Privacy Policy

Information we collect

We collect only the information needed to run the Service. We do not use advertising or analytics trackers, and we do not build behavioral profiles for marketing.

• Account & identity. Your email address. If you sign in with Google, we receive basic Google account profile information (such as your name and email) to create and authenticate your account.
• Billing & profile. Your account type (individual or business), full name, company name and contact name (for business accounts), phone number, postal address, and tax identification number (optional). You provide these during onboarding and can edit them in account settings.
• Payments. Payments are processed by our payment gateway provider, Doku. We do not collect or store full payment card numbers. We receive limited transaction details such as order ID, product, amount, and status.
• Credit & usage records. Your prepaid credit balance and a history of credit top-ups and usage events.
• Address search queries. When you use the address autocomplete field, the text you type is sent to our geocoding provider (Photon, operated by komoot) to return address suggestions.
• Technical & log data. When you access the Service, our hosting and content-delivery providers automatically receive standard technical information such as your IP address, browser and device type, and timestamps, in order to serve and secure the Service.

Cookies and local storage

We use your browser’s local storage to keep you signed in (your authentication session). This is strictly necessary for the Service to function. We do not use advertising, analytics, or cross-site tracking cookies. Some third-party resources that we load, such as web fonts and icon assets, are served by Google and a public CDN, which receive your IP address as part of delivering those files.

How we use your information

We use your information for the following purposes. Where the GDPR applies, the corresponding legal basis is shown in parentheses.

• Provide, operate, and maintain the Service (performance of our contract with you).
• Authenticate you and secure your account, including sending magic-link sign-in emails (performance of contract; legitimate interests).
• Process payments, issue invoices, and meet tax obligations (performance of contract; legal obligation).
• Provide address suggestions when you use the autocomplete field (at your request).
• Prevent fraud and abuse, debug issues, and keep the Service secure (legitimate interests).
• Comply with applicable laws and respond to lawful requests (legal obligation).

How we share your information

We share personal information only with the service providers (sub-processors) that help us run the Service, and only as needed for the purposes below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of our users or others. If we are involved in a merger, acquisition, or asset sale, personal information may be transferred, and we will notify you of any change in control or use of your information.

International data transfers

Because we and our providers operate globally, your information may be processed in countries other than the one in which you live, including countries that may not provide the same level of data protection. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for these transfers.

Data retention

We keep your account and profile data for as long as your account is active. Transaction, invoice, and tax records are retained for the period required by applicable accounting and tax laws. When information is no longer needed, we delete or anonymize it. You may request deletion of your account at any time (see Your rights).

Security

We protect your data with measures including encryption in transit, row-level access controls that restrict each user to their own records, and tightly scoped access to payment and service secrets. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address vulnerabilities promptly.

Your rights

Depending on where you live, you have rights over your personal information. Subject to applicable law, these generally include the right to access, correct, delete, or export your data; to object to or restrict certain processing; and to withdraw consent. Many profile fields can be viewed and updated directly in your account settings.

• EEA & UK (GDPR). In addition to the rights above, you may lodge a complaint with your local data protection supervisory authority.
• California (CCPA/CPRA). You have the right to know what personal information we collect, to delete it, to correct it, and to be free from discrimination for exercising your rights. We do not sell or share your personal information as those terms are defined under California law.
• Indonesia (PDP Law, UU No. 27 of 2022). You have the right to obtain information about, access, correct, and erase your personal data, to withdraw consent, to object to certain processing, and to seek redress for misuse of your data.

To exercise any of these rights, email us at hello@netraruntime.com. We will respond within the timeframe required by applicable law and may need to verify your identity first.

Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16 (or the minimum age required in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

Third-party links and services

The Service relies on third-party providers and may link to third-party sites (for example, the Doku checkout page). Their handling of your information is governed by their own privacy policies, and we encourage you to review them.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide additional notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at hello@netraruntime.com.