Privacy Policy

"Suruhkami.id", "we", "our", or "the Platform" means the application operator that provides digital intermediation, ordering, dispatch, payment facilitation, customer support, merchant tools, driver tools, fleet tools, admin tools, public content, promotional programs, and related services.

This policy applies when a person accesses or uses any Suruhkami.id service as a customer, driver, merchant, merchant employee, fleet owner, fleet staff, administrator, support agent, finance user, website visitor, community participant, or other authorized user.

• Identity and account data: name, phone number, email address, password hash, account status, role, profile photo, government or business documents where required for onboarding and verification.
• Driver and merchant verification data: ID, license, vehicle details, vehicle documents, bank account details, business name, address, operating hours, product/menu data, tax or registration data where requested.
• Order, ride, delivery, and transaction data: cart items, product choices, pickup and drop-off addresses, route, status timeline, pricing, promotions, wallet balance, payment status, refund history, audit logs, proof images, OTP checks, and cancellation reasons.
• Location and device data: GPS coordinates, saved addresses, service area checks, delivery tracking, device identifiers, app version, crash/performance logs, push notification tokens, and security metadata.
• Communications: support tickets, support chat, order chat, call notes, community posts/comments/likes, reviews, notification history, and administrative notes.
• Website and public-page data: contact requests, public settings, FAQ interactions, news/event engagement, browser and usage logs.

We process personal data when necessary to create and maintain accounts, verify users, provide ordering and dispatch, calculate pricing, route drivers, process payments, provide wallet and refund flows, prevent fraud, enforce platform rules, resolve support cases, comply with law, and improve reliability.

Where Indonesian law requires consent, we request it through app flows, account settings, device permissions, or other clear notices. Some processing is necessary for contract performance, legal obligations, vital security interests, public-service related requirements, or legitimate platform interests such as fraud prevention and service reliability.

Suruhkami.id may process sensitive or higher-risk data such as financial account data, identity documents, precise location, vehicle documents, and images submitted for verification or proof of service. We restrict access to authorized roles and use this data only for verification, payment, safety, compliance, dispute handling, and fraud prevention.

The Platform is not intended for children who cannot legally enter binding agreements or provide valid consent under applicable law. If a child’s personal data is submitted without appropriate authority, contact us for deletion or restriction.

• Customers, merchants, drivers, and fleets receive limited data needed to fulfill an order, ride, delivery, chat, refund, or support case.
• Payment providers, banks, wallet partners, notification vendors, hosting providers, analytics/crash reporting providers, map/location providers, storage providers, and support tools may process data on our behalf.
• Administrators, finance staff, customer support, and compliance personnel may access data based on role permissions and business need.
• Authorities, courts, regulators, law enforcement, insurers, and professional advisers may receive data when legally required or necessary to protect rights, safety, claims, or compliance.

Some services may be hosted or supported outside Indonesia. When personal data is transferred across borders, we use lawful transfer mechanisms, vendor controls, contractual protections, security measures, and access restrictions consistent with Indonesian personal data protection requirements.

We retain data for as long as necessary for account administration, order history, tax/accounting records, dispute handling, fraud prevention, legal claims, regulatory duties, audit logs, and service security. Data may be anonymized or aggregated for analytics after it is no longer needed in identifiable form.

Subject to Indonesian law, users may request access, correction, completion, update, deletion, withdrawal of consent, restriction, objection, portability, or information about processing. We may refuse or limit requests where permitted by law, including for fraud prevention, unresolved transactions, legal duties, security, audit integrity, or legal claims.

We apply administrative, technical, and organizational safeguards such as role-based access, authentication, encrypted transport, audit logs, monitoring, backups, data minimization, vendor review, and incident response. Users must keep credentials confidential, use accurate information, and immediately report suspicious access.

Privacy requests may be submitted through official support channels. We may update this policy to reflect legal, technical, or business changes. Material updates may be notified through the app, website, email, or other appropriate channels.