Privacy Policy

Lokaspace, operated as a sole proprietorship, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your Personal Data when you use Lokaspace's services, in accordance with Law No. 27 of 2022 on Personal Data Protection (the "UU PDP", Indonesia's national data protection law) and other applicable Indonesian regulations.

Under this policy, Lokaspace acts as the Data Controller for data collected through the Platform - that is, the party that determines the purposes and means of processing your Personal Data.

By using our Platform, you agree to the practices described in this policy. If you do not agree with this policy, please refrain from using the Platform.

1. Data We Collect

We collect the following information when you use Lokaspace:

2. Basis for Processing

We process your Personal Data based on one or more of the following legal bases, in accordance with the UU PDP:

• ·Consent - you provide explicit consent when registering and agreeing to this policy.
• ·Contract performance - processing is necessary to deliver the service you have ordered (e.g. website hosting, payment processing).
• ·Legal obligation - processing is necessary to comply with applicable laws and regulations, such as tax obligations.
• ·Legitimate interest - for reasonable purposes such as system security and preventing misuse of the Platform, provided this does not override your rights.

3. How We Use Your Data

• ·To provide, manage, and improve the Platform service.
• ·To process payments and send transaction confirmations.
• ·To send important notifications regarding your account, payments, and subscription status.
• ·To provide technical support and customer service.
• ·To analyze usage for feature development and service improvement purposes.
• ·To comply with applicable legal obligations.

We do not use your Personal Data for any purpose beyond those listed above without obtaining your additional consent.

4. Sharing Data with Third Parties

We do not sell your Personal Data. We only share data under the following circumstances:

• ·Payment provider (Midtrans - PT Midtrans) - to process transactions securely.
• ·Cloud storage provider (Cloudflare R2) - storage for files and media you upload to the Platform.
• ·Google (sign-in) - if you choose to register/sign in using a Google account, we receive your name, email, and profile photo from that account.
• ·Email delivery provider (Resend) - to send transactional emails and account-related notifications.
• ·Domain registrar partner (Domix) - if you register a custom domain through the Platform, data required for domain registration is passed to this provider.
• ·Legal obligations - where required by applicable law or an order from a competent authority.

All third-party partners are bound by confidentiality agreements and may only use your data for its designated purpose. We do not transfer your Personal Data outside Indonesia except where necessary to deliver the service (for example, our cloud infrastructure provider), and in such cases we take reasonable steps to ensure the provider maintains an equivalent standard of data protection. The providers we use may change over time as the service evolves; we keep the list above updated to reflect the providers currently in use, and material changes will be notified as described in section 11 (Changes to This Privacy Policy).

5. Data Security

1. 5.1All data is transmitted using 256-bit SSL/TLS encryption.
2. 5.2Passwords are stored in encrypted (hashed) form and cannot be read by our team.
3. 5.3Access to User data is limited to personnel who need it for operational purposes.
4. 5.4We implement reasonable technical and organizational measures to prevent the loss, misuse, unauthorized access to, or alteration of your Personal Data.
5. 5.5In the event of a significant personal data breach, we will notify you no later than 3x24 (three times twenty-four) hours after becoming aware of the incident, in accordance with the requirements of the UU PDP.

6. Data Storage & Retention

1. 6.1Data for active accounts is retained for as long as you continue using Lokaspace's services.
2. 6.2Once an account is deactivated, your data remains stored in our systems until you request its deletion. You may request deletion of your data at any time using the contact details provided at the end of this policy.
3. 6.3Transaction data is retained for a longer period in accordance with applicable Indonesian tax and accounting obligations.
4. 6.4Data will be deleted or anonymized once its processing purpose has been fulfilled and no legal obligation requires further retention.

7. Your Rights Over Your Personal Data

In accordance with the UU PDP, you have the following rights over your Personal Data:

• ·Right to information - to know the purpose of the request, use, and accountability regarding your Personal Data.
• ·Right to access - to request a copy of the Personal Data we hold about you.
• ·Right to rectification - to update or correct inaccurate data.
• ·Right to erasure - to request deletion of your Personal Data, understanding that this may result in the closure of your account and loss of access to the service.
• ·Right to restrict processing - to request that we temporarily halt processing of certain data under reasonable circumstances.
• ·Right to withdraw consent - to withdraw consent previously given, at any time.
• ·Right to data portability - to request a copy of your data in a commonly used format for transfer to another service provider, to the extent technically feasible.
• ·Right to object - to object to the processing of your data for certain purposes, including marketing.
• ·Right to lodge a complaint - to submit a complaint regarding an alleged violation in the processing of your Personal Data to us, and/or to the relevant supervisory authority under the UU PDP where necessary.

To exercise any of the rights above, please contact us at [email protected]. We will respond within 14 business days of receiving a complete request. We may request identity verification first to protect your data from unauthorized access.

8. Cookies

Lokaspace uses cookies to maintain login sessions, store preferences, and analyze Platform usage. You may configure your browser to reject cookies, though some Platform features may not function optimally as a result.

9. Third-Party Services on Tenant Websites

Some Lokaspace features allow Tenants to install code from third-party services such as Google Ads, Meta Pixel, and TikTok Pixel. Use of these services is governed by each provider's own privacy policy, not this one. Tenants are responsible for ensuring their use of such third-party services on their own website complies with applicable data protection regulations.

10. Children's Data

Lokaspace's services are intended for business owners and are not directed at children under the age of 18. We do not knowingly collect Personal Data from children. If you become aware of any child's data having been uploaded without parental or guardian consent, please contact us so we can take prompt action.

11. Changes to This Privacy Policy

We may update this policy from time to time as our services or applicable regulations evolve. Significant changes will be communicated via your registered email or a dashboard notification at least 14 days before taking effect. The update date will always be shown at the top of this page.

12. Referral Partner (Manager) Data

Lokaspace runs a referral partner program ("Manager") that helps recommend Lokaspace to prospective Users and earns commission on the resulting referrals. For referral partners, we collect and store the following additional data, separate from the User/Tenant categories described above:

• ·The referral partner's name, email address, and phone number.
• ·Bank name, account number, and account holder name, used solely for the purpose of disbursing referral commissions.
• ·Commission history and withdrawal status for the referral partner.

Referral partner bank account data is used only internally for commission disbursement and is not shared with third parties except as necessary to carry out the fund transfer itself.

13. Contact Us

For questions, requests, or complaints regarding the privacy of your Personal Data, please contact: