Privacy Policy

1. Data Collection

We collect data you provide directly when you sign up for and use the AturKos service. The data we collect includes:

• Full name
• Email address
• Phone number
• Boarding house data (property name, address, room count, tenant data)

We may also automatically collect data such as IP address, device type, and service usage information for analytics and service improvement purposes.

2. Use of Data

The data we collect is used to:

• Provide and operate the AturKos service for you
• Send service-related communications, including notifications and updates
• Improve service quality based on usage patterns
• Respond to your questions and support requests
• Comply with applicable legal obligations

3. Data Storage

We store your data with strict security measures, including:

• Encryption of data in transit and at rest
• Storage on secure servers with restricted access
• Regular security monitoring
• Routine data backups to prevent data loss

Your data is retained for as long as your account is active or as needed to provide the service. After account deletion, data will be removed within 30 days unless we are required by law to retain it longer. Automatic receipt data follows the specific retention periods in section 8 below.

4. Sharing Data with Third Parties

We do not sell your personal data to third parties. We only share your data in the following situations:

• With your explicit consent
• To comply with applicable laws, regulations, or legal processes
• With third-party service providers who help us operate the platform (such as hosting and analytics providers), under strict confidentiality agreements
• To protect the rights, safety, or property of AturKos and its users

5. User Rights

As an AturKos user, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete data
• Right to erasure: You may request the deletion of your personal data from our systems
• Right to data portability: You may request your data in a structured, machine-readable format

To exercise the rights above, please contact us via email at halo@aturkos.id. We will respond to your request within 14 business days.

6. Google User Data Usage

AturKos uses Sign in with Google through Firebase Authentication (Google Cloud) to create accounts and authenticate you when signing in to the app. This section specifically explains how we access, use, store, and protect data received from Google APIs.

Google APIs and OAuth scopes we access:

• email — your Google account email address
• profile — basic profile information (name and profile picture)
• openid — unique Google account identifier (Google Account ID)

Data we receive from Google:

• Full name (display name)
• Email address
• Profile picture URL
• Google Account ID (unique UID from Google)

How we use this data:

• Creating your AturKos account
• Authentication and identity verification when signing in
• Displaying your identity (name and profile picture) inside the app

Data from Google APIs is not used for any purpose other than authentication and providing the AturKos service.

How data is stored:

• Authentication data is stored securely in Firebase Authentication (Google Cloud), encrypted in transit and at rest.
• AturKos does not store your Google account password. The authentication process is handled entirely by Google.
• Data from Google is not shared with any third parties.

Sharing data with third parties:

• Data from Google APIs is not shared with any third party.
• Data from Google APIs is not used for advertising of any kind.
• Data from Google APIs is not sold to anyone.

Compliance with the Google API Services User Data Policy:

AturKos's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Account Deletion

You may request deletion of your AturKos account at any time. We respect your right to control your personal data.

How to request account deletion:

• Send an email to halo@aturkos.id with the subject "Account Deletion Request".
• Include the email address of the Google account you use to sign in to AturKos so we can verify your request.

Data retention period:

• Apart from automatic receipt data covered by section 8, your data will be removed from our systems within 30 days after the deletion request is received and verified.
• Some data may be retained longer if required by applicable law (for example, financial records).

What gets deleted:

• All of your personal data (name, email, profile picture, phone number).
• Data received from Google APIs (Google Account ID, email, name, profile picture).
• Boarding house, tenant, payment, and expense data you have created.
• Google OAuth tokens are revoked so AturKos can no longer access your Google account.

8. Automatic Payment Receipts

When the feature is available for your account and plan, automatic receipt sending through WhatsApp only runs after you enable it. It is off by default for both new and existing accounts. It applies to new payments recorded after activation, including each installment, without automatically sending receipts for older payments.

For automatic receipts, we store a fixed copy of payment data (a snapshot): receipt identifiers and number, payment, room and tenant identifiers, revision and document renderer version, recording time, payment date, rental period, property name, room number, tenant name, transaction amount, amount due, cumulative payments and remaining balance for the period, and the paid or partially paid status at recording. Later installments do not change earlier snapshots. The snapshot and PDF exclude payment proof images or links, phone numbers, addresses, and the receipt access link.

We use the associated tenant's WhatsApp number to send a payment summary and receipt link through the WhatsApp provider. The summary includes the property name, room number, rental period, payment date and amount, payment status, and the remaining balance for partial payments. It excludes the tenant's name. Successful sending means we have verified confirmation that WhatsApp's server accepted the message. Device delivery information, if available, is recorded separately. We do not guarantee that the recipient receives or reads the message. The receipt documents the landlord's record, rather than bank verification of payment.

Anyone holding the receipt link can open and download the PDF without signing in or entering a verification code, including anyone who receives a forwarded link. Access lasts 30 × 24 hours from when we first observe verified WhatsApp acceptance confirmation, rather than when the payment is recorded or the link is opened. Before that confirmation, the link is unavailable. Resending an active link does not extend its lifetime. Manually renewing an expired link starts a new access period from the first acceptance confirmation for the new link.

We immediately revoke old link access when the payment is corrected or deleted, the recipient number changes, or the account is deleted. Corrections create a revised receipt that the landlord can only send manually; sending to a new number requires the landlord's confirmation. Revocation cannot recall messages or PDFs already downloaded or shared. Turning off automatic sending or downgrading a plan does not revoke links that are already active.

The AturKos backend stores snapshots and token access metadata, rather than PDF files in a document storage bucket. We generate the PDF from its snapshot on request and discard temporary PDF data when the request completes or fails. We retain the current revision snapshot while the payment exists, including after link expiry or revocation due to a number change. We delete old revision snapshots within 24 hours of revocation. Payment or account deletion blocks access immediately and removes all related snapshots and encrypted tokens within 24 hours.

We delete sanitized detailed delivery and audit metadata 90 days after the sending job reaches its terminal state. This metadata excludes message bodies, phone numbers, names, and URLs. Minimal status and access facts, such as acceptance and expiry times and revocation markers, remain while the payment exists to prevent duplicate sending and manage link lifetime. Account deletion also removes metadata linked to the account and tenants; those personal identifiers do not wait for the 90-day retention period.