw at any time.
• Legal obligation — when required by regulation or authorized authorities.

5. Sharing Data with Third Parties

Wekadata does not sell, rent, or trade your personal data. We only share data in the following circumstances:

5.1 Technical Service Providers

We work with technical infrastructure providers that assist in platform operations, including hosting and cloud providers for data storage, email delivery services for transactional notifications, and platform analytics services to understand product usage in aggregate. All third parties are bound by confidentiality agreements and are only authorized to process data according to our instructions.

5.2 Legal Obligations

We may disclose data if required by law, court order, or official request from authorities of the Republic of Indonesia.

5.3 Your Consent

Beyond the above circumstances, we will not share your data with any party without your explicit consent.

6. Data Storage and Location

Your business data is stored on servers located in Southeast Asia. We choose storage locations that consider security, latency, and regulatory compliance.

We apply technical and organizational security measures to protect data, including TLS 1.2+ encryption in transit, encryption at rest, role-based access control for Wekadata’s internal team, and automated daily backups with a 30-day retention period.

7. Data Retention

We retain data for as long as necessary for the purposes described in this policy:

Data Type	Retention Period
Active account data	While account is active
Business and transaction data	While account is active + 30-day grace period
Access and security logs	90 days
Communication data (email/contact)	2 years
Anonymized data	Indefinite, for aggregate research

After the retention period ends, data is permanently deleted from our systems.

8. Cookies and Tracking Technologies

Wekadata uses cookies and similar technologies for:

• Essential cookies — required for basic platform functionality such as authentication and login sessions. Cannot be disabled.
• Analytics cookies — help us understand how users interact with the platform. Can be disabled via browser settings.

We do not use cookies for third-party advertising purposes.

9. Your Rights as a Data Subject

In accordance with UU PDP, you have the following rights over your personal data:

• Right of access — obtain a copy of personal data we hold about you.
• Right of rectification — request correction of inaccurate or incomplete data.
• Right of erasure — request deletion of your personal data, noting that we may need to retain certain data for legal obligations.
• Right of restriction — request restriction of processing under certain conditions.
• Right of portability — receive your data in a machine-readable format for transfer to another service.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — revoke consent at any time without affecting the legality of prior processing.

To exercise any of the above rights, contact us at support@wekadata.id.

10. Data Security and Breach Procedures

We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

If a data security breach occurs that may harm you, we commit to investigating the incident within 24 hours of detection, notifying affected users within 72 hours of breach confirmation, reporting to authorized authorities in accordance with legal obligations, and taking mitigation steps to prevent similar incidents.

11. Children’s Privacy

Wekadata’s services are intended for adult business users aged at least 18 years. We do not intentionally collect personal data from children under 18. If you become aware of any children’s data entering our system, please contact us immediately for deletion.

12. Changes to Privacy Policy

We may update this Privacy Policy at any time. For material changes, we will provide notice via registered email or in-platform notification at least 14 days before changes take effect.

The last update date is always shown at the top of this document. Continued use of the service after changes take effect is considered acceptance of the new policy.

13. Contact

If you have questions, concerns, or wish to exercise your rights as a data subject, contact us via:

Email: support@wekadata.id
WhatsApp: Available on the Contact page
Operating hours: Monday–Friday, 09:00–17:00 WIB (GMT+7)

---

Last updated: March 2026