1. Executive Overview

Geosaku is an enterprise-grade GPS tracking and fleet intelligence platform designed for asset monitoring, logistics optimization, security enforcement, and operational analytics. This Privacy Policy describes how personal data, location data, operational telemetry, and system information are collected, processed, stored, secured, and shared.

This policy is designed to align with:

• Indonesia Personal Data Protection Law (UU PDP No. 27/2022)
• GDPR principles where applicable
• Enterprise data governance best practices

Anugrah Pacific Technology acts as either:

• Data Controller for direct consumer services
• Data Processor when providing services to enterprise clients

2. Definitions

• Personal Data: Any data identifying an individual directly or indirectly.
• Sensitive Data: Location, behavioral telemetry, or operational data that could expose individual movement or security patterns.
• Client Organization: Corporate entity deploying Geosaku for fleet or asset management.
• User: Individual accessing the Geosaku platform (driver, operator, admin, etc.).

3. Data Categories Processed

3.1 Location & Telematics Data

• Real-time GPS coordinates
• Historical route history
• Vehicle or asset telemetry
• Geofencing events
• Motion, ignition, and sensor data

3.2 Identity & Account Data

• Name, contact details, organization
• Role-based access permissions
• Authentication credentials

3.3 Technical & Infrastructure Data

• Device identifiers and SIM data
• IP address and session metadata
• Application performance logs
• Security audit logs

3.4 Operational Intelligence Data

• Fleet usage analytics
• Asset deployment patterns
• Alerts, incidents, and exception reports

4. Legal Basis for Processing

Processing is based on one or more of the following:

• Explicit consent
• Contractual necessity
• Legal obligations
• Legitimate business interests including asset security and operational safety

Enterprise clients remain responsible for lawful employee notification and consent where required.

5. Purpose of Data Processing

Data is processed to:

• Deliver GPS tracking services
• Prevent theft, misuse, and operational risk
• Support fleet optimization and analytics
• Maintain cybersecurity and infrastructure stability
• Fulfill contractual obligations
• Meet regulatory requirements

Data is not sold or used for unrelated marketing without explicit consent.

6. Data Governance Framework

Geosaku follows enterprise data governance principles including:

• Data minimization
• Purpose limitation
• Storage limitation
• Accuracy assurance
• Confidentiality and integrity protection

Internal access follows least-privilege principles.

7. Data Security & Technical Safeguards

Security controls include:

• Encryption in transit and at rest where applicable
• Role-based access control and MFA where supported
• Continuous monitoring and audit logging
• Incident detection and response procedures
• Secure infrastructure and network segmentation

Security controls are periodically reviewed and improved.

8. Data Retention & Lifecycle Management

Data retention is determined by:

• Contractual requirements
• Regulatory obligations
• Security investigation needs
• Operational analytics (anonymized where possible)

Expired data is securely deleted or anonymized.

9. Data Sharing & Third Parties

Data may be shared with:

• Authorized enterprise clients
• Cloud infrastructure providers
• Telecommunications or satellite partners
• Professional advisors (legal/security)
• Regulators where legally required

Third parties must comply with equivalent data protection standards. Cross-border transfers follow applicable safeguards.

10. Enterprise Client Responsibilities

• Inform personnel about tracking activities
• Obtain legally valid consent where required
• Use data responsibly and lawfully
• Maintain internal data governance policies

Geosaku does not control internal client data usage.

11. Data Subject Rights

Subject to applicable law, individuals may:

• Access their data
• Request correction or deletion
• Restrict processing
• Withdraw consent
• Request data portability
• Lodge complaints with regulators

12. Incident & Breach Response

• Impact will be assessed promptly
• Clients will be notified where required
• Authorities will be informed per regulatory obligations
• Remediation steps will be implemented

13. International Data Transfers

• Contractual safeguards may be applied
• Security equivalence standards maintained
• Regulatory compliance ensured

14. Audit & Compliance

• Security documentation availability
• Compliance reporting where applicable
• Periodic internal assessments
• External certification may be pursued as business requirements evolve

15. Policy Updates

This Privacy Policy may be updated due to regulatory changes, technology enhancements, or service evolution.

16. Contact & Data Protection Inquiry

Geosaku by Anugrah Pacific Technology
Email: info@geosaku.co.id
Address: Brooklyn SOHO Alam Sutera West Tower 6D, Jl. Alam Sutera Boulevard No.Kav. 22 & 26, Kota Tangerang Selatan, Banten 15320

17. Consent & Acceptance

By accessing or using Geosaku services, users and enterprise clients acknowledge they have read, understood, and agreed to this Privacy Policy, including processing of location and operational data for legitimate business purposes.