PT Sentra Solusi Automa

1. Legal Framework

This Policy is issued pursuant to and complies with:

• UU No. 27 Tahun 2022 — Undang-Undang Perlindungan Data Pribadi (PDP Law)
• PP No. 71 Tahun 2019 — Penyelenggaraan Sistem dan Transaksi Elektronik
• Permenkominfo No. 20 Tahun 2016 — Perlindungan Data Pribadi dalam Sistem Elektronik
• UU No. 11 Tahun 2008 jo. UU No. 19 Tahun 2016 — Informasi dan Transaksi Elektronik (ITE)
• ISO/IEC 27001 — Information Security Management (applicable standards)

2. Data We Collect

We collect data in the following categories depending on the services you use:

3. Purpose of Processing

4. Data Retention

We retain data only as long as necessary for the stated purpose or as required by law:

• Active account data — retained for the duration of the contractual relationship + 5 years (Indonesian tax and commercial record requirements)
• IoT sensor / operational telemetry — 2 years hot storage; up to 7 years cold archive for carbon audit trail compliance (VERRA, SRN)
• Carbon emission reports — minimum 10 years to support IFRS S2 and GHG Protocol audit requirements
• Security logs — 1 year, then deleted
• Marketing communications — until consent is withdrawn

5. Your Rights (UU PDP 2022)

Under Indonesia's Personal Data Protection Law you have the right to:

To exercise any right, email help@automa.id with your request. We respond within 14 business days. We may require identity verification before processing requests.

6. Security Measures

We implement technical and organisational measures including: TLS 1.3 encryption in transit; AES-256 encryption at rest; role-based access controls; regular penetration testing; and audit logging. IoT device communications are secured via certificate-based mutual TLS authentication. In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframe required by applicable law.

7. Third-Party Sharing & Sub-processors

We share data only as necessary and with appropriate safeguards:

• TÜV Nord — carbon emission verification (measurement & verification under MnV standards)
• Carbon Ethics / Ecoxyztem — carbon offset registry and MRV system integration
• Telkom Group — infrastructure and connectivity services under data processing agreement
• Cloud infrastructure providers — hosting within Indonesian data centres where available, or with contractual adequacy protections
• Legal / regulatory bodies — where required by Indonesian law or court order

We do not sell your personal data to third parties.

8. Changes to This Policy

We may update this Policy when required by law or to reflect changes in our services. Material changes will be notified by email or in-platform notification at least 30 days before taking effect. The current version and effective date are always displayed at the top of this page.

Questions about this policy or your data? Contact our Data Protection team.

1. Acceptance of Terms

By registering an account, accessing the platform, or deploying IO Track hardware devices, you agree to be bound by these Terms of Service ("Terms"). If you are entering into these Terms on behalf of a company or legal entity, you represent that you have the authority to bind that entity. If you do not agree to these Terms, do not use our services.

2. Services

Automa provides the following services (collectively, the "Services") under a Software-as-a-Service (SaaS) model registered as a Penyelenggara Sistem Elektronik (PSE) with Kementerian Komunikasi dan Informatika:

Automa reserves the right to modify, suspend, or discontinue any feature of the Services with 30 days' prior notice, except where required urgently for security or legal compliance.

3. Customer Obligations

You agree to:

• Provide accurate registration information and keep it current
• Maintain the confidentiality of your account credentials; you are responsible for all activity under your account
• Use the Services only for lawful purposes and in compliance with all applicable Indonesian laws and regulations
• Not reverse-engineer, decompile, or attempt to extract the source code of the platform software
• Not use the Services to infringe any third-party intellectual property rights
• Not interfere with or disrupt the integrity or performance of the Services or their underlying infrastructure
• Obtain all necessary consents from your employees and drivers before deploying vehicle tracking and monitoring devices
• Ensure carbon emission data submitted through the platform is accurate to the best of your knowledge

4. Intellectual Property

The following intellectual property is owned by PT Sentra Solusi Automa or Alfonsus Arista Tefa (founder) and protected under Indonesian and international IP law:

Your data remains your property. You grant Automa a limited, non-exclusive licence to process your data solely to provide the Services. Automa may use anonymised, aggregated data for platform improvement and industry benchmarking.

5. Payment & Subscription

• Subscription fees are billed in Indonesian Rupiah (IDR) unless otherwise agreed in writing
• Invoices are due within 30 days of issue unless your subscription agreement specifies otherwise
• Late payments accrue interest at 2% per month from the due date
• All prices are exclusive of VAT (PPN) at the prevailing Indonesian rate
• Hardware purchases (IO Track devices) are subject to a separate Hardware Agreement and carry a 12-month warranty against manufacturing defects
• Automa reserves the right to suspend Services for non-payment after 14 days' written notice

6. Limitation of Liability

To the maximum extent permitted by applicable law:

• Automa's total aggregate liability for any claim arising under these Terms shall not exceed the fees paid by you in the 12 months preceding the claim
• Automa shall not be liable for any indirect, incidental, special, or consequential damages, including loss of profit, revenue, or data
• Carbon emission calculations are provided for informational and reporting purposes. Customers are responsible for the accuracy of input data. Automa does not accept liability for regulatory penalties arising from erroneous customer-supplied data
• GPS tracking accuracy is subject to device hardware and satellite coverage limitations; Automa does not warrant uninterrupted or error-free data

Nothing in these Terms limits liability for fraud, gross negligence, or matters that cannot be limited by law.

7. Governing Law & Dispute Resolution

These Terms are governed by the laws of the Republic of Indonesia. Any dispute arising out of or in connection with these Terms shall be resolved first through good-faith negotiation within 30 days. If unresolved, disputes shall be submitted to the Badan Arbitrase Nasional Indonesia (BANI) in Jakarta for binding arbitration under its rules, conducted in Bahasa Indonesia. Nothing prevents either party from seeking urgent injunctive relief from a competent Indonesian court.

8. Changes to Terms

We may update these Terms from time to time. Material changes will be notified by email or in-platform notice at least 30 days before becoming effective. Continued use of the Services after the effective date constitutes acceptance of the revised Terms.

For contract matters, enterprise agreements, or legal notices:

help@automa.id

PT Sentra Solusi Automa · Jl. Melati XIII D No. 501, Baturan, Colomadu, Karanganyar, Jawa Tengah 57171 · Indonesia