eFaktur Scanner – Privacy Policy

eFaktur Scanner
Last updated: September 17, 2026

This Privacy Policy explains how PT Karya Solusi Pintar (“Company”, “We”, “Us”, or “Our”) collects, uses, stores, discloses, and protects Personal Data when You use eFaktur Scanner (the “Application” or “Service”).

eFaktur Scanner is an application that helps authorized Users scan Indonesian electronic tax-invoice QR codes, retrieve and organize tax invoice information, maintain taxpayer records, and synchronize those records with the Service.

We process Personal Data only as reasonably necessary for the purposes described in this Privacy Policy and in accordance with applicable privacy and data-protection laws. Where permission or consent is required, We request it before accessing the relevant device feature or information.

1. Interpretation and Definitions

Application

“Application” means eFaktur Scanner, the software application provided by PT Karya Solusi Pintar.

Company

“Company”, “We”, “Us”, or “Our” refers to PT Karya Solusi Pintar, 110A Jl. Raya Margorejo Indah, Kel. Margorejo, Kec. Wonocolo, Kota Surabaya, Jawa Timur 60238, Indonesia.

Personal Data

“Personal Data” means information relating to an identified or identifiable individual.

Service Provider

“Service Provider” means a third party that processes data on behalf of the Company to host, secure, support, communicate through, analyze, or otherwise operate the Service.

User

“User” or “You” means an individual who accesses or uses eFaktur Scanner, including an individual acting for a company or other legal entity.

2. Information We Collect

2.1 Account Information

We may process information needed to create and manage Your access:

• Name and email address.
• Username, account identifier, and account status.
• Company, role, or access-right information where applicable.
• Authentication and session information.

2.2 Taxpayer and Tax-Invoice Information

To provide the Application’s core functions, We may process information contained in or associated with an electronic tax invoice, including:

• Tax-invoice number, date, status, and replacement-invoice data.
• Seller and buyer taxpayer identification numbers, names, and addresses.
• Transaction descriptions, quantities, prices, discounts, tax bases, VAT, luxury-goods sales tax, and other invoice amounts.
• QR-code content, source URL, scan time, and synchronization status.
• Taxpayer records that You add, edit, or synchronize.

Tax-invoice information may relate to individuals, sole proprietors, employees, representatives, or other identifiable persons. You are responsible for ensuring that You are authorized to scan, submit, and otherwise process the information You provide through the Service.

2.3 Camera and QR-Code Scanning

When You choose to scan a tax invoice and grant permission, the Application accesses the camera to detect and read a QR code. Camera frames are used to recognize the code; the Application processes the resulting QR-code content or URL to retrieve the related tax-invoice information.

You may deny or later disable camera permission in Your device settings. If camera access is unavailable, QR-code scanning will not work, but other available parts of the Application may remain usable.

2.4 Device, Technical, and Usage Information

We may process technical information needed to operate, secure, troubleshoot, and improve the Service, including device type, operating-system and Application version, IP address, device or installation identifiers where necessary, access timestamps, server logs, network status, and crash or performance diagnostics where collected.

2.5 Notifications

Where supported and with Your permission, the Application may send notifications relating to Application functions, synchronization, or other service information. You can manage notification permission in Your device settings.

2.6 Information Stored on Your Device

The Application may store account settings, authentication state, pending scan URLs, taxpayer records, and tax-invoice records locally on Your device. This supports Application operation and, where available, offline use and later synchronization.

3. How We Use Personal Data

We may use Personal Data to:

• Authenticate Users and manage authorized access.
• Scan and interpret electronic tax-invoice QR codes.
• Retrieve tax-invoice information from the relevant source.
• Display, organize, search, edit, and maintain invoice records.
• Manage taxpayer records.
• Store records locally and synchronize them with Our systems when a connection is available.
• Provide notifications, support, and responses to requests.
• Protect the security, integrity, availability, and performance of the Service and troubleshoot technical problems.
• Comply with legal obligations and enforce applicable agreements.

4. Legal Basis and Device Permissions

Depending on the processing activity and applicable law, Personal Data may be processed to provide the requested Service, perform a contract, pursue legitimate operational or security interests, comply with a legal obligation, or on the basis of consent where required.

Device permission prompts control access to sensitive device features but do not by themselves describe every legal basis for processing. Where We rely on consent, You may withdraw it through Your device settings or by contacting Us. Withdrawal does not affect processing already performed lawfully and may limit functions that need the relevant permission.

Permission summary

• Camera: scan QR codes on electronic tax invoices.
• Notifications: deliver Application and service information where this feature is enabled.

5. Sources of Information and External Services

We receive information directly from You, from the QR codes You scan, from the device and Application during use, and from systems used to retrieve or synchronize tax-invoice information. When a QR code points to a system operated by Indonesia’s Directorate General of Taxes or another third party, Your request and the data returned may also be processed under that party’s privacy practices and terms.

6. Disclosure of Personal Data

We may disclose Personal Data:

• To Service Providers that host, secure, maintain, support, or help operate the Service, subject to appropriate contractual controls.
• To the company or organization through which Your account is provided, and its authorized personnel, where applicable.
• To public authorities or other parties where required by law, legal process, or a valid governmental request.
• Where reasonably necessary to protect the rights, property, security, or safety of the Company, Users, or the public.
• In connection with a merger, acquisition, financing, restructuring, or sale of all or part of Our business, subject to appropriate safeguards and notice where required.
• For another purpose with Your consent or direction.

We do not sell Personal Data or mobile information for third-party marketing or promotional purposes.

7. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Unless a longer period is required or justified:

• Account information may be retained for the account relationship and up to 24 months after account closure.
• Support correspondence may be retained for up to 24 months after the request is closed.
• Usage information and server logs may be retained for up to 24 months for security, troubleshooting, and service improvement.
• Taxpayer and tax-invoice records are retained while needed to provide the Service, meet the account holder’s operational needs, and satisfy applicable tax, accounting, contractual, or legal obligations.

Data may be deleted or anonymized sooner when it is no longer needed. Residual copies may remain temporarily in protected backups until those backups are overwritten under Our normal retention schedule.

8. International Data Transfers

Personal Data may be processed where the Company, its systems, or its Service Providers operate. If Personal Data is transferred across national borders, We will use safeguards required by applicable law and take reasonable steps to protect the information consistently with this Privacy Policy.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, or destruction. No method of electronic transmission or storage is completely secure, so We cannot guarantee absolute security.

10. Your Rights and Choices

Subject to applicable law, You may have the right to request access to, correction of, deletion of, restriction of, or a copy of Your Personal Data, or to object to or withdraw consent for certain processing. You may also manage available device permissions in Your device settings.

You may update certain information through the Application where that function is available or contact Us using the details below. We may need to verify Your identity and may retain information where required by law or another lawful basis.

11. Children’s Privacy

The Service is not directed to children under 16, and We do not knowingly collect Personal Data from children under 16. If You believe that a child has provided Personal Data through the Service, please contact Us so We can take appropriate action.

12. Links and Third-Party Services

The Service may connect to or contain links to services that We do not operate. We are not responsible for the content or privacy practices of those third parties. We encourage You to review their privacy notices before providing information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date above. Where required, We will provide additional notice before a material change becomes effective.

14. Contact Us

If You have questions about this Privacy Policy or wish to exercise a privacy right, contact Us: