Privacy Policy

1. Scope

This policy covers the Android app published by PT Bentang Pilar Nusantara on Google Play (the “App”) and the bentangpilar.id website. It does not cover third-party services you open from the App, such as maps, cloud storage, or payment gateways. Those services have their own privacy policies.

People use the App to send service requests, follow the progress of their work, upload documents, and communicate with our team. The data we ask for follows the feature you use. Some features work without an account, but a service request needs one so we can reach you and keep a record of the work.

2. Data we collect

The table below summarises the data we may collect. The “Required” column marks data a feature cannot work without.

We do not ask for data unrelated to the service, such as your contact list, call history, or text messages. If a later version of the App adds a new data type, we update this policy first and update the Data safety section on Google Play at the same time.

3. Device permissions

Permissions are requested when you use the related feature, not when the App first opens. Declining one permission closes only the feature that needs it, and the rest keeps working.

• Camera: photograph documents or site conditions. Without it you can still pick a file from storage.
• Photos and files: attach an image or document you choose yourself.
• Location: mark a project site. You can type the address instead.
• Notifications: tell you when the status of your job changes. Can be turned off in Android settings at any time.

Every permission can be withdrawn in Android Settings, under Apps, then Permissions. The permission list also appears on the App’s Google Play page.

4. Legal bases

• Your consent: device permissions, notifications, and updates outside the service itself. Consent can be withdrawn at any time.
• Performance of a contract: creating an account, preparing a quote, and delivering the service you requested.
• Legal obligation: keeping permit documents, tax records, and work archives as required by law.
• Legitimate interests: keeping systems secure, preventing misuse, and fixing faults, while respecting your rights.

5. How we use data

• Create and manage your account, including restoring access.
• Prepare quotes, schedules, and the technical documents you request.
• Contact you about work in progress.
• Send status notifications when you have them turned on.
• Protect accounts and systems, including detecting suspicious sign-in attempts.
• Meet legal obligations, such as archiving and tax reporting.
• Measure aggregate usage to improve the App. These statistics are not used to single you out.

We do not use your data for automated decisions with legal effect, and we do not sell personal data to anyone.

6. Sharing

We share data only where it is needed to run the service or to comply with the law.

• Infrastructure providers: Google services (Google Play, Firebase for notifications and crash reports), hosting, database, and transactional email providers. They process data on our behalf under data processing agreements.
• Specialists and partners: consultants or laboratories handling part of your request, limited to the relevant data and bound by confidentiality.
• Payment providers: banks or payment gateways process transactions under their own policies.
• Authorities: where a lawful order exists, or to defend our rights in legal proceedings.
• Business successors: in a merger or transfer of the business, data may be transferred with advance notice and remains bound by this policy.

We do not sell, rent, or trade personal data. Links to third-party services in the App are governed by each provider’s privacy policy.

7. Storage and retention

We keep data for as long as the purposes above require, then delete or anonymise it.

Data whose retention period ends is removed from production systems and is no longer used for any other purpose.

8. Security

• Connections to the App and website use TLS, so data in transit is encrypted.
• Passwords are stored as hashes, never as plain text.
• Access to data is limited to staff who need it, with access logging.
• Database backups are stored encrypted and restore-tested.
• We lock an account after signs of misuse and notify its owner.

No system is entirely free of risk. If a personal data breach occurs, we notify you and the supervisory authority no later than 3 x 24 hours after we learn of it, as required by Article 46 of Law No. 27 of 2022.

9. Your rights

As a data subject you have the right to:

• Ask what data we hold about you and how it is processed.
• Request a copy in a machine-readable format.
• Correct inaccurate or incomplete data.
• Request deletion of data and an end to processing.
• Withdraw consent you gave earlier, for example for notifications.
• Object to processing based on legitimate interests.
• Lodge a complaint with the personal data protection supervisory authority.

Send requests to info@bentangpilar.id with the subject “Personal Data Request”, or by WhatsApp to +62 882 1277 9778. We verify your identity first so data is not handed to the wrong person, then reply within 3 x 24 hours and resolve the request within 14 working days. There is no fee, except for requests that are clearly repetitive.

10. Account and data deletion

You can delete your account inside the App from Account then Delete account, or by emailing info@bentangpilar.id from the registered address. Email requests are answered within 3 x 24 hours.

What is deleted: profile, email address and phone number, profile photo, form entries, uploads no longer needed, and push tokens. What is kept: billing records, documents that must be archived, and security logs, each for the period in section 7. Data kept under a legal obligation is not used for any other purpose.

Deletion is carried out within 30 days of a verified request, and copies in backups are removed within a further 90 days.

11. Children

The App is intended for businesses and adult users, not for children. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you become aware of such data, contact us and we will delete it.

12. International transfers

Some providers we use keep servers outside Indonesia, including Google (Google Play and Firebase) and our hosting providers. Data is transferred abroad only where needed, under contractual safeguards and a level of protection consistent with Law No. 27 of 2022.

13. Cookies on the website

The Android App does not use cookies. The bentangpilar.id website uses cookies needed to display pages and remember your consent choice, plus analytics cookies to count visits if you agree. You can refuse or delete cookies in your browser settings; some parts of the page may then work less smoothly.

14. Changes to this policy

We update this policy when we add features, change providers, or when the rules change. The current version always lives on this page with a new effective date. For changes that affect your rights we notify you through the App or your registered email at least 14 days before they take effect. Older versions are available on request.

15. Contact