In short
This site doesn’t ask for your data

No forms, no ad pixels, no tracking cookies. Visits are only counted in aggregate. The only personal data we receive is what you send us yourself via WhatsApp or Instagram.

Used to reply to you, never sold

We never sell, rent or trade your data with anyone. No exceptions.

You can request a copy or deletion

Send a request via WhatsApp and we will handle it within 14 business days.

1. Who is responsible

This page applies to the bysentra.com website, our official Instagram account @bysentra, and our WhatsApp number +62 811-650-7345.

BYSENTRA (formerly BizApps.id) is operated by PT Web Properti Indonesia, Jl. Adam Malik No. 20, Kel. Silalas, Kec. Medan Barat, Kota Medan, Sumatera Utara 20114, Indonesia. Under Indonesia’s Personal Data Protection Law No. 27 of 2022 (UU PDP), we act as the data controller for the data described on this page.

BYSENTRA apps are not covered by this page. Data inside BYSENTRA Tools and BysCore is governed by each app’s own terms and, for companies, by the service agreement. For the WhatsApp AI agent (BysChat), see the AI agent privacy policy (in Indonesian).

2. What data we receive

a. When you visit this site

Like any website, our server records technical data for every page request: IP address, browser type, the page opened, and the time. These records are used to keep the site running and to block suspicious traffic, not to build a profile of you.

b. When you contact us

If you tap a WhatsApp button or message us on Instagram, we receive what you send: your name, number or account, and the message. Pre-filled opening messages (for example, “I’d like a BysCore demo”) can be edited before you send them.

c. When you open our apps

The “Claim 20,000 Bys” button and app links take you away from this site. Data you enter there is governed by that app’s terms.

3. Cookies & measurement

This site does not set tracking cookies, does not use Google Analytics, and does not use the Meta Pixel. Fonts are served from our own server, so visiting this site sends no requests to Google Fonts.

Site traffic is served through Cloudflare, which may set technical cookies to tell visitors apart from bots. We do not use those cookies for advertising or measurement.

To know how many visits we get and how fast pages load, we use Cloudflare Web Analytics. It counts visits in aggregate (pages opened, country, device type, load speed) without setting cookies and without tracking you across other sites. You can block it with a tracker blocker in your browser; the site remains fully usable.

If we ever add another measurement tool, this section will be updated first, including how to opt out.

4. What the data is used for

  • Replying to the messages and requests you send.
  • Preparing an offer, demo or answer that fits your business.
  • Keeping the site secure and available (technical data in section 2a).
  • Meeting bookkeeping and tax obligations if a conversation becomes a transaction.

We do not send unsolicited bulk messages and do not add you to broadcast lists without your consent.

Legal basis: your consent when you contact us, and our legitimate interest in responding to requests you make yourself, in line with Article 20 of the UU PDP.

5. Who else processes the data

We do not sell, rent or trade your data to anyone. Only the service providers we use to operate are involved:

  • Our server provider, where this site runs.
  • Cloudflare, which serves site traffic, filters attacks, and counts visits in aggregate (section 3).
  • Meta Platforms (WhatsApp, Instagram): if you contact us through those channels, messages pass through Meta’s systems and are subject to Meta’s privacy policy.

Beyond that, data is only accessed by people on our team who need to reply to you. We may disclose data when required by law or a lawful official request. Otherwise, we don’t.

6. How long data is kept

  • Server logs: rotated automatically every day and deleted after about 14 days.
  • Conversations that don’t continue: kept for at most 2 years after the last contact, then deleted.
  • Conversations that become transactions: kept for as long as the engagement lasts, plus the period required by bookkeeping and tax rules.

7. Your rights

Under the UU PDP, you have the right to:

  • request a copy of the personal data we hold about you;
  • request a correction if something is wrong;
  • request deletion;
  • withdraw consent you have given;
  • object to the use of your data for marketing, without giving a reason.

Withdrawing consent does not undo processing that already took place, and does not remove records we are legally required to keep.

8. How to request a copy or deletion

Send a request via WhatsApp +62 811-650-7345 or a direct message on Instagram @bysentra. Include the name and number or account you used so we can find your data.

We handle requests within 14 business days. We will let you know when it is done, or explain why if any part cannot be deleted due to a legal obligation.

Copies of messages kept on Meta’s side (WhatsApp, Instagram) are governed by Meta’s own privacy policy. Deletion on our side does not automatically delete copies there.

9. Security

This site can only be opened over an encrypted connection (HTTPS). Access to the server and to conversations is limited to the people who need it for their work.

We won’t claim more than that. No system is completely immune, and grand security promises usually mean little. If a personal data breach occurs, we will notify it as required by the UU PDP.

10. Not for children

Our services are intended for business use and are not directed at children under 18. If you learn that a child’s data has been sent to us, let us know and we will delete it.

11. Changes to this page

If anything changes, the “last updated” date above changes too. For changes that significantly affect your rights, we will notify you through the contact channel you used.