Privacy Policy

Who We Are

This App is a business tool provided to our field employees, motorist/sales agents, and partners ("you") for work purposes. By logging in to the App, you acknowledge that you have read and agree to this Privacy Policy, as referenced on the App's login screen.

Questions, requests, or complaints about this policy or your personal data can be submitted through the contact channels published on the websites above, or directed to your company administrator who manages your TokoPlus account.

Scope of This Policy

This policy covers:

• Personal and device data collected by the App;
• Location data collected while the App is open and while it runs in the background;
• Photos, signatures, and documents you or the App capture;
• Data you enter about customers, shops, and business transactions;
• Data shared with TokoPlus ERP, POS, and related backend systems operated by us;
• Data shared with third-party service providers involved in operating the App.

1. Information We Collect

The App collects the following categories of information. Some of it is provided by you, some is generated automatically through use of the App, and some is entered by you about your business customers.

2. Location & Background Tracking (Required Disclosures)

Purpose: background location is collected to support your work duties — attendance geofence verification (at login and logout), visit tracking, navigation, route management, and supervision of field operations/fleet.

Data collected: latitude and longitude, speed and accuracy, timestamps, activity/status context, and the ID of the customer you are visiting where applicable. The transmission interval varies (approximately every 8 to 60 seconds depending on your speed), and data is queued on your device if there is no connectivity and sent later.

Use: location is associated with your user account and, where relevant, with the customer you are visiting; it is transmitted periodically to our servers and retained as described in Section 7.

Sharing: location is shared with your employer organization and, for map/navigation/routing functions, with Google as described in Section 5.

Your control: you can withdraw location permission at any time through your device settings (Android: Settings → Apps → TokoPlus Motorist → Permissions; iOS: Settings → Privacy & Security → Location Services). However, because location is essential, denying it will prevent login and normal use of the App. You may also log out of the App to stop the background service; logging out may be restricted while you are outside your assigned attendance area or while you still hold assigned inventory, as a matter of company policy enforced by the App.

Check-in data: when a motorist checks in to a customer, the App records the customer's coordinates and the motorist's coordinates (longitude and latitude) together with a timestamp and check-in metadata, for master-data enrichment, attendance verification, and transaction authenticity.

3. How We Use Your Information

We use the information described above to:

• Authenticate you and restore your session;
• Verify attendance against company-defined work areas at login and logout;
• Track location (including in the background) for visit management, navigation assistance, route optimization, and field-force/fleet supervision;
• Record check-ins, check-outs, and visits, including photo documentation;
• Process sales: create invoices, orders, and payments; generate QRIS, virtual account, or bank-transfer instructions; accept and verify payment proofs;
• Manage inventory: item lists, movements, handovers, returns, and QR/barcode scanning;
• Register and manage customers, including complying with identification requirements (KTP/NPWP) for business onboarding;
• Generate documents such as invoices (PDF) and enable printing;
• Operate, maintain, secure, and troubleshoot the App and underlying TokoPlus ERP/POS systems;
• Comply with legal obligations and enforce company policies.

4. How We Share Your Information

5. Third-Party SDKs and Technologies

Google's handling of data is governed by the Google Privacy Policy . We encourage you to review it.

6. Data Retention

• Account and activity data (location history, visits, check-ins, sales, inventory, customer records) are retained on our servers for as long as your account is active and thereafter for as long as needed for business, accounting, audit, dispute, and legal purposes, in accordance with our internal retention schedules and applicable law.
• Photos, signatures, and uploaded documents are retained as part of the associated business records.
• Offline location queue and session data on your device are cleared on successful logout.
• Local copies of session data may remain in device backups until the backup is refreshed; you can remove App data from your device settings at any time.

7. Data Security

We take reasonable technical and organizational measures appropriate to the risk, including:

• Transmission of data over HTTPS/TLS encrypted connections;
• Authentication via server-issued bearer tokens;
• Access controls on backend systems, limited to authorized personnel and your employer's authorized users;
• Separation of environment/configuration from public disclosure where feasible.

8. Your Choices and Rights

Depending on your jurisdiction and your relationship with your employer, you may have rights regarding your personal data, including rights to access, correct, delete, restrict, or object to certain processing, and to data portability.

• Profile changes: Account data is managed administratively; contact your company administrator to correct your account details.
• Permissions: You can manage camera and location permissions through your device settings at any time.
• Logout: Logging out stops active session use and the background location service, and clears locally stored session data.
• Deletion requests: The App does not include a self-service account-deletion feature. To request account closure or deletion of personal data held in TokoPlus systems, submit a request through your company administrator or via the contact channels in Section 11. Requests will be handled subject to legal retention obligations and legitimate business records we must keep.

If you are a resident of Indonesia, processing is carried out in accordance with Indonesian law, including Law No. 27 of 2022 on Personal Data Protection (UU PDP), where applicable. If you are located in the European Economic Area, the United Kingdom, or another region with similar laws, you may also exercise the rights described above and contact us using Section 11 details; where processing relies on consent (for example, certain camera/photo permissions on iOS), you may withdraw consent at any time in device settings.

9. Children's Privacy

The App is a business tool intended for use by adults in the course of employment or commercial activity. It is not directed to children, and we do not knowingly collect personal data from anyone below the age at which they can consent to data processing in their jurisdiction (e.g., under 18 in Indonesia, or under 16 in the EEA). If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

10. International Transfer

Data may be processed on servers and by service providers located in Indonesia or elsewhere. Where data is transferred across borders, we take reasonable steps to ensure an appropriate level of protection consistent with this policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or legal requirements. The updated version will be published at https://tokoplus.id/privacy-policy-motorist and, where appropriate, the version shown or linked in the App will be updated. The effective date at the top indicates the latest revision. Continued use of the App after an update constitutes acceptance of the revised policy.

12. Contact Us

For questions or requests about this Privacy Policy or your personal data: