Privacy policy
This policy explains which data Toko Aksara and this website collect, how we use it, and your rights. CV. Aksara Karya Digital is the data controller where described below.
Our two roles
We control seller account data such as names, email addresses, phone numbers, and admin usage records.
You control buyer data in your store, including names, addresses, emails, and order histories. We process that data on your behalf.
Data we collect
From sellers: names, email addresses, WhatsApp numbers, store names, and communications with us.
From the system: admin activity logs, IP addresses, and browser types for security and troubleshooting.
From this website: aggregate visit statistics without tracking cookies or personal identifiers.
Third-party processors
Payment providers process buyer transactions; shipping providers calculate rates and book couriers; transactional email providers send order emails. Each receives only the data needed for its task.
Retention
Store data is kept during the subscription and for 30 days after cancellation.
Buyer chat messages follow the service's applicable retention limit and are then deleted.
We retain admin activity logs for security and audits.
Your rights and buyers' rights
Under Indonesia's Personal Data Protection Law No. 27 of 2022, you may request a copy, correction, or deletion of your data.
Buyers can download and delete their own account data from their store account.
Send data requests to aksr.kry@gmail.com.
Security
Store data is separated at database level so another store cannot access your orders or customers.
All admin accounts require two-factor authentication. An account is temporarily locked after ten failed sign-in attempts.