Privacy Policy
PT Katalis Kreasi Teknologi (“we”, “us”, “our”) builds mobile applications (“Applications”), enterprise web platforms, workflow automations, and API integrations (“Services”), including its role as a technology solutions partner (Meta Tech Provider).
This document serves as our centralized Privacy Policy applicable to all Applications and Services published or maintained by PT Katalis Kreasi Teknologi that link or reference this policy across the Google Play Store, client portals, and Meta Platform integrations (including the WhatsApp Business Platform and Meta Graph API).
This page informs website visitors, clients, and end users regarding our policies regarding the collection, use, processing, and disclosure of Personal Information for anyone who chooses to use our Services. By choosing to use our Services, you consent to the collection and use of information in accordance with this Privacy Policy.
1Information Collection and Use
In general, our Applications and Services are engineered to minimize the collection of personal data and never access sensitive user information unnecessarily. However, for systems or applications requiring user authentication (log in), identity verification, or basic personalization, we require certain personally identifiable information under the following terms:
- Account Authentication: We utilize official authentication services provided by Google. Through this architecture, our Applications never request, access, or store your passwords. The verification process is completely and securely handled within the Google ecosystem.
- Limited Profile Data: Information requested through your Google account is strictly limited to essential authentication requirements, specifically your Name and Email Address. We do not retrieve or store any extended profile data.
- Email Use and Protection: The email address obtained is solely utilized for critical operational communication and automated system notifications related to your application usage. We guarantee that your email address will never be shared, distributed, rented, or sold to any third parties for marketing or advertising purposes.
2Meta Tech Provider & WhatsApp Business API Terms
In our capacity as a technology solutions partner (Meta Tech Provider) and system integration vendor, PT Katalis Kreasi Teknologi assists business clients in integrating their operational systems with Meta Platforms Technologies (including WhatsApp Business Platform / Cloud API, Meta Graph API, and Instagram Graph API). In connection with these integrations, the following data handling provisions apply:
Data Processed via Meta APIs
To facilitate business messaging and workflow automation, our platform processes communication metadata on behalf of our Clients (acting as a Data Processor / Intermediary). This includes: WhatsApp Business Account ID (WABA ID), business phone numbers, verified recipient phone numbers, message payloads, message delivery statuses (sent, delivered, read), and encrypted API authentication tokens.
Strict Compliance with Meta Platform Terms
We strictly comply with the Meta Platform Terms, Meta Developer Policies, and WhatsApp Business Messaging Policy. We do not use data obtained through Meta APIs for unauthorized profiling, behavioral surveillance, or spam facilitation. We explicitly forbid transferring, licensing, or selling Meta user data to any third parties or data brokers.
End-User Opt-In Consent
Clients utilizing our Meta Tech Provider integrations must guarantee and warrant that all message recipients have provided valid, prior opt-in consent in full compliance with WhatsApp official policies and applicable privacy laws.
3Device Permissions
Some of our mobile applications may request permission to access certain device features (such as camera or local storage) purely to execute core functionality within the application (e.g., scanning QR codes, uploading profile pictures, or saving export documents). These permissions are only activated when you explicitly grant consent within the app interface, and we do not use device permissions to secretly collect background personal data.
4Third-Party Services (Sub-processors)
Our applications and systems integrate trusted third-party service providers to ensure operational reliability, performance telemetry, and security. These third-party services maintain their own privacy policies governing their data handling practices:
Data Retention & User Data Deletion Instructions
In accordance with Meta Platform requirements and global data protection standards (including GDPR and Indonesian PDP Law), users have the right to request the permanent deletion of their personal data from our systems.
Data Retention Period
We retain your personal data only as long as your account remains active or as required to fulfill service delivery. Operational transmission logs (such as WhatsApp message status callbacks) are securely retained for a maximum of 30 to 90 days solely for debugging, auditing, and compliance purposes, after which they are automatically purged.
Step-by-Step Data Deletion Instructions:
- Submit a written deletion request by emailing: dev@kataliskreasi.com with a copy to halo@kataliskreasi.com.
- Use the subject line: “User Data Deletion Request - [Your Name / Application Name]”.
- Include identifying details: The registered email address, associated WhatsApp Business Account ID, or phone number to be deleted.
- Our security team will verify account ownership within 48 business hours and process complete deletion from all production databases within a maximum of 14 calendar days.
- Upon completion, you will receive an official confirmation email verifying that all associated personal data has been permanently purged from our servers.
6Data Security
We value your trust in providing us with your personal data and entrusting your business system integrations to us. We implement commercially acceptable and industry-standard technical and organizational safeguards, including transport layer encryption (TLS 1.3 / HTTPS), AES-256 encryption for stored API tokens and secrets, and strict role-based access control (RBAC). However, remember that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security beyond reasonable technological capability.
7Links to Other Sites
Our Applications or Services may contain links to external sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. We strongly advise you to review the Privacy Policy of those websites as we have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
8Children's Privacy
Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers.
9Your Data Protection Rights
Under applicable data protection laws (including the Indonesian Personal Data Protection Law No. 27 of 2022 and international principles), you hold the following rights:
- The right to know what data is collected, its legal basis, and its processing purposes.
- The right to access and receive a copy of your stored personal information.
- The right to rectify inaccurate or incomplete personal records.
- The right to request erasure and permanent deletion of your data.
- The right to revoke previously granted processing consent at any time.
10Changes to This Privacy Policy
We may update our Privacy Policy periodically to reflect technological improvements, updates to platform provider requirements (such as Google Play and Meta Developer Policies), or regulatory changes. You are advised to review this page periodically. Any modifications are effective immediately upon posting to this page, as denoted by the “Last Updated” date at the top of this document.
11. Contact Us
If you have any questions, suggestions, or data deletion requests regarding this Privacy Policy, please contact our legal and engineering team through the following official channels:
© 2026 PT Katalis Kreasi Teknologi. All rights reserved.