Privacy Policy, what we collect and why.

1. Scope and who is responsible

This policy covers kliktron.space and the Kliktron apps: the Kliktron® App at app.kliktron.id and its CMS, Vertex Player, Vertex Monitoring, Vertex Cloud, Klikplayer Mini Site, Klikplayer Mini Cloud, Soca Insight On-Premise, Soca Insight Cloud, Kliktrack Cloud, Kliktrack Desktop, Kliktrack Mobile and Photospace.

PT Kliktron Media Teknologi, Bandung, Indonesia, is the personal data controller for the data we collect for our own purposes, such as your account, your orders and your payments.

When a business customer, such as a media owner, a venue, a fleet operator or a photo booth owner, uses our software to process data about its own staff, drivers, event guests or the public in front of its cameras, that customer decides why and how the data is processed. The customer is the controller and we act as its processor, following its instructions and our contract with it. Questions about that data go first to that customer, and we help it answer.

2. What we collect on this website

kliktron.space is a static website. It has no account, no newsletter and no form that sends data to us.

• The contact page sends nothing by itself. It prepares a message in your own WhatsApp or e-mail app, and you decide whether to send it. If you send it, we receive what you wrote and your phone number or e-mail address.
• We count visits with Cloudflare Web Analytics. It does not use cookies and does not follow you across other websites. We see totals such as page views, referring pages, countries and device types.
• Your language choice is stored in your own browser, so the site opens in the same language next time. It stays on your device, and you can clear it in your browser settings at any time.
• Like any website, our hosting and delivery provider processes technical data such as your IP address and browser type to deliver pages and protect the site from abuse.

3. What the Kliktron apps collect

• Account: your name and phone number, and an e-mail address if you add one. You sign in with a one-time password (OTP) sent by SMS or WhatsApp, and we keep a record of codes issued, sign-ins and the devices used, to protect your account.
• Identity verification in the Klik App: a photo of an identity document (KTP, SIM, passport or student card), which our team checks before booking opens for your account.
• Orders and balance: Plays balance, top-ups, packages, vouchers, bookings, schedules and invoices.
• Payments: handled by licensed payment providers through QRIS, e-wallets, virtual accounts or retail outlets. We receive the payment status and the transaction reference. Your bank or e-wallet credentials are entered with the payment provider, not with us.
• Creatives: the videos, images and logos you upload, and the QC result for each.
• Device and play logs: for players and monitored devices, the device identifier, licence status, heartbeat, health readings (processor, memory, temperature, connection), play logs with timestamps and screen previews.
• App permissions you allow: the camera to scan QR codes and upload documents, your location to show screens near you, and notifications.
• Business records: for media owners, the customers, rates, deposits and transactions they keep in Vertex Player or the Klik App CMS.

4. Cameras, CCTV and location

Proof of play. At the moment a spot airs, Vertex Player records a short clip from a CCTV camera that points at the screen. The clip may show people or vehicles passing by. It is used to prove the airing and to count the audience, not to identify anyone.

Audience counting. Soca Insight counts people and vehicles. With Soca Insight On-Premise, video is processed on the machine at the site and is never uploaded: only the counts leave. With Soca Insight Cloud, the video a customer chooses to submit is processed in our worker network, which may include machines run by partners under our instructions, to produce counts and reports.

Under UU PDP, cameras in public places must not be used to identify a person, and a notice must be shown in the area where they are installed. The operator of each site is responsible for that notice.

Vehicle location. Kliktrack Desktop and Kliktrack Mobile send the position of a vehicle while tracking is started. On a driver’s phone this needs location permission, including background location. The fleet operator decides how tracking is used, and a driver can turn the permission off in the phone settings, which stops tracking.

Event photos. Guests who use a Photospace booth in QR mode give their name and WhatsApp number to receive their photos. The booth owner runs the event and can delete photos. Deleting a photo removes it from our servers, but not from a guest’s WhatsApp where it was already delivered.

