Privacy Policy

Integrated ERP · Version 1.1 · effective 2026-10-13

1. Who we are

Integrated ERP ("the Service") is a business management application owned and operated by PT. Tri Solusi Neo Optima ("TSNO", "we", "us"), Sudirman 7.8 Tower Lantai 16 Unit 1-2, Jl. Jendral Sudirman Kav. 7-8, Jakarta Pusat 10220, Indonesia.

The Service is licensed to companies ("Customer Companies") and used by their employees and staff ("you"). Your account is created and administered by your employer, not by you — there is no public sign-up.

Your employer decides what is collected and why. Under Law No. 27 of 2022 on Personal Data Protection (UU PDP), your Customer Company is the Personal Data Controller and TSNO is the Personal Data Processor acting on its instructions. Where this policy says "we collect", it means we process on your employer's behalf.

Each Customer Company runs on its own separate database and file storage. Your data is not pooled with, or visible to, another company using the Service.

2. What we process

Data	When it is collected	Why
Name, email address, password (stored hashed)	When your employer creates your account	To sign you in and identify you
Role, permissions, menu access	Set by your employer	Decides what you may see and do
Language and theme preference	When you change them	To render the app the way you left it
Precise location (GPS)	Only when you press Clock In or Clock Out	To confirm you were at the assigned work location
Location accuracy, and whether the location was mocked	With the same button press	To detect falsified attendance
Attendance selfie	With the same button press, if your employer requires it	To confirm the person clocking in is you
Device identifier	On clock-in	Optional device binding, so one account cannot clock in from many phones
Delivery proof photo and recipient signature	When a driver completes a delivery	Evidence the goods were delivered
Leave, absence, overtime and cash-advance records, with any document you attach	When you submit a request	To process the request through your employer's approval chain
Employment and payroll data — position, schedule, salary components, bank account for transfers, tax identifiers	Entered by your employer's HR staff	To run payroll and statutory reporting
Attendance punch records from fingerprint terminals	When you use an attendance device	To build your attendance record
Biometric templates — fingerprint, face and palm templates, and the enrolment photo some terminals use	When you are enrolled on an attendance terminal	So your enrolment can be copied to your employer's other terminals and restored when a terminal is replaced
Devices on your employer's network — device name, IP and MAC address, Wi-Fi signal and data usage	Continuously, by your employer's routers and Wi-Fi access points, where your employer uses network monitoring	To run and secure the company network
Business records — customers, orders, deliveries, invoices, payments, stock	When you or a colleague fill in a form	These are your employer's operating records
IP address, browser/app user agent, timestamps, and a record of changes you make	Automatically, on sign-in and on each change	Security, and an audit trail of who changed what
Agreement record — which version of these documents you agreed to, when, from which IP address and browser or app	When you tick the agreement box at sign-in	Evidence of your consent

On biometrics. Fingerprint and face data are specific (sensitive) personal data under UU PDP. Attendance terminals send the Service your punch records — a device user number and a timestamp — and, when you are enrolled, the biometric templates the terminal made from your finger, face or palm. A template is a mathematical encoding, not an image of your fingerprint, but it is still biometric data. Templates are stored only in your employer's own database, are used only to enrol you on your employer's terminals, are visible only to staff your employer authorises, and are never shared with anyone else. You may ask your employer to have them deleted, and we delete them on your employer's instruction; you will then need to be enrolled again on each terminal.

On network devices. Where your employer uses the Service's network monitoring, its routers and Wi-Fi access points report the devices connected to the company network. If you connect a personal phone or laptop to that network, its name, addresses and usage appear in those reports. The content of your traffic is not recorded.

On location. The app never reads your location in the background. There is no background-location permission. Position is read only while the app is open and only at the moment you press the attendance button. Closing the app ends any access.

3. What we do not do

No advertising. We do not serve ads and we do not sell, rent or share your data with advertisers or data brokers.
No analytics or tracking SDKs. The app contains no analytics, crash-reporting, attribution or social-network SDKs, and no third-party tracker of any kind.
No profiling. We do not use your data for automated decision-making that produces legal effects for you.

