Privacy Policy

1. Introduction

PT Trendcas Global Digital ("we," "our," or "us") operates the mobile and web application Agrosid (the "Application"). This Privacy Policy explains how we collect, store, process, and protect your personal data when you use the Agrosid Application and associated services.

We are committed to respecting your privacy and protecting your personal data in full compliance with the General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Law (UU No. 27 Tahun 2022 / UU PDP), and Apple App Store & Google Play Store developer guidelines.

2. Data Controller

The data controller responsible for processing your personal data is:

PT Trendcas Global Digital
Epiwalk, Jl. H. R. Rasuna Said Lantai 5, Jakarta, Indonesia
Contact Email: [email protected]

3. Categories of Data We Collect

We collect only the minimum necessary data required to operate, maintain, and enhance the Agrosid Application:

• Account & Profile Data: When you create an account or sign in to Agrosid, we collect your basic profile information such as your email address, display name, phone number, and unique user identifier.
• Location Data (Precise, Coarse & Background Location): To provide location-based field tracking, agricultural task monitoring, attendance verification, and activity recording features, Agrosid accesses and collects precise (GPS-based) and coarse (network-based) location data from your mobile device. Depending on your feature settings and permission approvals, location data may be accessed when the app is running in the foreground (actively open on screen) as well as in the background (when the app is minimized or closed), specifically to enable continuous field activity tracking and route recording during active work sessions.
• Camera, Photos, Videos & Storage Access: When permitted, Agrosid accesses your device camera, photo gallery, media library, and storage to enable you to capture profile photos, upload photo/video documentation for field activities, attach operational files, and save downloadable reports.
• Microphone & Audio Recordings: When using voice messaging or voice note features within Agrosid, the app accesses your device microphone to record audio upon your explicit initiation. Audio recordings are transmitted securely to provide messaging functionality.
• Device & System Information: Device model, operating system version, app version, language preference, IP address, push notification tokens (Firebase Cloud Messaging), and unique installation identifiers used for multi-device authentication, push delivery, and app security.
• Application Diagnostics & Crash Analytics: Anonymous operational logs, feature usage statistics, performance metrics, and crash reports (via Google Firebase Crashlytics) to troubleshoot software bugs and optimize system stability.
• App Store & Google Play Purchase Data: Financial transactions and subscriptions are processed through official app stores (Apple App Store & Google Play Store). We receive purchase verification tokens to activate features. We do not collect credit card numbers, bank details, or direct billing credentials.
• Support & User Communications: Information provided when you contact customer support, including email address, message contents, and diagnostic attachments.

4. How We Collect Data

We collect data through the following methods:

• Direct interactions when you register an account, configure app preferences, record voice notes, upload attachments, or contact our support team.
• Device sensors (GPS, Camera, Microphone) and storage access when permissions are granted by the user within the Application.
• Automated receipt verification through Apple App Store Media Services API and Google Play Billing API upon in-app purchase or subscription renewal.
• Automated diagnostic systems (Firebase Crashlytics) for anonymous error reports and app stability metrics.

5. Legal Basis for Processing (GDPR & UU PDP)

We process your personal data under the following legal bases:

• Contractual Necessity: To fulfill our agreement with you, grant access to Agrosid features, record requested field location tracking, process uploaded attachments, and manage active subscriptions.
• Legitimate Interests: To maintain system security, analyze app performance, prevent fraud, and continuously improve Agrosid.
• Consent: For location access (foreground and background), camera/photo/microphone permissions, push notifications, or optional features, which you can grant or withdraw at any time via your device settings.
• Legal Compliance: To satisfy mandatory legal obligations, accounting standards, or legal requests from competent authorities.

