Privacy Policy

1. Information We Collect

When you sign in, we receive your name and email address from Huudis, the Forjio identity service — Serront itself does not store passwords. As a seller, your workspace stores your storefront profile, services, orders, message threads, and the bank-account details you choose to display to buyers. When you place an order as a buyer, we store the name, email address, and optional WhatsApp number you submit, your messages on that order, and any payment-proof image you upload.

2. How We Use Your Data

Account data is used to authenticate you and manage your subscription. Usage data is used to provide the product's features. We do not sell your data, do not use it for advertising, and do not track you across other websites.

3. Data Retention

Orders and their message threads are retained while the seller's workspace exists, so both sides keep a record of what was agreed and paid. When you delete your account, all associated data is permanently deleted within 30 days.

4. Access & Portability

Your data is yours. You can request a copy of the data we hold about you — or its correction or deletion — at any time through the contact in section 9, and we respond within 30 days as required by UU PDP.

5. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics.

6. Security

Sign-in is handled by Huudis — Serront never sees or stores your password. All traffic is served over HTTPS, and API keys and webhook signing secrets are stored only as hashes: the plaintext is shown once at creation and never persisted.

7. Third-Party Services

Payments are processed through Plugipay and its payment partners — we never see or store card details. Transactional email (order notifications and sign-in codes) is delivered through Resend. We use no third-party advertising networks, analytics SDKs, or tracking pixels.

8. Governing Law

This Privacy Policy is governed by the laws of the Republic of Indonesia and handled in accordance with Indonesian data protection regulations.

9. Data Controller & Contact

The data controller for Serront is:

PT Forjio Teknologi Indonesia
Jl. Parkit, Blok I, No. 48, RT 004, RW 001, Cempaka Permai, Gading Cempaka, Bengkulu, Bengkulu 38221
Phone: +62 815-2999-0219
Email: support@forjio.com (subject line tag: [privacy])

Data subject requests under UU No. 27/2022 (Pelindungan Data Pribadi) — including access, correction, deletion, and portability — go to the email above. We respond within 30 days.