Skip to main content

Privacy Policy

Last updated: November 2, 2026

1. Who We Are

CatatJadwal is run by JalanDigital, an unincorporated individual business represented by Jayana Citra Agung Pramu Putra ("we"). This policy explains how we process personal data, in line with Indonesian Law No. 27 of 2022 on Personal Data Protection.

This is a translation for convenience. The Indonesian version prevails if the two versions differ.

2. Our Role

  • For Vendor account and subscription data, we decide the purposes of processing (data controller).
  • For client and team data entered by a Vendor, the Vendor decides the purposes (data controller), and we process it on the Vendor's behalf (data processor). Clients who want to use their rights can contact the Vendor concerned.

3. Data We Process

  • Vendor account: business name, email, hashed password, owner name, role, and WhatsApp number.
  • Business profile: logo, signature, brand color, business policy, bank account, QRIS, and time zone.
  • Operational data entered by Vendors: clients (name, WhatsApp, email, notes), team members (name, role, phone number, fee), bookings, services, payments, transfer proofs, and expenses.
  • Data sent by clients: request form contents, transfer proofs, acceptance of the Vendor's terms, and reviews with their display names.
  • Subscriptions: plan, status, payment amount, voucher, and transfer proof. We do not receive or store card data; online payments are processed by Midtrans.
  • Google Calendar integration: encrypted access tokens, if a Vendor connects it.
  • Technical: IP address, browser type, session data, and server logs.

4. Why We Process Data

  • To run the service under our agreement with the Vendor, including invoices, client links, and calendars.
  • To process and verify subscription payments.
  • To send service emails, such as account verification, password resets, booking cancellation summaries, and account deletion warnings.
  • To give support, keep the service secure, prevent abuse, and meet legal obligations.

We do not sell personal data or use it for advertising.

5. Who Receives Data

  • Midtrans: business name, email, and subscription payment details, to process online payments.
  • Google Calendar: only if a Vendor connects it, we send client name, services, time, team members, client WhatsApp and email, booking status, and a booking link to the Vendor's own Google account.
  • Hosting and email providers: to store data and send service emails. Servers may be outside Indonesia.
  • CDN providers (jsDelivr, cdnjs): load display scripts on some pages, so they receive the visitor's IP address.
  • Authorities: when required by law.

WhatsApp messages to clients are sent by Vendors themselves from their own WhatsApp. Clients and the public only see data through links a Vendor shares.

6. Access by Our Team

Platform admins can view Vendor data and sign in as a Vendor to give support, verify payments, and handle security issues. This access is used only for those needs.

7. Google Data

The integration uses the calendar.app.created permission, meaning only the "CatatJadwal" calendar this app creates, and does not read your other calendars. Google user data is used only for this sync, is not sold, is not used for advertising, and is not shared beyond what this feature needs. Its use follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time in Settings, and the connection tokens are then deleted.

8. Cookies and Browser Storage

We use cookies for login sessions, form protection (CSRF), the "remember me" option, and language choice, plus browser storage for theme and display color. We do not use advertising or analytics cookies.

9. How Long We Keep Data

  • Data is kept while the account is active and as long as needed for the purposes above.
  • An account with no subscription for 6 months after its last subscription ended is permanently deleted with its data, after email warnings at least 30 and 7 days before.
  • Data may be kept longer where the law requires it.

10. Security

We use measures such as password hashing, encrypted integration tokens, per-Vendor data separation, signed links, and private storage for payment proofs. No system is fully secure. If a personal data protection failure occurs, we notify affected parties as the law requires.

11. Your Rights

Under applicable law, you can request information about and access to your data, correct it, delete it or end its processing, withdraw consent, and object. Send requests to the contact below; we may verify your identity first. We respond within the time set by law.

12. Children

CatatJadwal is intended for adult business owners and is not directed at children.

13. Changes to This Policy

We may update this policy. The update date appears at the top of this page, and we announce important changes by email or in the app.

14. Contact

  • JalanDigital, Jayana Citra Agung Pramu Putra
  • Address: Kanigraha Blok E19, Jl. Simpang L.A. Sucipto, Pandanwangi, Kec. Blimbing, Kota Malang, Jawa Timur 65124