1. Scope

This policy applies to Insimen Marketplace, including seller stores, product catalogs, carts, checkout, orders, payments, delivery, ratings, and Seller Center.

2. Data we may process

The data involved depends on the features you use and the information you choose to provide.

• account identity, contact, and delivery information you provide
• seller store, product, stock, price, image, and fulfillment information
• cart, order, payment, delivery, refund, dispute, rating, and support information
• the minimum technical data needed to protect sessions, detect misuse, and protect transactions

3. Sources and collection

Data may come from you, another member's action connected to your account, an authorized party in a service process, or your browser and device when a feature is used. We seek to explain the need when data is requested and do not request unrelated data without a reasonable purpose.

• You may provide data through forms, settings, Chat, uploads, email, support, or a service workflow.
• Technical data such as sessions, devices, times, and security signals may be created automatically to operate the service.
• When an account is created, we record the connection IP address and its estimated country for account history and security. The estimate uses reference data held on our server without sending the IP address to a location lookup service. A VPN or the network you use can affect the result; the connection country does not establish nationality or home address. It also helps set the initial language. You can still choose Indonesian or English.
• Data from another party is processed only when connected to a function, access decision, report, or lawful obligation.

4. Why data is used

Data is used only for legitimate purposes connected to the service.

• show catalogs, manage carts, create orders, and send transaction updates
• verify seller eligibility, maintain catalog quality, and handle support or disputes
• prevent fraud, misuse, breach of terms, and risky activity
• meet transaction, accounting, audit, security, and applicable legal obligations

5. Visibility and sensitive data

Some visibility choices can be managed in product settings.

• Buyer address, contact, and order details are used and shared only as needed for payment, fulfilment, delivery, support, fraud prevention, and applicable obligations.
• Sellers must not use buyer data for marketing outside a transaction, add it to personal lists, or share it without a lawful basis.
• Seller catalog information may be public; payment, address, bank, and verification data remains restricted to the relevant operational and legal need.

6. Store, catalog, and transaction data

We process seller data to create and manage a store, show catalogs, manage stock, support orders, and maintain transaction history. Certain information such as store name, products, prices, ratings, and images may be public because it is needed for Marketplace.

For buyers, we process cart contents, order details, address, recipient contact, payment status, and delivery information so a transaction can operate. Information not needed for a public catalog is not displayed publicly.

• Seller bank and verification documents are used only for permitted verification or payouts when those features are available.
• Transaction records may contain product, price, store, and status snapshots so an order remains traceable if a catalog changes.
• We do not sell buyer or seller personal data as a commodity.

7. Transaction recipients

We share the minimum data needed for a seller to fulfil an order and for a buyer to receive the product. A seller may receive relevant recipient and delivery information, while a buyer can see store and delivery information needed to monitor an order.

Payment, courier, and infrastructure providers may process information according to their function and may have their own terms. Use official channels and review relevant notices before providing extra information.

• Address and contact details must not be used for marketing outside the transaction without a lawful basis.
• Operations access is limited by role and need for support, disputes, security, or compliance.
• Recipients must use data only for the relevant permitted purpose.

8. Transaction security and fraud prevention

Device, session, account activity, transaction pattern, and security-signal data may be used to protect accounts, prevent fraud, maintain order integrity, and investigate breaches. A security review can result in delay, verification, or a temporary restriction explained reasonably when safe.

We aim not to store passwords, one-time codes, tokens, or payment credentials in ordinary operational logs. Never send these details to a seller, buyer, or support through an unrequested field.

• Important activity may be recorded for audit, investigation, and incident recovery.
• We may retain relevant evidence to handle a dispute or suspected misuse.
• Controls are continuously evaluated, but account safety also depends on user care with devices and links.

9. Retention, disputes, and your rights

Transaction, payment, delivery, support, and audit data can be retained as needed to operate the service, meet obligations, prevent fraud, resolve disputes, or maintain lawful records. When no longer needed, it is deleted, anonymized, or restricted under applicable processes.

You may request access, correction, or deletion of certain data subject to applicable law. We may verify identity and cannot always remove records needed for transactions, security, audit, tax, disputes, or legal obligations.

• A contact or address update after an order is placed may not affect a parcel already handed to a courier.
• Account deletion does not necessarily remove transaction records required to be retained.
• A privacy request cannot be used to access another buyer's, seller's, or order's data.

10. Cookies, notifications, and policy changes

Cookies and similar technologies maintain sessions, security, language preferences, carts, and Marketplace features. Disabling necessary cookies may prevent login, cart, checkout, or order status from working correctly.

We may send order, payment, delivery, security, or important update notices through available channels. This policy may change when features or rules change; the date above identifies the applicable version.

• You can manage some notification preferences from your account when available.
• Important transaction notices may still be sent where needed for an order or security.
• The latest policy is always available on the Marketplace page.

11. Sharing

We do not sell personal data as a commodity. Data may be shared on a limited basis with:

• buyers, sellers, and Insimen staff who need minimum information to fulfil an order or provide support
• payment, logistics, infrastructure, or operational providers needed for a transaction
• competent authorities, advisers, or dispute-resolution parties when required by law or needed to protect rights and safety

12. Retention and security

Data is retained only as long as needed to operate the service, protect users, resolve disputes, or meet applicable obligations. It is then deleted, anonymized, or restricted as appropriate.

We use technical and organizational controls proportionate to risk. No digital transmission or storage can be guaranteed 100% secure, so users must also protect their accounts and devices.

13. Your requests

Subject to applicable law, you may request access, correction, restriction, or deletion of certain data. Some information may need to be retained for security, audit, service, or legal reasons. We will explain a decision where reasonably possible.

14. Cookies and similar technology

Cookies or similar technologies may be used for sessions, language preferences, security, and product operation. Disabling necessary cookies may prevent parts of the service from working.

15. Updates

This policy may be updated when the product, processing practices, or legal requirements change. The latest version is identified by the update date above; material changes may receive an additional notice through an appropriate channel.