1. Introduction
Prospek ("we", "our", or "us") is operated by PT SAHABAT DALAM INOVASI, a company registered in Indonesia, with its address at Bellezza BSA 1st Floor Unit 106, Jl. Letjen Soepeno, Permata Hijau, Kel. Grogol Utara, Kec. Kebayoran Lama, Kota Adm. Jakarta Selatan, DKI Jakarta 12210. We are the data controller for account and website data, and a data processor for the businesses that use Prospek, as explained in Section 9.
We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform ("the Service").
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
2. Information We Collect
We collect information that you provide directly to us when you use our Service:
Personal Information: We may collect personal information such as your name, email address, phone number, organization name, and WhatsApp account information.
Usage Information: We may collect information about how you use the Service, including interaction with the Service, messages sent and received through the Service, customer segments and labels you create, reminders and follow-ups you set.
Technical Information: We collect data about devices used to access the Service, including IP address, operating system, and browser type.
3. How We Use Your Information
We use the information we collect to:
Providing Services: To provide, maintain, and improve our Service.
Transaction: To process transactions and send related information.
Communication: To send you technical notices, updates, security alerts, and support messages
Improvement: To develop new products and services, using account and website data only (see "Messaging data" below).
Security: To protect the security and integrity of our services.
Legal Obligations: To comply with legal obligations and regulations.
Messaging data: The purposes above do not apply to message content, contact details or other data received from WhatsApp or Instagram on behalf of a business. We use that data only to provide the Service to the business that connected the account, as described in Section 9. We do not use it to develop unrelated products, for analytics or marketing by third parties, for advertising, or to build profiles of individuals.
Legal basis: Under Indonesia's Personal Data Protection Law (UU No. 27/2022), we process personal data on these bases: performance of our contract with you (account holders); compliance with legal obligations (billing and tax records); and our legitimate interests in security and fraud prevention. For personal data of a business's customers that we process in Prospek, we act on that business's instructions as its data processor, and the business is responsible for the legal basis of that processing.
4. Use of Third-Party Services
We work with trusted third-party providers to deliver key functionalities, such as:
Payment Processing: Managed through a third-party payment processor.
Hosting and Storage: Data is hosted on Microsoft Azure.
Messaging Platforms: Messages are delivered through the messaging platforms you connect, such as Meta (WhatsApp and Instagram).
Email Delivery: Service and account emails are sent through an email delivery provider.
Error Monitoring: We use an error monitoring provider to detect and fix technical problems.
These third parties are contractually obligated to handle user data securely and in compliance with applicable data protection laws. Their privacy practices can be reviewed on their respective websites.
Transfers outside Indonesia: Data is stored and processed outside Indonesia, including in Singapore (Microsoft Azure, Southeast Asia) and by Meta and our other service providers. We use providers bound by written data-protection terms.
5. Sharing of Data
We do not sell user data. We may share data with:
Service providers to facilitate operations.
Authorities when required by law or legal obligations.
Third parties in connection with business mergers, acquisitions, or similar events.
6. Data Security
We implement appropriate technical and organizational measures to maintain the safety of your personal information. However, no Internet-based service is completely secure. We cannot guarantee the security of your personal information transmitted to our Service.
If a personal data breach affects data we hold for you, we will notify you without undue delay and in time for you to meet your legal deadlines, and, where we are the controller, we will notify affected individuals and the authority as required by law.
7. Data Retention
We keep account and workspace data, including conversations from connected channels, while your account is active. If your subscription ends or you close your account, we delete the workspace data, including message content, contacts and channel connections, within 90 days. Backup copies are overwritten within 7 days after deletion. System and error logs are deleted within 30 days. We keep billing and tax records for as long as Indonesian law requires, and records needed to resolve a dispute until it is resolved.
8. Your Rights
Under Indonesian data protection laws, you have rights including:
The right to access – You have the right to request copies of your personal data.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to information – You have the right to know who we are, the legal basis and purpose of our processing, and who is accountable for it.
The right to withdraw consent – Where we rely on your consent, you may withdraw it at any time.
The right to object to automated decisions – You have the right to object to decisions based solely on automated processing that significantly affect you.
The right to restrict or suspend processing – You have the right to ask us to restrict or suspend processing of your personal data.
The right to claim compensation – You have the right to sue for and receive compensation for a breach of the rules on processing your personal data.
The right to data portability – You have the right to obtain and reuse your personal data in a commonly used format, where applicable.
To exercise these rights, email us at legal@prospek.app. We respond to verified requests to rectify, access, restrict, or stop processing within 3 × 24 hours (72 hours), and we notify you when a deletion is complete. For data we process on behalf of a business, we handle it as described on our Data Deletion page and may also refer it to that business.
9. WhatsApp Business Platform and Meta Integrations
If you connect an Instagram account or, where offered, a WhatsApp Business Platform account to Prospek, we process data received through the WhatsApp Business Platform and Meta's related APIs on your behalf:
Data we process: message content (text and media such as images, documents, audio, and video) sent and received through your connected account; phone numbers and WhatsApp profile or contact names of the people who message you; message delivery status and timestamps; and the identifiers of your WhatsApp Business Account and business phone number.
Purpose: only to provide the Service to you, namely showing conversations to your team, sending replies, reminders, and broadcasts you request, and organizing contacts. We do not sell this data or use it for advertising.
Sharing with Meta: messages are delivered through WhatsApp Business Platform, which is operated by Meta Platforms. Meta acts as the platform provider and processes this data under its own terms and privacy policy; we act as your service provider (data processor) for message content and contact data you handle in Prospek.
Retention: we keep this data while your account is active, including after you disconnect Prospek from your WhatsApp or Instagram account, so your team keeps its conversation history. Deleting a channel in Prospek permanently deletes its conversations and messages; contacts remain until you delete them or your workspace is deleted. Disconnecting Prospek from your WhatsApp or Instagram account stops new messages but does not delete data already in Prospek. To delete everything, email legal@prospek.app. After your subscription ends or your account is closed, we delete workspace data as described in Section 7, except for data we must keep to meet legal obligations.
Data deletion: you can request deletion of the data Prospek holds from your connected accounts at any time. See our Data Deletion page for the steps and timeline, or email legal@prospek.app.
10. Updates to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date at the top of this Privacy Policy.
11. Contact
If you have any questions about this Privacy Policy, please contact us:
Operator: PT SAHABAT DALAM INOVASI, Bellezza BSA 1st Floor Unit 106, Jl. Letjen Soepeno, Permata Hijau, Kel. Grogol Utara, Kec. Kebayoran Lama, Kota Adm. Jakarta Selatan, DKI Jakarta 12210.
Privacy, data deletion, and account closure requests: legal@prospek.app
General support: contact@prospek.app