Privacy Policy
Last updated: 3 July 2026
This Privacy Policy explains how Melacak (“Melacak”, “we”, “us”), operated by an individual based in Indonesia, collects, uses, and protects personal data when you use Melacak. We handle personal data in line with Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, “UU PDP”). By using Melacak, you agree to this Policy.
1.Our role: controller and processor
- For your own account and profile data (such as your name, email, and billing information), we act as the data controller.
- For the business data you enter and the information you upload about your own customers, we act as a data processor on your behalf. You are the controller of that data and are responsible for having a lawful basis to collect and use it.
2.Data we collect
- Account and profile data — your name, email address, business name, and contact details. Sign-in is managed by our authentication provider (Supabase); we do not store your password in readable form.
- Billing data — your subscription status and payment records. Card payments are processed by Stripe; we do not store your full card number.
- Business and operational data — the products, stores, shipments, sales, settlements, inventory, and orders you record in Melacak.
- Customer data you upload — information you enter about your own customers, such as their name and contact details, so you can manage sales and consignment with them.
- Marketplace data — if you connect Shopee, we access order, store, and product information from your Shopee account to sync it into Melacak.
- Usage and device data — basic, largely aggregated analytics about how the app is used (for example pages viewed, approximate location by IP, browser, and device type), collected through Vercel Analytics.
- Cookies and local storage — used to keep you signed in, remember preferences (such as language and theme), and cache data on your device for performance.
3.How we use data
- to provide, operate, and maintain the Service;
- to process subscriptions and payments;
- to provide customer support and respond to your requests;
- to secure the Service and prevent fraud or abuse;
- to understand and improve how the Service is used;
- to comply with legal obligations.
4.Legal bases
We process personal data where we have a lawful basis under the UU PDP, including: performance of our contract with you (to provide the Service), your consent (which you may withdraw), our legitimate interests (such as securing and improving the Service), and compliance with legal obligations.
6.International data transfers
Some of our service providers store or process data on servers outside Indonesia. Where data is transferred internationally, we take reasonable steps so that it remains protected consistent with this Policy and the UU PDP.
7.Data retention and deletion
We keep personal data for as long as your account is active and as needed to provide the Service. When you request account deletion, your account is deactivated and remains recoverable for 30 days; after that period it and its associated data are permanently deleted from our active systems. We may retain limited records where required for legal, tax, or accounting purposes.
8.Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and database row-level security so each business can only access its own data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9.Your rights
Subject to the UU PDP, you have the right to access, correct, and update your personal data; to request its deletion; to restrict or object to certain processing; to request a copy of your data; and to withdraw consent. Many of these can be done directly in the app. To make a request, contact us at support@melacak.app. We may need to verify your identity before responding.
10.Requests about your customers’ data
Where we process data about your customers on your behalf, you are the controller of that data. If one of your customers asks us to access or delete their data, we will refer the request to you and support you in responding to it.
11.Children
Melacak is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 18.
13.Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email. The “effective date” at the top shows when it was last updated.
14.Contact
For any privacy question or to exercise your rights, contact us at support@melacak.app.