These Terms of Service ("Terms") govern your use of Alurco, the online business management software at alurco.com, api.alurco.com and the Alurco mobile apps (the "Service"), provided by Alurco ("Alurco", "we", "us").
By creating an account or using the Service, you agree to these Terms and to our Privacy Policy. If you use the Service for a company or other organisation, you confirm that you may accept these Terms on its behalf.
Ownership. The Customer owns its Customer Data. We claim no ownership of it.
No sale of data. We will never sell, rent or trade Customer Data or personal data, and we do not share it with third parties for their marketing.
How we use data. You allow us to process and study Customer Data and usage data to:
Our staff access Customer Data only when needed for these purposes, for example to answer a support ticket, and are bound by confidentiality.
Storage period. Customer Data is stored on Alurco's servers for as long as the Company uses the Service, then as described in section 10.
Customer's responsibility. The Customer is the controller of its employees' personal data under Law No. 27 of 2022 on Personal Data Protection. It is responsible for having a lawful basis and giving the required notices. Alurco processes that data on the Customer's behalf.
Disclosure required by law. We may disclose data when the law or a binding order of a competent authority requires it. Where allowed, we inform the Customer first.
You must not:
The Service uses providers for hosting and storage, networking, email delivery and payments (see the Privacy Policy). Payments are processed by the payment provider; we do not store card or bank credentials.
The Service, its software, design and documentation belong to Alurco or its licensors. You receive a limited, non-exclusive, non-transferable right to use the Service while you use it under these Terms. We may use feedback you give to improve the Service, with no obligation to you.
The Service is provided "as is" and "as available". Reports, calculations (for example tax, overtime or depreciation) and templates support your work but do not replace professional accounting, tax or legal advice. You remain responsible for your business decisions and for checking results before relying on them.
To the extent permitted by law, we are not liable for:
Nothing in these Terms limits liability that cannot be limited by law.
We may update these Terms. Each version has a number and an effective date, and you will be asked to accept the new version in the Service. Material changes are announced at least 14 days before they take effect, unless the law or security requires sooner. If you do not accept a new version, you may stop using the Service.
These Terms are governed by the laws of the Republic of Indonesia. The parties will first try to settle any dispute amicably within 30 days. If that fails, the dispute is settled by the competent District Court in Jakarta, unless the parties agree otherwise in writing.
These Terms are available in English and Indonesian, with the same meaning. In accordance with Law No. 24 of 2009, the Indonesian version prevails if there is any difference.
Email [email protected], or open a support ticket in the Service.
This Privacy Policy explains how Alurco ("Alurco", "we") collects, uses, stores and protects personal data when you use the Alurco service (the "Service"), in line with Law No. 27 of 2022 on Personal Data Protection ("PDP Law"). Terms with a capital letter have the meaning given in the Terms of Service.
If you are an employee of a Customer, the Customer is responsible for telling you how it uses your data. You can contact the Customer, or us, to exercise your rights (section 8).
Data you give us
Data collected when you use the Service
Customer Data
Data entered by the Customer and its Members. It can include employee personal data such as identity numbers, family, education, bank accounts, salaries, documents and photos.
We do not ask for and do not store card or bank credentials. Payments are made on the payment provider's page.
| Purpose | Legal basis |
|---|---|
| Provide your Account, Companies and the features you use | Agreement |
| Security, fraud prevention and incident handling | Legitimate interest, legal obligation |
| Service emails (verification codes, approvals, invitations) | Agreement |
| Support | Agreement |
| Study usage and data to improve the Service and build features | Legitimate interest |
| Bookkeeping, tax and lawful requests | Legal obligation |
When we study data to improve the Service, we look at how features are used and produce aggregated or de-identified statistics that do not identify any Customer or person.
We never sell, rent or trade personal data or Customer Data. We do not share it for anyone's marketing and do not use it for advertising.
Only with providers that help us run the Service, under agreements that oblige them to protect the data and use it only on our instructions:
We may also disclose data when the law or a binding order of a competent authority requires it, or to protect the rights and safety of our users and the Service.
Data is stored on Alurco's servers in Singapore. Where data is processed outside Indonesia, we apply the safeguards required by the PDP Law.
| Data | Kept for |
|---|---|
| Customer Data | While the Company uses the Service, then as in section 10 of the Terms of Service |
| Account data | While your Account exists |
| Sign-in history | 90 days |
| Activity and security logs | 90 days |
| Email delivery records | 180 days |
| Acceptance of these documents | While your Account exists |
| Support tickets and donations | While the Company uses the Service, or longer if the law requires |
After a Company stops using the Service, the Customer may ask for an export within 30 days. The data is then deleted within 90 days, except records the law requires us to keep. Backups are overwritten in their normal cycle.
No system is completely secure. If a personal data breach affects you, we will notify you and the authority as the PDP Law requires. Liability for incidents caused by third parties, providers outside our control, or users themselves is set out in section 7 of the Terms of Service.
Under the PDP Law you may:
You can update most Account data yourself in your profile. For anything else, email us (section 12). We reply within the periods set by the PDP Law. For Customer Data, we pass the request to the Customer or act on its instructions.
The web application uses only cookies needed for sign-in, security and your language choice. We do not use advertising cookies.
The Service is not intended for anyone under 18. We do not knowingly create Accounts for them.
We may update this Privacy Policy. Each version has a number and an effective date, and you will be asked to accept the new version in the Service. Material changes are announced at least 14 days before they take effect.
Email [email protected] for questions about privacy or anything else.