Privacy Policy

1. Information We Collect

We collect the following information when you use Metrobit services:

• Personal Information: Full name, email address, phone number (including WhatsApp number), company name, Tax ID (NPWP).

• Transaction Information: Order details, payment method, purchase history.

• Technical Information: IP address, browser type, OS, pages visited.

• Communication Information: WhatsApp conversation history, message delivery status, communication metadata.

• Cookies: Session data and user preferences (see our Cookie Policy).

2. How We Use Your Information

Collected information is used to:

• Process and fulfill your orders.

• Send order confirmations and service updates via email and WhatsApp.

• Provide customer support through various channels including WhatsApp.

• Send transactional notifications and service updates.

• Improve our products and services.

• Fulfill legal and tax obligations.

3. Data Sharing with Third Parties

We may share your information with:

• Meta Platforms, Inc. (WhatsApp) — for messaging and communication services via WhatsApp Business API. Your phone number and message history may be processed by Meta in accordance with their privacy policy.

• Xendit (payment gateway) — to process payment transactions.

• DOKU (payment gateway) — for bank transfer options.

• Resend — for transactional email delivery.

• Vercel — for website hosting.

We do not sell your personal information to third parties.

4. WhatsApp Messaging Services

We use WhatsApp Business API provided by Meta Platforms, Inc. to communicate with you. By using our services:

• You consent to receive transactional messages via WhatsApp.

• Your phone number will be shared with Meta for message delivery purposes.

• WhatsApp conversations may be stored for customer service and compliance purposes.

• You can opt out of non-transactional messages at any time by sending "STOP" or contacting us.

For more information about how Meta processes your data, please visit: https://www.whatsapp.com/legal/privacy-policy

5. Data Security

We implement technical and organizational security measures to protect your information, including SSL/TLS encryption and data access restrictions.

6. Data Retention

We retain your personal data for:

• Account Data: As long as your account is active or as needed to provide services.

• Transaction Data: Minimum 10 years as required by Indonesian tax regulations.

• Communication Data (including WhatsApp): Up to 2 years for customer service purposes, or longer if required by law.

• Technical Logs: Up to 1 year.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States (for Meta/WhatsApp and Vercel services). We ensure appropriate safeguards are in place in accordance with applicable laws.

8. Your Rights

You have the right to:

• Access personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your personal data.

• Withdraw consent for data processing.

• Opt out of marketing communications.

To submit a data request, please contact us at [email protected] with proof of identity. We will respond within 30 business days.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child under 18 has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or notice on our services at least 30 days before taking effect.

11. Contact

For privacy-related questions or to submit a data request, contact us at:

Email: [email protected]

PT Kreasi Raya Nusantara South Jakarta, DKI Jakarta, Indonesia