6. How We Use Your Data

Your data is used strictly for the following purposes:

• To activate, authenticate, and provide access to Agrosid features and services.
• To record, display, and process geographic coordinates for field tracking, work location verification, map visualization, route monitoring, and attendance recording (including background location tracking services when enabled by the user).
• To enable photo, video, and document uploads for agricultural task reports and user profiles.
• To process voice recordings for voice notes and in-app communications.
• To verify subscription validity with Apple App Store and Google Play Store.
• To deliver critical security updates, technical notices, and administrative announcements.
• To deliver responsive user support and assist with customer inquiries.
• To diagnose crashes, fix software bugs, and optimize app performance.
• To protect against unauthorized access, intellectual property infringement, and fraudulent transactions.

7. Third-Party Service Providers & App Stores

We do not sell, rent, or trade your personal data. We share necessary data only with trusted third-party providers bound by confidentiality and data processing agreements:

• App Distribution Platforms: Apple Inc. (Apple App Store) and Google LLC (Google Play Store) serve as payment processors and distribution platforms for Agrosid in-app purchases and subscriptions.
• Cloud Infrastructure & Hosting: Enterprise cloud hosting services (e.g., AWS, Supabase, or Google Cloud) for secure user authentication, database infrastructure, and encrypted media/location storage.
• Analytics & Error Monitoring: Google Firebase (Firebase Messaging & Crashlytics) used strictly to deliver push notifications and diagnose software crashes.
• Data Privacy Guarantee: We do not sell, rent, or share location data, media files, audio recordings, or personal data with third-party advertisers, data brokers, or marketing partners.

8. Data Security & Local Storage

We enforce robust technical and organizational security measures to protect your personal information against unauthorized access, loss, or alteration. All communication between Agrosid and backend services is encrypted using Industry-Standard TLS/SSL protocols.

Sensitive localized credentials stored by Agrosid on your device (such as authentication tokens or encryption keys) are protected using standard hardware-backed secure storage, including the iOS Keychain and Android Keystore.

9. International Data Transfers

Your personal data may be processed on secure servers located outside your country of residence. When cross-border data transfers occur, we implement legal safeguards such as Standard Contractual Clauses (SCCs) or legal mechanisms recognized under the Indonesian UU PDP and European GDPR to ensure an equivalent level of protection.

10. Data Retention

We retain your personal data only for as long as necessary to provide Agrosid services and comply with legal requirements:

• Account Data & Media: Retained for as long as your account remains active, and deleted permanently within 30 days after account deletion request.
• Subscription Records: Retained for the duration required by applicable financial and tax regulations.
• Diagnostic Logs: Automatically anonymized or purged within 24 months.

11. Account & Data Deletion Policy

In compliance with Google Play Store User Data policy and global privacy regulations (GDPR & UU PDP), Agrosid provides users with full control over their account and personal data:

• How to Request Account Deletion: You may request the permanent deletion of your Agrosid account and all associated data at any time by emailing us at [email protected] with the subject line "Agrosid Account Deletion Request" from your registered email address, or by accessing the account deletion option within the app profile settings.
• Data Erasure Scope: Upon verification of your request, we will permanently remove your profile data, authentication credentials, uploaded photos, voice notes, and activity history from our active servers within 30 days.

12. Your Data Subject Rights (GDPR & UU PDP)

Under applicable data protection laws, you possess the following rights regarding your personal data:

• Right to Access & Information: Request confirmation and details of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and personal data.
• Right to Restriction of Processing: Limit how we process your personal data under specific circumstances.
• Right to Data Portability: Obtain a structured, machine-readable copy of your personal data.
• Right to Object & Withdraw Consent: Object to processing based on legitimate interests or revoke location, camera, or microphone permissions at any time.

To submit a data rights request, please email us at [email protected]. We will process your request within 30 days.

13. Children's Privacy

The Agrosid Application is not directed to children under the age of 16 (or 13 depending on jurisdiction). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information, we will delete it immediately from our systems.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect software enhancements, regulatory changes, or store policy updates. Revised policies will be published on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

15. Contact & Inquiries

For questions, privacy inquiries, or data protection rights requests regarding Agrosid, please contact:

PT Trendcas Global Digital
Email: [email protected]
Website: https://trendcas.com