Privacy Policy

Effective 15 October 2026. Based on Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP). The Indonesian version prevails if the two differ.

sewamotorbali.org Tech Rental (the "Service") is a service by siappergi.com. This policy explains what data we process, why, and your rights.

1. Our role

For business account and dashboard user data, sewamotorbali.org is the data controller. For renter data entered by a rental business (name, phone, ID/passport number and photo, rental history), the rental business is the controller and sewamotorbali.org acts as a data processor on its instructions.

2. Data we process

• Account: business name, name, email, phone, password (stored as a hash), security settings.
• Rental operations: units, bookings, invoices, payments, expenses, handover checklists and photos.
• Renter data entered by the rental business, including ID photos if uploaded.
• Technical data: IP address, device/browser type, sign-in records and the audit trail of changes.
• Telegram: chat ID and username if you connect the bot.

3. Purposes

• Running the service: rental records, invoices, reports, notifications and approvals.
• Security: sign-in verification, new-device alerts, abuse prevention, audit trail.
• Subscription billing and customer support.

We do not sell data and do not use renter data for advertising.

4. Storage and security

• Data is stored on servers we manage; traffic goes over HTTPS (Cloudflare).
• Uploaded photos are encrypted (AES-256-GCM); inspection and ID photos open only through signed links that expire.
• Encrypted daily database backups, kept for 30 days.
• Two-step sign-in is available to every user.

5. Retention

• ID / passport photos are deleted automatically 30 days (or as set by the rental business) after the renter's last rental ends.
• Account and transaction data are kept while the account is active and afterwards as long as the law requires (e.g. tax), then deleted on request.
• The audit trail is kept for as long as the account exists, because it serves as evidence.

6. Third parties

We use infrastructure and communication providers to run the service: Cloudflare (network & security), Telegram (owner notifications, if connected), Midtrans (online payments, if used), Meta WhatsApp (if the rental connects its own account) and Google (if the rental uses Google Sheets).

7. Your rights

Under the UU PDP you may access, correct, download, restrict and request deletion of your data, and withdraw consent. Renters can send requests to the rental business concerned; we help the business fulfil them.

8. Incidents

If personal data protection fails, we notify the affected rental businesses within 3×24 hours as required by the UU PDP.

9. Contact

siappergi.com · WhatsApp.