Skip to content
akunpas
id Try it free

Legal

Privacy Policy

Effective 29 October 2026. Akunpas is operated by PT Jipraks Digital Indonesia, Citra Maja City 2, Kabupaten Lebak, Banten.

This English version is provided for convenience. If it differs from the Indonesian version, the Indonesian version prevails.

This Privacy Policy explains what data we collect when you use Akunpas (the “Service”), what it is used for, who it is shared with, how long it is kept, and your rights over it. The Service is operated by PT Jipraks Digital Indonesia (“we” or “us”). This policy follows Indonesian Law Number 27 of 2022 on Personal Data Protection (the “PDP Law”).

1. Our role

  • Your account data (name, email, password) and subscription billing data: we are the personal data controller.
  • Data you enter into your books, such as the names, emails, phone numbers, tax IDs (NPWP) and addresses of your customers or suppliers: you, as the business owner, are the data controller, and we act as a data processor that processes it only on your instructions to provide the Service.

2. Data we collect

Data you give us

  • Account: full name, email address and password. Passwords are stored as an argon2id hash, never in their original form.
  • Company: business name, legal entity name, tax ID (NPWP), address, base currency and start of the financial year.
  • Bookkeeping: chart of accounts, journals, invoices, payments, tax rates, exchange rates, and customer and supplier contact details.
  • Communications: the content of emails or messages you send to our support team.

Data recorded automatically

  • Sign-in sessions: sign-in time and browser type (user agent), to keep your account secure.
  • Server logs: IP address, time of access and the page address requested, for security and troubleshooting.

Data from third parties

  • Payments: transaction status and details from our payment gateway partner. We do not receive or store your card numbers, PINs or bank account credentials.

3. What we use data for

  • Providing the Service: creating accounts, storing your books and preparing financial statements.
  • Processing subscriptions and payments, including sending invoices and receipts.
  • Sending emails related to the Service, such as verification, password resets, trial reminders and notices of important changes.
  • Keeping the Service secure, preventing abuse and handling incidents.
  • Meeting legal obligations, including tax obligations on subscription invoices.

We process data on the basis of performing our agreement with you (the Terms of Service), legal obligations, and our legitimate interest in keeping the Service secure. We do not sell your data, do not use it for advertising, and do not use your bookkeeping data for any other purpose without your consent.

4. Who we share data with

We share data only with parties that help us run the Service, only as far as they need it, and under a duty of confidentiality:

  • Cloud server providers, where the application and database run.
  • Cloudflare, for DNS, delivering the website and web application, and storing files and backups.
  • Our payment gateway partner, to process subscription payments.
  • Email service providers, to send emails from the Service.

We may also disclose data where required by law or by order of a competent authority.

5. Transfers outside Indonesia

Some of the providers above may process data outside Indonesia. Where they do, we make sure the protection is equal to or higher than the PDP Law requires, in line with the rules on cross-border transfers of personal data.

6. How long data is kept

  • Account and books: for as long as your account and company are active.
  • After an account or company is deleted: data is removed from active systems within 30 days, and from backups within a further 30 days, as old backups are rotated out.
  • Subscription billing records: kept for 10 years because of tax record-keeping obligations.
  • Server logs: up to 90 days.

Before deleting an account or company, export any data you still need. Deleted data cannot be recovered.

7. Data security

  • All connections to the Service use HTTPS.
  • Passwords are stored as argon2id hashes; session tokens are stored as hashes.
  • Integration credentials are stored encrypted (AES-256-GCM).
  • Each company’s data is kept separate, and access is limited by each member’s role.
  • The database is backed up regularly.

No system is completely secure. If a personal data protection failure affects your data, we will notify you and the competent authority within 3 x 24 hours, as the PDP Law requires.

8. Cookies and browser storage

  • Session cookie (erp_session): required to keep you signed in. It is httpOnly and sent only over HTTPS.
  • Theme preference (heroui-theme), stored in your browser’s localStorage, to remember whether you chose light or dark mode.
  • Language preference (akunpas-locale), stored in your browser’s localStorage when you pick a language for the website, so that choice is used on later visits.

We do not use advertising cookies or third-party tracking cookies.

9. Your rights

Under the PDP Law, you have the right to:

  • be informed about how your personal data is processed;
  • access and obtain a copy of your personal data;
  • correct inaccurate data;
  • request deletion of your personal data;
  • withdraw consent you have given;
  • restrict or suspend processing of your data;
  • obtain and transfer your data in a commonly used format.

You can change or export most data yourself in the application. For other requests, email [email protected] from your account’s email address. We will respond within the time limits set by the PDP Law.

If your data is held in another business’s Akunpas account, for example as their customer or supplier, send your request to that business as the data controller. We will help them fulfil it.

10. Children

The Service is intended for businesses and adults. We do not knowingly collect personal data from children under 18.

11. Changes to this Privacy Policy

We may update this Privacy Policy. We will announce significant changes by email or in the application before they take effect. The effective date at the top of this page shows the latest version.

12. Contact

Questions or requests about personal data can be sent to [email protected].

PT Jipraks Digital Indonesia
Citra Maja City 2, Kabupaten Lebak, Banten
jipraks.id