This policy explains how PT Indo Smart Media ("we"), operator of Pakades, processes personal data of users of pakades.online, the Pakades app and the Pakades Merchant app, in line with Indonesian Law No. 27 of 2022 on Personal Data Protection.
1. Data we collect
- Account data: name, phone, email, password (stored as a hash), profile photo, language.
- Transaction data: orders, bookings, visit dates, guests, delivery addresses, payments, balance history, PPOB transactions and shipments.
- Location data: the address point you choose on the map and, if you allow it, your device location while choosing an address. We do not track buyers in the background.
- Partner data: shop name, address and map point, region code, product photos, opening hours, payout bank account (encrypted).
- Conversations: messages to PakadesVA, support tickets and chat with drivers for Kuantar orders.
- Technical data: IP address, device type, app version, notification token and security logs.
2. How we use data
- To provide the service: create and process orders, issue e-tickets, calculate delivery, process payments and refunds.
- To guide users with PakadesVA and greet them by profile.
- Security: preventing fraud, abuse and unauthorised access.
- Communication: OTP, order status notifications and service information. Promotions only if you have not opted out.
- Legal, bookkeeping and tax obligations.
3. Who receives data
- Shop partners receive your name, delivery address/point and the order or booking details needed to serve you.
- Kuantar (kuantar.online, operated by PT Indo Smart Media) receives your name, phone, pickup/drop-off points and order details for Ride, Car, Send, Food, Mart and village deliveries by its driver-partners. The balance in Pakades is KuantarPay: your Pakades account is linked to the Kuantar account with the same phone number (or one is created), and balance payments, refunds, sales earnings, top-ups and withdrawals are recorded and processed in KuantarPay.
- Payment provider: Xendit (invoices, bank transfer, e-wallets, QRIS, payouts).
- Couriers via Biteship for intercity shipping.
- PPOB: IAK (directly or through Kuantar) for airtime, data, tokens and bills.
- Infrastructure: server providers in Indonesia, Firebase Cloud Messaging (notifications), email and WhatsApp OTP providers, OpenStreetMap/Nominatim/OSRM for maps, and the AI model provider behind PakadesVA (no payment data).
We do not sell personal data.
4. Storage & security
Data is stored on protected servers. Passwords are hashed (bcrypt), sensitive data such as bank accounts and API keys are encrypted with AES-256-GCM, connections use HTTPS, and admin access is role-limited, protected with 2FA and audit-logged. Transaction data is kept as long as legally required for bookkeeping (generally 10 years).
5. Your rights
You may access, correct, withdraw consent and request deletion of your data. Most of this can be done in the Account menu; account deletion is described on the Delete Account page. For other requests contact info@pakades.online.
6. Children
The service is intended for users aged 17 and over or accompanied by a parent/guardian.
7. Changes
Changes are announced on this page and, when important, by app notification.
Contact: PT Indo Smart Media, Pesona Prima Pataruman 2 Blok A1 No. 6, Pataruman, Cihampelas, Kabupaten Bandung Barat, Jawa Barat, Indonesia. Email info@pakades.online, WhatsApp +62 851-3719-0353.
Last updated: 30 Oct 2026