Privacy Policy

1. Introduction

Welcome to Sawaka, a product of PT Bahas Technology Solution ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our point of sale platform and related services.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, phone number, business name, and billing address when you register for an account.
• Transaction Data: Sales records, payment information, product inventory, and customer transaction history processed through our platform.
• Usage Data: Information about how you interact with our services, including access times, pages viewed, and features used.
• Device Information: Hardware model, operating system, browser type, IP address, and device identifiers.
• Business Data: Inventory records, employee information, supplier details, and other business-related data you input into the platform.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our point of sale services.
• Process transactions and send related information, including purchase confirmations and invoices.
• Send administrative information, such as updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze usage trends to improve user experience.
• Detect, prevent, and address technical issues and fraudulent activity.
• Comply with legal obligations and enforce our terms of service.

4. Data Sharing and Disclosure

We may share your information in the following situations:

• Service Providers: We may share your data with third-party vendors who perform services on our behalf, such as payment processing, data hosting, and analytics.
• Legal Requirements: We may disclose your information where required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

We do not sell your personal information to third parties.

5. WhatsApp Messaging

Sawaka lets businesses that use our platform ("Merchants") connect their own WhatsApp Business Account through the official WhatsApp Business Platform (Cloud API) operated by Meta Platforms, Inc. When a Merchant connects WhatsApp, the following applies:

• What we send: Transactional messages on the Merchant's behalf to the Merchant's own customers — for example order confirmations, order-ready or pickup notices, delivery updates, invoices, and payment reminders. Sawaka sends from the Merchant's WhatsApp number, not a Sawaka number, except for messages Sawaka sends to its own customers about their Sawaka account.
• Data we process: The recipient's phone number and name, the message content and template parameters (such as order number, amount, or status), message delivery and read statuses, and replies the recipient sends back. If a Merchant connects an existing WhatsApp Business app number, the contacts and recent chat history on that number may be synchronised into the Merchant's Sawaka account so conversations remain in one place.
• Credentials: Access tokens and account identifiers that Meta issues for the connected WhatsApp Business Account are stored encrypted and used only to send and receive messages and to manage message templates for that Merchant.
• Sharing with Meta: To deliver messages, the recipient's phone number and message content are transmitted to Meta, which processes them under the WhatsApp Business Terms and WhatsApp Privacy Policy. We do not use WhatsApp data for advertising and do not sell it.
• Consent and opting out: Merchants are responsible for obtaining their customers' consent to receive WhatsApp messages. Recipients can stop messages at any time by replying STOP or BERHENTI; we record the opt-out and stop sending automated messages to that number.
• Retention: Message logs are kept while the Merchant's account is active so the Merchant can see what was sent and delivered. When a Merchant disconnects WhatsApp, we delete the stored access token immediately; message logs follow the retention and deletion rules in this policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed, we will securely delete or anonymize it.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us using the information provided below. For deletion requests, see Section 9.

9. Data Deletion

You can ask us to delete your data at any time:

• Merchants: Email admin@bahas.tech from your account's registered email with the subject "Data Deletion Request" and your business name. We delete your account and business data, including connected WhatsApp credentials and message logs, within 30 days, except records we must keep by law (such as tax records). Disconnecting WhatsApp in your settings deletes its access token immediately.
• Customers of a Merchant: If you received a WhatsApp message sent through Sawaka on a business's behalf, reply STOP or BERHENTI to stop further messages. To have your phone number and message history deleted, contact that business, or email admin@bahas.tech with your phone number and the business name; we will coordinate the deletion with the business within 30 days.
• Facebook / Meta login data: If you connected WhatsApp to Sawaka through Meta, you can also remove Sawaka's access in your Meta Business settings (Business Settings → Integrations → Connected apps). We then delete the associated tokens.

We confirm by email once the deletion is complete.

10. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your activity on our platform. Cookies help us improve your experience, analyze usage patterns, and deliver relevant content. You can control cookie preferences through your browser settings, though disabling cookies may affect the functionality of our services.

11. Third-Party Services

Our platform may contain links to or integrate with third-party services, such as payment gateways, analytics providers, and the WhatsApp Business Platform operated by Meta (see Section 5). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: