Who we are
Konteks is business software operated by PT. Monago Teknologi Nusantara.
We are registered as an Electronic System Provider with Komdigi under number 010477.02/DJAI.PSE/03/2024.
This policy covers konteks.biz, the Konteks app, and the public pages of businesses that use Konteks.
Our role with your data
For the account data of business owners and their teams, Konteks is the data controller.
For customer data that a business manages in Konteks, that business is the controller.
Konteks acts as a processor and handles that data on the business’s instructions.
If you are a customer of a business, contact that business first about your data.
Data we collect
We only collect the data needed to run the service.
- Account data: name, email address, hashed password, and team role.
- Business customer data: name, email, phone number, gender, branch, interests, and notes.
- Customer activity: bookings, memberships, orders, transactions, and loyalty points.
- Conversation data: WhatsApp messages sent to a connected business number, and the replies.
- Data from Meta: when you connect WhatsApp Business, Facebook, or Instagram, we receive the data you authorize. For example account IDs, business name and number, and incoming messages.
- Technical data: IP address, device and browser type, pages viewed, visit source, and system logs.
- Payment data: transaction status and amount. Card numbers are handled directly by the payment provider and never stored by us.
How we use data
We use data to:
- Run the features you use, such as bookings, memberships, orders, websites, and WhatsApp replies.
- Create accounts, verify logins, and keep the service secure.
- Send service emails, such as booking confirmations, sign-in codes, and important notices.
- Show reports and visit sources to the businesses that use Konteks.
- Run the AI features you turn on, such as writing articles or answering customer messages.
- Meet legal obligations and respond to official requests from competent authorities.
Data from Meta is used only for the features you turn on, such as replying to messages and showing conversation history.
We do not sell personal data to anyone.
Legal basis
We process data under our service agreement with you, your consent, legal obligations, and legitimate interests.
Legitimate interests include keeping our systems secure and preventing misuse of the service.
Who receives data
We share data only with service providers that help us run Konteks.
They may use the data only for that purpose.
- Servers and storage: cloud providers for databases, files, and website hosting.
- Payments: Midtrans, to process payments from business customers.
- WhatsApp messaging: a WhatsApp gateway provider and Meta, when a business connects its number.
- Email: an email delivery provider.
- AI: AI model providers such as OpenAI and Anthropic, only for the AI features in use.
We may also disclose data when required by law or requested by a competent authority.
Transfers outside Indonesia
Some of our service providers, including AI providers, process data outside Indonesia.
We make these transfers with the safeguards required by the Personal Data Protection Law.
How long we keep data
Account and business data are kept while the account is active and as long as needed to run the service.
Data is deleted when the business owner requests deletion, except data we must keep by law.
We keep a record that a deletion took place as proof that the request was fulfilled.
Security
Data travels over encrypted connections (HTTPS).
Passwords are stored as hashes, and a business’s integration credentials are stored encrypted.
Access to data is limited by role, both within business teams and within the Konteks team.
If a personal data breach occurs, we notify affected parties within 3 x 24 hours.
Your rights
Under the Personal Data Protection Law, you have the right to:
- Be informed about how your data is processed.
- Access your data and request a copy.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent you have given.
- Object to decisions based solely on automated processing.
Send your request to privacy@konteks.biz.
We respond within 3 x 24 hours after verifying your identity.
Children’s data
Konteks is intended for businesses, not for children.
A business that processes children’s data must obtain consent from a parent or guardian as required by law.
Changes to this policy
We may update this policy. The date of the latest update is shown at the top of the page.
We announce important changes by email or in the app before they take effect.
Contact us
For questions or requests about personal data, contact privacy@konteks.biz.