Privacy policy

1. Who we are

CuanKu is run by PT CUANKU TEKNOLOGI INDONESIA, Jl. Dr. Setiabudi No. 157.A, Gegerkalong, Kec. Sukasari, Kota Bandung, Jawa Barat 40153 ("we"). For account data, use of the CuanKu app and the waitlist on this site, we are the personal data controller.

2. Data we collect

• Account data: first name, last name, business name and phone number.
• Business data you enter: customers (name, phone number, address, notes), products and their photos, stock, orders, saved replies and payment records.
• Chat text you copy or share into CuanKu yourself so it can be read into an order. CuanKu does not read your inbox or other chats on your phone.
• Phone contacts, only the ones you choose to import as customers, and photos you pick from your gallery. Both only after you give permission.
• Device and technical data: device model, a random device ID created by the app, IP address, browser or app type, and technical logs.
• Payment account data: the verification status of your payment account from our payment partner. We don't store your buyers' card or bank details.
• The waitlist on this site: business name, WhatsApp number and, if you choose, how you sell.

3. Your customers' data

The customer data you record in CuanKu belongs to your business. For that data you are the controller, and we process it on your behalf only to run the service. You are responsible for making sure you may record and use your customers' data under UU PDP, for example because they ordered from you or agreed to it.

4. Why and on what basis

We don't sell your personal data and don't use it for advertising.

• To provide the service you asked for (contract): creating and securing your account, verifying your phone number with a WhatsApp code, reading chats into orders, storing and syncing data, creating payment links and QRIS, calculating shipping costs and giving support.
• To meet legal obligations: keeping transaction records, responding to official requests from competent authorities, and preventing crimes such as fraud or money laundering.
• Legitimate interests: keeping the service secure, detecting misuse, fixing problems and improving CuanKu in ways that don't harm your rights.
• Your consent: sending launch news on WhatsApp to people on the waitlist, importing contacts and accessing photos. You can withdraw consent at any time.

5. Who helps us process data

We only share what is needed, with providers bound by agreements to keep it confidential and secure:

• Our payment partner (a payment service provider licensed by Bank Indonesia): processes payments (payment links, QRIS) and creates and verifies the payment account in your business's name. Identity verification is done directly by the payment partner under its privacy policy.
• Telnyx: sends verification codes to your phone number on WhatsApp.
• OpenAI: reads the chat text you share to put together the order. Only that chat text, your product names and units, and possible customers' names with the last 4 digits of their number are sent, so the order can be matched.
• Google (Places): suggests addresses while you type a delivery address.
• RajaOngkir (Komerce): calculates shipping costs from the origin and destination address.
• Providers of servers, file storage and technical logging (including Grafana Cloud) that store and protect our data.
• Government agencies or law enforcement, only when required by law or a court order.

6. Storage outside Indonesia

CuanKu's servers and file storage are in Singapore. Some of the providers above (Telnyx, OpenAI, Google and the logging provider) process data outside Indonesia, including in the United States. Under Article 56 of UU PDP, we only transfer data to providers that offer an equal or higher level of protection, or that are bound by a data protection agreement with us.

7. How long we keep data

• Account and business data: for as long as your account is active.
• After you delete your account: the account is deactivated immediately, and your personal data is deleted or anonymised within 30 days.
• Payment transaction records: kept for up to 10 years where the law requires it (for example company-records and tax rules), and only used for that purpose.
• Verification codes: deleted within 1 day after they expire. Sync history: 90 days. Technical logs: at most 90 days.
• Waitlist: until 12 months after CuanKu launches, or earlier if you ask to stop.
• Data on your phone: removed from the device when you delete your account or the app.

8. Security

• Data travels encrypted (HTTPS) between the app, the site and our servers.
• Sign-in has no password: you use a one-time code sent on WhatsApp, and login tokens are kept in the device's secure storage.
• Access to data is limited to the team members who need it to run the service.
• If a data protection failure happens, we notify you and the competent authority within 3 x 24 hours, as required by Article 46 of UU PDP.

9. Your rights

Send your request to hello@cuanku.co or WhatsApp 0857-9408-3057 from your registered number. After we verify your identity, we answer access and correction requests within 3 x 24 hours and complete deletion within 30 days.

• To be informed about how your data is processed.
• To access your data and get a copy, including in a commonly used format.
• To correct data that is wrong or incomplete.
• To delete your data and account. You can delete your account from Settings in the app, confirmed with a WhatsApp code.
• To withdraw consent you gave, including leaving the waitlist.
• To suspend or restrict processing, and to object to decisions based solely on automated processing.
• To file a complaint, and to sue and receive compensation for a breach in how your data is processed.

10. Age

CuanKu is only for people aged 18 and over. We don't knowingly collect children's data. If you know a child has signed up, tell us and we will delete their data.

11. This website

cuanku.co only stores your language choice (the cuanku-lang cookie and browser storage). We don't use advertising, tracking or analytics cookies on this site.

12. Changes to this policy

If this policy changes, we show the latest version on this page with a new effective date. For important changes, we tell you in the app or on WhatsApp before they take effect.

13. Contact