This policy explains how RABSmart (operated by Andaru (individual)) collects, uses, and protects your personal data, with reference to Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
1. Data we collect
- Account data: name, email address, password (stored as a non-readable hash), account type (individual/company), and company name if any.
- Project data: RAB Excel files you upload, matching results, prices, and RAB version history.
- Transaction data: order number, amount, status, and payment time. Card/bank data is processed directly by Midtrans and never stored by us.
- Technical data: IP address, browser type, and server access logs for security and troubleshooting.
2. How we use data
- To provide the service: process files, compute analyses, and provide downloads.
- To manage accounts, security, and company team features.
- To process payments and send service emails (e.g. password resets and receipts).
- To improve the AHSP catalog anonymously, without sharing your internal prices with other users.
- To comply with legal obligations.
3. Third parties
We share data only as needed with the following providers to operate RABSmart:
- Midtrans — payment processing.
- Resend — service email delivery (e.g. password resets).
- Cloudflare — DNS and email forwarding for the support address.
- The server (VPS) provider hosting the application and database.
4. Cookies and local storage
We use browser local storage to keep you signed in and a NEXT_LOCALE cookie to remember your language. We do not use advertising cookies.
5. Storage and security
- Data is stored on servers we manage and is accessible only to authorized personnel.
- All connections are encrypted with HTTPS; passwords are hashed with bcrypt.
- Account data is kept while the account is active. After closure, data is deleted or anonymized within a reasonable time, except transaction records we must keep for accounting and legal purposes.
6. Your rights
You may request access to, correction of, or deletion of your personal data, and withdraw consent to processing. Send requests to rabsmartsupport@gmail.com; we respond within 3 business days.
7. Minors
The service is intended for professional users aged 18 and over.
8. Changes to this policy
This policy may be updated. The latest version and its update date are always available on this page.
9. Contact
Privacy questions: rabsmartsupport@gmail.com.