Privacy Policy
Last updated: September 9, 2026
1. Data Controller
Kasnex acts as the data controller for your account and company information, and as a data processor for the customer and transaction data you record while running your own business. For personal data questions, contact us at excal17.ex@gmail.com.
2. Data We Collect
Account information (name, email, encrypted password); company data (store name, branches, warehouses, currency); the business transaction data you record yourself (sales, purchases, stock, your own customer and supplier data); a profile photo if you upload one; and technical data automatically logged by the authentication system (sign-in times, an audit trail of important data changes) for security purposes.
3. Legal Basis for Processing
We process your data based on the consent you give when signing up, and on our legitimate interest in operating and securing the service you use — in line with the principles of Indonesia's Law No. 27 of 2022 on Personal Data Protection.
4. How Data Is Used
Your data is used solely to operate the Kasnex service for your account — storing and displaying your business data, generating reports (including financial statements), and keeping your account secure. We do not sell your data to third parties, and do not use it for third-party advertising.
5. Sharing Data with Third Parties
Your data is processed by Supabase as our cloud infrastructure provider (database and authentication) on our behalf, contractually bound to process data only per our instructions. We do not share your data with any other third party for marketing or commercial purposes.
6. Cross-Border Data Transfer
Because the cloud infrastructure we use may be located outside Indonesia, your data may be processed on servers in other countries. This transfer is protected by encryption and data processing agreements with our infrastructure provider.
7. Data Security
Data is encrypted in transit and at rest. Each company/store's data is technically isolated from every other company's (row-level security). We offer optional two-factor authentication (2FA) and keep an audit trail of important data changes.
8. Data Stored on Your Device
To support offline mode in the point-of-sale app, some business data (products, stock, not-yet-synced transactions) is temporarily stored in your browser's/device's local storage, and removed from the device once successfully synced to the server.
9. Data Retention
Your data is kept for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data except where data must be retained longer for legal compliance (e.g. financial transaction records).
10. Your Rights as a Data Subject
In line with Indonesia's UU PDP, you have the right to request access to your personal data, request correction of inaccurate data, request deletion, restrict or object to certain processing, and request a portable copy of your data. Submit these requests through the Contact page.
11. Children's Data
Kasnex is intended for adult business operators and does not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated through the app or your registered email.
13. Contact Us
For questions, requests, or complaints about your personal data, contact us at excal17.ex@gmail.com.