1. Overview
This Privacy Policy explains how PT. Laci Pos Indonesia (“Laci POS”, “we”, “us”) handles two distinct kinds of data: (a) the contact details you submit through this marketing site when you reach out about Laci POS, and (b) the operational data processed by a Laci POS instance once deployed for your business. These are handled very differently, as explained in Sections 2 and 4 below.
2. Information We Collect
When you submit an inquiry or contact form on this site, we collect only what you give us:
- Your business name
- Your contact name
- Your email address
- Your phone number (optional)
- Which package you're interested in (Basic, Plus, or Business)
- Any message you include
This information is stored in our database (hosted on Supabase) and is used solely to build and follow up on your inquiry. We do not run advertising trackers or sell this information to third parties.
3. How We Use Inquiry Data
Inquiry data is used to respond to your request, prepare a quote, schedule onboarding, and maintain our internal record of active clients and contracts (server, domain, package, and contract dates). We do not use it for unrelated marketing without your consent, and we do not share it with third parties except service providers (such as our database host) strictly necessary to operate this site.
4. End-Customer Transaction Data
Once you deploy Laci POS, the catalog, sales, customer, and staff data your business generates is stored entirely on your own dedicated server — never on this marketing site or its database. We do not access this data except to provide support you have requested, perform routine backups, or as required by law.
If your business collects personal data from your own end customers (for example, loyalty program details) through Laci POS, you are the data controller for that information under applicable law, and you are responsible for your own compliance and disclosures to your customers.
5. Data Security
Every dedicated install is hardened by design:
- No public inbound port — your server is reachable only via a Cloudflare Tunnel.
- Encrypted, automated database backups on a regular schedule.
- Rate-limiting and lockout on login attempts.
- Administrative tooling (e.g. API documentation) disabled in production.
7. Your Rights
Under Indonesia's Law No. 27 of 2022 on Personal Data Protection (“UU PDP”), you have the right to access, correct, or request deletion of the inquiry data we hold about you, and to object to its further processing. To exercise any of these rights, contact us using the details in Section 8.
8. Contact
Questions about this Privacy Policy, or requests relating to your data, can be sent to privacy@lacipos.com.
End of Document