Privacy Policy

TrackNotify, operated by Digital Park Indonesia (TrackNotify). Effective 23 September 2026.

TrackNotify is an order-tracking and customer-messaging tool used by our own online stores and their customer service team. This policy explains what we collect, why, and how to have it deleted.

1. Information we process

• WhatsApp messages and media exchanged between a customer and our business phone numbers, including the sender's WhatsApp phone number and profile name, message text, images (such as bank transfer receipts), timestamps, and delivery status.
• Order details the customer gives us: name, delivery address, phone number, products ordered, payment method, and notes.
• Delivery information from our courier, such as tracking number and parcel status.
• Advertising reference data when a chat starts from a Click-to-WhatsApp ad (ad and campaign identifiers), used to measure which ad produced an order.
• Staff activity: which agent replied, when, and what changed on an order.

We do not ask for, and customers should not send, government identity numbers, full payment card numbers, or passwords.

2. Why we process it

• To answer customer questions and record orders.
• To ship parcels and keep customers updated about delivery.
• To verify bank transfer payments before shipping.
• To generate assisted replies with an AI model, reviewed and supervised by our staff.
• To measure advertising results and prevent duplicate or fraudulent orders.

3. Who else processes the data

• Meta Platforms — WhatsApp Business Platform (Cloud API) delivers the messages.
• Supabase — database and file storage (Singapore region).
• Railway — application hosting (Singapore region).
• Anthropic — the Claude API generates suggested replies from the conversation. Anthropic does not use API content to train its models.
• Courier partners (such as ParcelDaily and J&T Express) — name, address, phone, and parcel contents, so the parcel can be delivered.
• Telegram — internal notifications to our own team (order summaries; no customer address).

We do not sell personal data and do not share it for third-party advertising.

4. How long we keep it

• Chat messages: up to 12 months, then deleted.
• Payment receipt images: deleted automatically once the parcel is delivered.
• Order records: up to 5 years, for accounting and dispute handling.

5. Your choices

A customer can ask us to access or delete their data at any time by emailing privacy@digitalparkindonesia.com from the phone number or email used, or by sending a WhatsApp message to the same business number. See Data Deletion Instructions. We answer within 30 days.

A customer can also stop receiving messages from us by replying "STOP" or by blocking the number in WhatsApp.

6. Security

Data travels over encrypted connections (HTTPS). Access to the dashboard requires a personal account, and staff accounts only see the stores they work on. Server keys are stored as environment variables and never shared with customers.

7. Children

Our services are for adults. We do not knowingly collect data from anyone under 18.

8. Changes

If this policy changes, the new version appears on this page with a new effective date.

9. Contact

Digital Park Indonesia (TrackNotify) · digitalparkindonesia.com · privacy@digitalparkindonesia.com