Skip to content

Privacy Policy

Selsol Indonesia ("we") respects your privacy and is committed to protecting your personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP).

1. Data We Collect

  • Identity data: name, email address, phone/WhatsApp number.
  • Account data: username, password (encrypted), role (buyer/seller).
  • Listing data: title, description, price, photos, and location you upload.
  • Verification data (optional): KTP/business documents - encrypted and deleted after verification.
  • Technical data: IP address (hashed for view logs), device, and on-site activity.

We process data based on your consent and to deliver our services: creating an account, publishing listings, facilitating buyer-seller communication, processing payments for paid features, preventing fraud, and complying with legal obligations.

Consent is given explicitly at registration (the checkbox is not pre-ticked). The time of consent is recorded. You may withdraw consent at any time by deleting your account.

4. Data Sharing

We do not sell your personal data. Data is shared with the following third parties, as needed to provide our service:

  • Midtrans & Xendit (payment providers) - transaction data to process payments for paid features.
  • Google (Sign in with Google, optional) - if you choose "Sign in with Google", your Google name, email, and profile photo are shared with Pasarol to create/link your account. Processed on Google's servers (abroad).
  • Fonnte (WhatsApp verification & notifications) - your WhatsApp number is sent to Fonnte to deliver OTP verification codes and account/listing-related notifications.
  • hCaptcha (anti-bot protection) - browser interaction signals (not personal content) are sent to hCaptcha when registering/logging in to prevent automated/fake sign-ups. Servers located abroad.
  • Gravatar (profile photos) - your email address is hashed and sent to Gravatar (Automattic) to display a profile photo, if you have one registered there.
  • Microsoft Clarity (behavioral analytics, optional) - only if you consent via the cookie banner ("Accept All"). Behavioral data is pseudonymized, not fully anonymous - see Section 7.
  • Matomo (analytics, self-hosted) - runs on our own servers; data is NOT sent to any third party for this analytics.
  • OpenStreetMap / Nominatim (maps & location search) - when you search for an address on the listing form or view a listing's location map, the request is sent to the OpenStreetMap mapping service (third party, no API key/account required).
  • Authorities, where legally required.

Contacting a seller via the "Chat WhatsApp" button opens your own WhatsApp app - Pasarol does not send your data to WhatsApp; the message is sent directly from your device once you press send.

A seller's WhatsApp number is only shown according to the visibility preference they set.

5. Storage & Security

Verification documents are encrypted (AES-256) and deleted after the verification decision. Security logs are kept for at most 1 year, other logs for 90 days, then archived with IP anonymised. Passwords are never stored in plain text.

6. Your Rights as a Data Subject

Under UU PDP, you have the right to: access, correct, update, and erase your data, withdraw consent, and request a copy of your data (portability). Data export/erasure requests can be made through the WordPress privacy tools or by contacting us.

7. Cookies

We use cookies for the login session and the language preference (pasarol_lang). We do not use IP geolocation to determine language. If you consent via the cookie banner, we also use cookies from Microsoft Clarity and Matomo for analytics - see Section 4 for the third parties involved and your choices (Essential Only / Reject All / Accept All, changeable any time via the "Cookie preferences" link in the footer).

8. Contact

For privacy questions or data-rights requests, contact: [email protected].

Use of Content for Promotion

Pasarol may use your listing content (photos, title, price, and location) to promote the marketplace on its official social media channels. This use, your consent, and how to withdraw it are described in full in section 7.5 of our Terms & Conditions. You can withdraw consent at any time in Profile > Promotion Preferences.

Data Controller

The data controller is Selsol Indonesia. For privacy questions or data-subject requests (access, correction, erasure, portability), contact [email protected]. Website: www.pasarol.com.