4. Third parties

We keep these to a minimum. Today they are:

Hosting. The Service runs on servers located in Jakarta, Indonesia. Your data is stored in Indonesia.
Cloudflare, Inc. — DNS, network protection, and the small service that turns your company code into your company's server address at first launch. Cloudflare processes the network metadata of requests, including IP addresses.
OpenStreetMap Foundation — the attendance screen draws a map using map tiles from tile.openstreetmap.org. Requesting those tiles discloses your device's IP address and the approximate area being displayed to the OpenStreetMap Foundation. Your exact coordinates and your identity are not sent.
Google Play and Apple App Store — distribution of the app only.
Email delivery — notification email is sent from our own mail server.
Network monitoring — where your employer uses it, device and Wi-Fi data are read from TSNO's own network-monitoring service and Wi-Fi controller, which run on the same servers in Indonesia. They are not an outside party.

We do not transfer your personal data outside Indonesia except as an unavoidable consequence of the network services above.

5. Data stored on your device

The company code you entered, so you are not asked again.
Your email address, only if you tick "Remember me". Your password is never stored.
A sign-in token, held in the device's protected storage (iOS Keychain / Android Keystore).
Your language and theme preference, and photos temporarily queued for upload.

All of it is removed when you uninstall the app.

6. Retention

Account records are kept while your account is active and for as long as your employer requires afterwards.
Attendance, leave and payroll records are your employer's employment records and are retained under Indonesian employment and tax law, which generally requires several years.
Delivery evidence, orders and invoices are your employer's commercial and tax records and are retained accordingly.
Biometric templates are kept while you are enrolled with your employer, and are deleted on your employer's instruction — for example when you leave, or when you ask.
Network device data is kept for up to 90 days.
Audit logs are retained for security and dispute resolution.
Agreement records are kept for as long as needed as evidence of consent.

Records that belong to the Customer Company survive the deletion of your individual account.

7. Security

All traffic is encrypted in transit (HTTPS/TLS).
Passwords are stored hashed, never in readable form.
Access is controlled by role and by page-level permission; you see only what your employer grants you.
Each Customer Company is isolated in its own database and file storage.
Uploaded files — attendance selfies, delivery photos, signatures and supporting documents — are served only to signed-in users authorised to see the record they belong to.
Changes to records are written to an audit trail identifying the user and the time.

No system is perfectly secure. If a personal data breach occurs, we will notify the affected Customer Company so it can meet its obligation to inform you and the authorities within the time UU PDP requires.

8. Your rights

Under UU PDP you may ask to access your personal data, correct it, delete it, withdraw consent, object to processing, and obtain a copy of it.

Because your employer is the Controller, please address requests to your employer first — they hold the relationship and can act immediately. If you cannot reach them, or they do not respond, write to us at [email protected] and we will act on the Controller's instruction and assist as the law requires.

9. Account deletion

Accounts are created and closed by your employer; the app has no self-service sign-up and therefore no self-service deletion. To have your account closed and your personal data deleted, contact your employer's system administrator, or write to [email protected] and we will forward the request to the Controller and act on their instruction.

Note that records which belong to the Customer Company — attendance history, payroll entries, orders, deliveries and invoices you created — are the company's records and are retained even after your account is closed.

10. Children

The Service is a workplace tool for employees. It is not directed at children and we do not knowingly process the data of anyone under 18.

11. Changes

We may update this policy. The version and effective date are shown at the top. Where a change is material, your employer will be notified, and you will be asked to agree to the new version the next time you sign in.

You are asked to tick your agreement to this policy and to the Terms of Service every time you sign in. The box is never ticked for you. The first time you agree to a version, we record the version, the time, and the IP address and browser or app you used.

12. Contact us

PT. Tri Solusi Neo Optima Sudirman 7.8 Tower Lantai 16 Unit 1-2, Jl. Jendral Sudirman Kav. 7-8, Jakarta Pusat 10220 Email: [email protected] · Web: https://tsno.co.id