Loading…
Loading…
Last updated: May 2026. This Privacy Policy explains how Jastuy (“Platform”, “we”, “us”, or “our”) collects, uses, processes, and protects your personal data when you use our services. By using Jastuy, you agree to the practices described in this policy.
We collect the following categories of information:
Account data: Full name, email address, username, phone number, and profile photo
KYC data (jastuyers only): NIK (national identity number) and passport photo — stored encrypted at rest using AES-256-GCM
Bank & financial details (jastuyers only): Bank name and account number — stored encrypted at rest
Order & shopping data: Items purchased, item categories, price ranges, purchase frequency, destination addresses, payment records, and tracking information
Custom request data: Item descriptions, images, and buyer-jastuyer negotiation history
Communication data: Messages exchanged within the Platform’s chat system, support ticket content
AI-processed data: Images and product descriptions submitted for AI-assisted weight estimation, dimension detection, item categorisation, and image moderation
To facilitate and process orders, payments, and disbursements
To verify jastuyer identity and prevent fraud
To send transactional notifications via WhatsApp, email, and in-app channels
To resolve disputes and provide customer support
To personalise the Platform experience and display relevant trip listings
Shopping & order data (including purchase history, item categories, and browsing behaviour) may be used to update and curate the Recommended Items list and to improve the overall relevance of Platform suggestions
To conduct internal analytics, detect abuse, and improve Platform features and security
To comply with applicable Indonesian laws and regulations, including financial reporting and data retention requirements
Jastuy uses artificial intelligence features to enhance the Platform’s functionality. Please be aware of the following:
Weight & dimension estimation: Product descriptions and images may be submitted to a third-party large language model (LLM) to automatically estimate package weight and dimensions for shipping fee calculation purposes.
Image detection & moderation: Uploaded images (including product photos and custom request images) may be processed by a third-party AI model for item identification, categorisation, and content moderation to ensure compliance with Platform policies.
Advanced order management: AI assistance may be used to process, route, and manage orders, flag anomalous transactions, and assist with dispute analysis.
These AI processing activities involve sharing relevant data (images and text descriptions) with the third-party AI provider. Data submitted to AI models is processed strictly for the purposes stated above and is not used to train third-party models under applicable data processing agreements.
Upon successful completion of a purchase, Jastuy will share the buyer’s WhatsApp phone number with the respective jastuyer for the purpose of order coordination and delivery arrangement. By placing an order, buyers consent to this disclosure. This information is shared solely for order fulfilment purposes and must not be used by jastuyers for unsolicited marketing or any purpose unrelated to the transaction.
We do not sell your personal data. We share data only as follows:
Xendit — payment processing and fraud detection
Google — OAuth authentication (if you sign in with Google) and AI services (Gemini API) for item detection and moderation
Third-party LLM provider — AI-assisted weight/dimension estimation and advanced order processing (see Section 3)
Law enforcement and regulatory authorities — when required by applicable Indonesian law or pursuant to a valid legal order
All communications conducted within the Platform (including chat messages) may be monitored, logged, and reviewed for the purposes of dispute resolution, fraud prevention, and Terms of Service enforcement. Users should not use the Platform’s communication features for any purpose that violates these Terms. Attempts to communicate off-platform prior to a completed purchase are logged and may be acted upon by the Platform.
We retain your data for the following periods:
Account data: Retained while your account is active and for up to 2 years after account closure
KYC data: Retained for a minimum of 5 years as required by Indonesian financial regulations
Order & transaction data: Retained for a minimum of 5 years for legal and accounting compliance
Communication data: Retained for up to 3 years for dispute resolution purposes
You may request deletion of your account and associated data via the Support page, subject to applicable legal retention requirements
We implement industry-standard security measures to protect your data, including:
AES-256-GCM encryption for sensitive data at rest (KYC, bank details)
TLS/HTTPS encryption for all data in transit
Role-based access controls limiting data access to authorised personnel only
Regular security reviews and vulnerability monitoring
Under Indonesian Personal Data Protection Law (UU PDP No. 27/2022), you have the following rights:
The right to access your personal data held by Jastuy
The right to correct inaccurate personal data
The right to request deletion of your data (subject to legal retention requirements)
The right to withdraw consent for data processing, where applicable
The right to lodge a complaint with the relevant data protection authority
To exercise any of these rights, please contact us through the Support page.
We use session cookies strictly necessary for authentication and secure account access. We do not use third-party advertising or tracking cookies. Analytics, if any, are conducted using anonymised, aggregated data only.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify users of material changes through in-app notifications or email. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
For privacy-related enquiries or to exercise your data rights, please contact us through the Support page.