Privacy Policy

Introduction

TokoPlus is a public platform that serves two types of users: Agents (dropshippers) and Motorists (field sales or delivery personnel). The application is operated by our company and is available to any individual or business that registers and uses the service.

The Agent side functions as a dropshipper, providing products to motorists. Agents also have access to a Cashier system and Sales Order management. Agents can transfer products to motorists directly through the platform.

The Motorist side is used for field activities, including customer visits, check-ins, and operational reporting. When a motorist checks in to a customer, the application records the customer’s longitude and latitude as well as the motorist’s own longitude and latitude. This data is used to enrich our master customer database and to verify field operations.

By accessing or using this application, you acknowledge and agree to the collection, processing, storage, and use of personal data in accordance with this Privacy Policy and applicable laws and regulations in Indonesia, including regulations relating to Personal Data Protection.

1. Information We Collect

We collect and process various types of personal, operational, and location data necessary for the functioning of the platform, for both Agents and Motorists.

Agent & Motorist Personal Data

Full name, phone number, email address, residential address, identity information, employment/business information, and account credentials.

Customer Data

Customer name, KTP/NIK number, NPWP, address, contact person information, estimated purchasing capability, and other sales-related information.

Payment Information

QRIS payment data, virtual account details, bank transfer information, and proof of payment uploaded through the application. Also includes cashier transactions and sales order payments.

Usage & Device Data

Device information, IP address, browser type, operating system, activity logs, access times, and application diagnostic information.

2. Location Tracking & Check-In Data

Important: This application collects geolocation data from Motorists during active operational work sessions, including when the application is running in the background. Additionally, when a Motorist performs a customer check-in, the application records both the customer’s location and the Motorist’s location (longitude and latitude) for master data purposes.

Background location access is used only after the Motorist performs daily clock-in and starts operational activities. Location tracking automatically stops after the Motorist performs clock-out or logs out from the application.

The application periodically collects location data during operational activities to support field sales operations, customer visit verification, route monitoring, attendance validation, and transaction authenticity.

Check-in data collection: When a Motorist checks in to a customer, we capture:

Customer’s longitude and latitude (based on the customer’s registered address or the device’s location at the time of check-in)
Motorist’s longitude and latitude (captured from the Motorist’s device)
Timestamp and check-in metadata for audit and master data enrichment

This location and check-in data is used for:

Enriching our master customer database with accurate geolocation data
Monitoring field operational activities and work attendance
Validating navigation routes and assigned customer visits
Supporting customer check-in/check-out and transaction verification
Security, audit, fraud prevention, and operational accountability purposes

3. How We Use Your Information

We use collected information for operational, business, and platform purposes, including but not limited to:

Providing and maintaining the platform for Agents and Motorists
Managing customer, sales order, and dropshipping data
Facilitating product transfers between Agents and Motorists
Verifying transactions and payment activities (including cashier systems)
Monitoring field operations and Motorist productivity
Enriching master customer data with check-in locations
Preventing fraud, unauthorized access, or misuse
Maintaining security, audit logs, and compliance records

4. Payment Information

The application may process payment-related information through methods such as:

QRIS

Virtual Account

Bank Transfer

Payment information and proof of payment may be stored for transaction verification, reconciliation, audit, and compliance purposes. Agent cashier and sales order transactions are also recorded for operational and financial tracking.

5. Camera Access

This application may request access to the device camera for operational purposes, including:

Capturing proof of bank transfers or payments
Uploading supporting transaction documentation
Operational verification purposes (e.g., check-in photos)

Camera access is used only when required by the application features and with user permission granted through the device settings.

6. Data Security

We implement administrative, technical, and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, misuse, or destruction.

Security measures may include encryption, access restrictions, authentication systems, firewalls, activity logging, and secure data storage practices.

We continuously improve our security standards and internal controls.

7. Sharing of Information

Personal data collected through this application is intended for internal operational use by our company and will not be sold to third parties. However, as a public platform, certain data may be visible to other users (e.g., product listings, basic profile information) as necessary for the service.

Information may be shared under the following conditions:

Platform Operations: Data may be accessed by authorized departments, administrators, supervisors, finance teams, or management personnel as necessary for operational purposes, including master customer data enrichment.

Service Providers: Certain trusted third-party providers such as payment gateways, hosting providers, or IT infrastructure providers may process data on our behalf under confidentiality obligations.

Legal Compliance: Data may be disclosed where required by applicable law, regulation, court order, or government authority.

8. Your Rights

Subject to applicable Indonesian laws and company policies, users may have the right to:

Access Data

Correct Data

Delete Data

Data Protection

Contents