5. Why we use personal data

• To create and secure your account and verify your identity.
• To take orders, run QC, schedule and air content.
• To produce proof of play, audience counts, route records and reports for advertisers and media owners.
• To process payments, issue invoices and keep the tax and accounting records the law requires.
• To run, monitor, license, update and support the software and devices.
• To prevent fraud and abuse and protect the platform and its users.
• To tell you about your orders, the service and changes to it, and, if you agree, about promotions.
• To improve our products using aggregated figures that do not identify you.

6. Legal bases under UU PDP

Article 20 of UU PDP sets out the bases on which personal data may be processed. We rely on the following:

• Performance of a contract with you: your account, orders, payments, licences and support.
• A legal obligation: tax and accounting records, and lawful requests from authorities.
• Legitimate interests: account security, fraud prevention, device monitoring and product improvement, balanced against your rights.
• Your consent: where it is required, such as location and camera permissions on your phone and promotional messages. You can withdraw consent at any time; this does not affect processing that took place before.

7. Who we share it with

We share personal data only as far as each purpose needs, and we never sell it. Our providers process it only on our instructions and under agreements that require them to protect it. Some providers may store or process data outside Indonesia; when that happens, we transfer it only in the ways UU PDP allows. We share it with:

• Payment providers, to process your payments.
• WhatsApp and SMS message gateway providers, to deliver one-time passwords, invoices and Photospace photos.
• Hosting, cloud and content delivery providers, to run the website and the apps.
• Worker partners in Soca Insight Cloud, only for the video jobs a customer submits, and only to process them.
• The other side of a campaign: an advertiser sees the proof for its own plays, and a media owner sees the orders and creatives for its own screens. Each advertiser sees only its own data.
• Authorities, when the law requires it.
• A successor company in a merger or acquisition, which must keep to this policy.

8. How long we keep it

We keep personal data only as long as the purpose, the contract or the law requires. When that period ends, we delete it or make it anonymous.

• Account data: while your account is active. If you delete your Klik App account, we delete or anonymise your profile, except the records the law requires us to keep.
• Transactions and invoices: for the period Indonesian tax and accounting law requires.
• Device logs, monitoring logs and route history: for the retention period of the product plan or the contract.
• Proof clips, creatives and event photos: as long as the service or contract they belong to requires, or until the customer deletes them.

9. How we protect it

We protect personal data with technical and organisational measures that fit the risk, including role-based access, sign-in by one-time password with rate limits and lockout, per-device licences secured with cryptographic keys, encrypted connections, and separation of data between advertisers and between tenants. Where Soca Insight On-Premise runs, video stays on the machine at the site.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority in writing, within the time limit UU PDP sets.

10. Your rights and how to use them

Under UU PDP you have the rights listed below. To use any of them, write to our data protection contact as described in the last section of this policy. In the Klik App you can also correct your profile and delete your account yourself, from Profile. Deleting a Klik App account also removes any remaining Plays balance, permanently. You have the right to:

• Be informed about who processes your data, why and on what basis.
• Access your personal data and get a copy of it.
• Correct or update data that is wrong or incomplete.
• Have your data deleted, and ask us to end its processing.
• Withdraw a consent you gave.
• Object to a decision based only on automated processing that has legal or similar significant effects on you.
• Ask us to delay or restrict processing.
• Receive your data in a commonly used, machine-readable format, or have it sent to another controller where this is technically possible.
• Claim compensation for a violation, as the law provides.

11. Children

kliktron.space and the Kliktron apps are meant for businesses and adults, not for children. Under UU PDP, processing a child’s personal data needs the consent of a parent or legal guardian. If you are under 18, use the Kliktron apps only with that consent, and with your parent or guardian responsible for the account.

If we learn that we hold a child’s personal data without that consent, we will delete it.

12. Changes and contact

To use any of your rights, or for any question about this policy, write to our data protection contact at [email protected] with "Privacy" in the subject. Tell us which account or service it concerns. We may ask you to confirm your identity, and we reply within the time limits UU PDP sets. If the law limits a request, for example because we must keep tax records, we explain why.

We may update this policy when our products or the law change. The date below shows the latest version. For a material change, we tell account holders in the app or by message before it takes effect.

PT Kliktron Media Teknologi, Bandung, Indonesia. Data protection contact: [email protected]. WhatsApp: +62 822-9789-5758.