Legal

Privacy Policy.

What we collect, why, where it lives, and what you can ask us to do with it.

Effective: 7 September 2026

1. Data controller

The controller for the information described here is Sayba Arc, Dusun Lalang Baru, Kec. Sintang, Kabupaten Sintang, Kalimantan Barat, Indonesia. Privacy questions go to sayba.help@gmail.com or through the contact page.

2. What we collect

  • Account data. Your email address and authentication credentials. Passwords are hashed by our authentication provider and never stored in readable form.
  • Profile data. Full name, WhatsApp number, domicile, gender, and occupation (optional), plus when you accepted the Terms.
  • Survey data you create. Photos, GPS coordinates with accuracy, capture timestamps, project definitions, and the field values you enter.
  • Transaction data. Order id, amount, method, status and time of payment. We never receive or store card numbers, CVV, PIN or OTP. Those are handled entirely by the payment gateway.
  • Messages you send through the contact form: name, email, organisation and the message. The sender's IP address is stored only as a hash, to limit abuse, never in its original form.
  • Technical data. Request and error logs needed to operate and secure the service.

3. Why we use it

  • To run the core service: storing your surveys and showing them back on the map, records and exports (performance of our contract with you).
  • To authenticate you and keep your data separate from other users (performance of contract).
  • To process payments and meet tax and bookkeeping obligations (legal obligation).
  • To answer your questions and support requests (performance of contract).
  • To maintain, secure and improve the service (our legitimate interests).

We do not use your data for advertising, do not profile you, and make no automated decisions with legal effect for you.

4. Location & camera

The app accesses your device's location and camera only while you capture a survey point, and only to write the coordinates and photo into that point. There is no background location tracking.

5. Storage & processing

Data is stored on Supabase (Postgres database and object storage) in an Asia-Pacific region. Photos live in a private bucket and are served only through short-lived signed links. Each account is isolated from every other. The web app runs on Vercel hosting.

6. Who receives data

We do not sell your data. It is shared only with:

  • The infrastructure providers that run the service (hosting and database).
  • The payment gateway, as far as needed to process transactions and refunds.
  • Authorities, where required by law.

7. Retention

  • Account and survey data are kept while your account is active.
  • After deletion, projects, surveys and photos are removed. Payment transaction records are retained for as long as tax and accounting rules require.
  • Contact-form messages are kept for at most 24 months.

8. Your rights

Under Law No. 27 of 2022 on Personal Data Protection you may access, correct, delete, restrict processing of, withdraw consent for, and obtain a copy of your data. Self-service export is available in the app at any time (CSV and Excel). For anything else, email sayba.help@gmail.com from your account address; we respond within 30 calendar days.

9. Security

All traffic runs over HTTPS. Database access is restricted at row level, photos sit in a private bucket, and the web app enforces a nonce-based Content Security Policy. No system is perfectly secure; if a personal-data breach puts you at risk, we notify you as the rules require.

10. Children

The service is not aimed at anyone under 18 and we do not knowingly collect children's personal data.

11. Changes

This policy may be updated. Material changes are notified by email or in the app before they take effect.

12. Contact

Sayba Arc, Dusun Lalang Baru, Kec. Sintang, Kabupaten Sintang, Kalimantan Barat, Indonesia. Email sayba.help@gmail.com, call +62 877-2191-6495.