Privacy Policy - MTM FastOps

This Privacy Policy describes how PT Mitra Telemedia Manunggal (“we,” “us,” or “our”) collects, uses, and protects information obtained through the MTM FastOps mobile application (“App”).

MTM FastOps is designed exclusively for use by internal field technicians of PT Mitra Telemedia Manunggal in carrying out ISP operational tasks. Access to the App is granted solely to employees or technicians who have been authorized by a Company administrator. By using the App, you agree to the terms of this Privacy Policy.

1. Information We Collect

To support field operations, the App collects the following categories of information:

2. How We Use Your Information

All collected data is used solely for the following purposes:

• Managing and distributing work orders to field technicians
• Monitoring assignment progress and job completion
• Generating internal operational reports for the Company
• Integration with the Company’s internal HR/ERP systems for payroll and performance evaluation
• Improving App performance and reliability

We do not use your data for marketing, advertising, or any commercial purposes, and we do not sell your data to any third party.

3. Push Notifications

The App uses push notification services to deliver alerts related to new assignments, ticket updates, and important operational information. Device tokens used for push notifications are stored securely and used exclusively for internal Company messaging purposes.

4. HR/ERP System Integration

The App integrates with the Company’s internal HR/ERP systems to synchronize employee data, attendance summaries, and performance reports.

Data exchange between systems occurs within the Company’s internal network environment under applicable security protocols. Only information relevant to operational functions is exchanged — no sensitive data beyond what is operationally necessary is transmitted.

5. Location Data — Additional Terms

Given the nature of on-demand location capture, we apply the following safeguards:

• Location is captured only on explicit user action (status update: Started / Completed / Incomplete) — not continuously or in the background
• Each location capture is a single GPS coordinate tied to a specific work order event
• Technicians will receive a clear in-app indicator whenever location is being accessed
• Historical location records are retained for a maximum of 90 days, after which they are automatically and permanently deleted
• Location data is not shared with any external parties

6. Field Photos — Additional Terms

• Photos uploaded through the App become part of the Company’s work order records
• Photos are used exclusively for operational documentation purposes
• Photos are retained for the duration of the active user account and deleted within 30 days of account deactivation

7. Log Data

The App automatically collects log data including IP address, device type, OS version, features used, and timestamps of activity. Log data is used for diagnostics, system maintenance, and App performance improvement.

8. Data Security

We are committed to protecting your information. Security measures we implement include:

• Data encryption in transit using TLS
• Encryption of data at rest
• Role-based access control
• Regular access monitoring and audit logging

While we strive to use commercially acceptable means to protect your data, no method of internet transmission or electronic storage is 100% secure. In the event of a data breach affecting your Personal Information, we will notify the relevant parties in accordance with applicable Indonesian law.

9. Data Retention

The following outlines how long each category of data is retained:

• Employee identity (name, ID, email, phone): Duration of active account + 30 days post-deactivation
• On-demand location coordinates (per status update): 90 days from date of capture
• Field documentation photos: Duration of active account + 30 days post-deactivation
• Work order & job history: Duration of active account + 1 year (audit purposes)
• Log & diagnostic data: 90 days
• Push notification tokens: Duration of active account

10. Your Rights

As a user covered under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to the processing of your data under certain conditions
• Lodge a complaint with the relevant Indonesian data protection authority

To exercise any of these rights, please contact your Company administrator or reach us directly through the contact information in Section 14.

11. Third-Party Services

The App may utilize third-party services such as push notification infrastructure or analytics tools. These services are bound by their own privacy policies and are used solely to support App functionality. We do not share personal data with third-party services beyond what is technically necessary for those functions.

12. Children’s Privacy

This App is intended exclusively for employed adults within the Company. We do not knowingly collect Personal Information from individuals under the age of 18. If we become aware that such data has been collected, we will take immediate steps to permanently delete it from our systems.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. We will notify you of any significant changes through the App or via email. You are advised to review this Privacy Policy periodically. Changes take effect upon publication.