Privacy Policy
Effective: October 24, 2026
Introduction
This Privacy Policy explains how PT Api Teknologi Indonesia ("Apipay", "we", "us") collects, uses, shares, and protects personal data processed through the apipay.id website, the console.apipay.id dashboard, and the Apipay API (together, the "Service"). This policy is written with reference to Indonesia's Law No. 27 of 2022 on Personal Data Protection ("PDP Law").
Data We Collect
Data you provide directly: your name, email address, company name (optional), and message content when you fill out our contact form. Account registration data: when you register through console.apipay.id, we may collect identity data and supporting documents needed for verification as part of the registration process in effect at that time. Transaction data: when the API is used to process a payment, data relevant to that transaction is processed for verification, reconciliation, and reporting purposes. Technical data: such as IP address and browser type, to the extent needed for the Service's security and operation.
How We Use Your Data
We use personal data to: respond to contact-form inquiries; provide and operate the Service; verify identity during registration and meet anti-money-laundering (AML) obligations; process payment transactions through licensed PSP partners; keep the Service secure and prevent fraud; and comply with legal obligations and requests from competent authorities.
Sharing Your Data
We may share personal data with: licensed payment service provider (PSP) partners to process transactions; service providers that help us operate (such as hosting and email); and government authorities where required by law. We do not sell your personal data to third parties for marketing purposes.
Data Security
We apply end-to-end encryption and signature verification on every API call to protect data processed through the Service. That said, no method of data transmission or storage can be guaranteed 100% secure.
Data Retention
We retain personal data for as long as necessary for the purposes it was collected, including to meet legal, accounting, or reporting obligations. Once no longer needed, data is deleted or anonymized according to our internal procedures.
Your Rights
Under Indonesia's PDP Law, you have the right to: - obtain information about the purpose of collecting and processing your personal data; - complete or update inaccurate personal data; - access the personal data we hold about you; - stop the processing, erase, and/or destroy your personal data as permitted by applicable regulation; - withdraw consent you've previously given; - object to a decision based solely on automated processing; and - object to and claim compensation for a violation in the processing of your personal data as permitted by applicable regulation. To exercise these rights, contact us at legal@apipay.id.
Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced through the Service before they take effect.
Contact
Questions or requests about your personal data can be sent to legal@apipay.id or to PT Api Teknologi Indonesia, Enablerspace.id, Jl. Bintaro Raya Selatan No.8, RT.2/RW.10, Kby. Lama Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12240, Indonesia.
This document was drafted by adapting templates from General Legal (general.legal), released under the CC0 1.0 Universal license, adapted for Apipay's operations in Indonesia.