SiMahir Logo

SIMAHIR PRIVACY POLICY

1. Introduction

1.1 Welcome to SiMahir. We are a software house that builds custom software solutions, including web, mobile, and blockchain applications. Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your personal data in accordance with Indonesia’s Personal Data Protection Law (UU PDP 2022).

2. Data We Collect

2.1 We may collect and process the following types of personal data:

  • Full name, email address, and company information
  • Project-related data and communication history
  • Technical usage data such as IP address, device, and browser info
  • Payment or invoicing information (excluding sensitive financial data)
  • Location data, including precise or approximate GPS coordinates, pickup and destination addresses, and, where available, accuracy, heading, speed, and the time the location was captured
  • Any other data you voluntarily provide for project discussions or service delivery

2.2 With your device permission, the SiMahir app accesses and collects location data when you use location-based features. For service agents handling an active booking, location may also be collected while the app is running in the background if you grant background-location permission and enable live tracking. You can deny or revoke location permission in your device settings, although nearby services, address selection, agent availability, and live-tracking features may not work correctly.

3. How We Use Your Data

3.1 We use your personal data for the following purposes:

  • Communicating with you about your project or inquiry
  • Developing and delivering custom software solutions
  • Managing payments, invoices, and contracts
  • Improving our services and website performance
  • Complying with legal and regulatory obligations under UU PDP 2022

3.2 We use location data to:

  • Show available services and service coverage near you
  • Select, verify, and navigate to pickup, destination, or service addresses
  • Match and coordinate customers, providers, and assigned service agents
  • Display an assigned agent’s current location to authorized participants during an active booking and stop live tracking when the booking is no longer active
  • Maintain service reliability, safety, and fraud prevention

4. Legal Basis for Processing Data

4.1 In accordance with UU PDP 2022, we process your personal data based on:

  • Your explicit consent
  • The necessity of processing for contractual or pre-contractual obligations
  • Compliance with legal and regulatory requirements

5. Data Retention

5.1 We retain your personal data only for as long as necessary to fulfill the purposes stated above. After that, your data will be securely deleted or anonymized unless we are required to retain it by law.

5.2 To request deletion of your account data, follow the instruction here: simahir.com/en/data-deletion

6. Data Security

6.1 We implement robust technical and organizational measures to protect your data, including:

  • Encryption, role-based access controls, and secure authentication
  • Secure storage and backups on AWS servers located in Indonesia
  • Internal security policies and staff training to minimize risks

7. Data Location & Compliance

7.1 All personal data is stored and processed on AWS cloud infrastructure located in Indonesia, ensuring compliance with UU PDP 2022 regarding data sovereignty.

8. Data Sharing and Third Parties

8.1 We do not sell or rent your personal data. We only share your data with trusted third parties when necessary to deliver our services:

  • AWS for cloud hosting and data storage
  • Mapping, geocoding, and navigation providers when needed to process an address, calculate a route, or display a map
  • Other vendors or subcontractors involved in your project (with your consent)

8.2 All third-party access complies with UU PDP 2022 and is governed by strict data processing agreements.

8.3 During an active booking, relevant location data may be shared with authorized participants in that booking, such as the customer, provider, and assigned service agent, solely to coordinate and deliver the requested service. We do not sell location data or use it for advertising.

9. Cookies & Tracking Technologies

9.1 We use cookies and similar tracking technologies for the following purposes:

  • Maintain secure user sessions
  • Remember user preferences
  • Analyze usage and improve site performance

9.2 You can control cookies via your browser settings. Disabling cookies may affect website functionality.

10. Your Rights

10.1 Under UU PDP 2022, you have the right to:

  • Request access to your personal data
  • Update or correct your data
  • Withdraw your consent at any time
  • Request deletion of your data
  • File a complaint with Kominfo if you believe your rights have been violated

11. Data Breach Notification

11.1 In the unlikely event of a data breach, we will promptly notify affected users and relevant authorities as required by UU PDP 2022, and take immediate action to contain and mitigate the issue.

12. Children’s Privacy

12.1 Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under 18 years of age. If such data is discovered, it will be promptly removed.

13. Updates to This Privacy Policy

13.1 We may revise this Privacy Policy to reflect changes in legal requirements or our business operations. You will be notified of material updates via email or on our website.

14. Contact Us

14.1 If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

  • Email: info@simahir.com