Legal

Privacy Policy

Last updated: 17 June 2026  ·  Applies to Kalbota Bisnis users

By using Kalbota Bisnis, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and data security.

1. Information We Collect

Account & Identity Data

  • Full name, email address, and phone number
  • Business/store name and company information
  • Password (stored in encrypted form)

Transaction & Business Data

  • Sales, purchase, and inventory data you enter
  • Employee and payroll data (if using HR module)
  • Financial reports and business accounting

Technical Data

  • IP address, browser type, and operating system
  • Application usage activity logs
  • Session cookies to maintain login security

Payment Data

  • Subscription payment transaction information (processed via Duitku)
  • We do NOT store credit/debit card data directly

2. How We Use Your Data

Collected data is used to:

  • Provide, operate, and improve Kalbota Bisnis services
  • Process subscription payments and manage your account
  • Send important service notifications (email, WhatsApp)
  • Provide technical support and customer service
  • Analyze usage to improve features and performance
  • Fulfill applicable legal and regulatory obligations

3. Sharing Data with Third Parties

We do not sell your personal data. Data is only shared with:

  • Duitku — payment processor for subscription transactions
  • Google — for OAuth authentication (if used)
  • RajaOngkir — for shipping cost calculation (if used)
  • Hosting provider — for server infrastructure operations

4. Data Security

  • SSL/TLS encryption for all data transmission
  • Password encryption using bcrypt
  • Role-based data access restrictions
  • Regular data backups and security monitoring
  • CSRF and XSS protection on all forms

5. Data Retention

  • Business data deleted within 30 days after account deletion
  • Financial transaction logs retained 5 years per Indonesian tax regulations
  • Encrypted backups deleted within 90 days

6. Your Rights

  • Accessrequest a copy of your personal data
  • Correctionupdate inaccurate data
  • Deletionrequest account and data deletion
  • Portabilityexport your business data in CSV/Excel format

To exercise these rights, contact us at support@kalbota.com.

7. Cookies

  • Session cookiesmaintain your login status (required)
  • Preference cookiessave language and theme settings
  • Analytics cookiesGoatCounter for anonymous visitor statistics

8. Policy Changes

We may update this policy at any time. Significant changes will be notified via email at least 7 days before taking effect.

9. Contact Us