Privacy Policy
In effect since 7 October 2026
This policy explains what data the TeRa app and service collect, what it is used for, and what your rights are. TeRa is run by Prima Interaktif (“we”), which acts as the controller of your personal data.
In short
- We keep your WhatsApp number, the name you enter, and the messages sent to you.
- We show no ads, install no trackers, and do not sell your data.
- You can delete your account at any time from inside the app.
Data we collect
What you give us
- WhatsApp number. We receive it from WhatsApp when you send the sign-in message to our number. It is the identity of your account.
- Name. What you enter the first time you sign in; you can change it at any time.
- Language choice.
What we receive from WhatsApp when you sign in
- The content of the sign-in message you send (it holds a one-time code), the sender’s number, and the user identifier WhatsApp assigns for our business account.
What is created as you use the app
- Device data: a random identifier the app creates for this installation, the system (Android or iOS), the app version, and a notification token from Google so that we can send notifications to your phone.
- Sign-in sessions: when and from which device you signed in, so that you can see and sign out devices on your account.
- IP address when you start signing in, to prevent abuse.
- Messages for you: messages businesses send to your number, their attachments, and a record of whether a message was read and whether its notification was sent.
We do not request or access your contacts, location, photos, microphone or camera.
What the data is used for
- Creating and securing your account, including telling you when it is signed in on another device.
- Delivering messages from businesses that send to your number, and sending the notification.
- Showing the sending business how many messages arrived and were read.
- Preventing abuse and keeping the service running.
The basis for this processing is providing the service you asked for by registering, our legitimate interest in keeping the service secure, and your consent where it is required, such as the notification permission on your phone.
Where messages come from
Messages in your inbox are sent by businesses (a restaurant or a building manager, for example) that have your WhatsApp number from their own relationship with you. That business is responsible for what it sends and for how it obtained your number. When a business sends to a number that has no TeRa account yet, we keep the message for at most 30 days and show it only if the owner of that number registers.
Sending businesses do not see your name, devices or account data in TeRa. They only get counts: how many numbers are registered, how many messages were read, and how many notifications were sent.
Who the data is shared with
We do not sell personal data. Data is processed only by the providers we use to run the service:
| Provider | What for | Data involved |
|---|---|---|
| Google Cloud | Servers and storage (Indonesia and Singapore) | All service data |
| Firebase Cloud Messaging (Google) | Sending notifications to phones | Notification token, title and start of the message |
| WhatsApp Business Platform (Meta) | Signing in | The sign-in message and the confirmation reply |
We may disclose data when required by law or by a valid order from an authority.
Storage outside Indonesia
Some servers are in Singapore, and the providers above may process data in other countries. We choose providers that apply adequate data protection.
How long data is kept
- Account, devices and sessions: for as long as your account exists. A session ends by itself after 90 days without use.
- Messages: until they expire, are withdrawn by the sender, or your account is deleted.
- Sign-in attempt records (including the IP address): deleted periodically; not kept long term.
- Messages for numbers that are not registered: at most 30 days.
Deleting your account
Open Profile in the app and choose Delete account. Your account, sessions and device registrations are deleted at once. The record that a message was sent and read stays for the sender’s statistics, but without your number and with no link to you. Other ways and the details are on the Delete account page.
Your rights
Under Indonesia’s Law Number 27 of 2022 on Personal Data Protection, you have the right, among others, to:
- know what data we hold about you and receive a copy;
- correct data that is wrong;
- have data deleted and its processing ended;
- withdraw consent you have given;
- object to certain processing.
Send requests to privacy@primeoffice.id. We answer within 3 x 24 hours for requests governed by the law, and may first need to confirm that the number in question is yours.
Security
All connections to the service are encrypted. A sign-in code is valid for a few minutes and can be used once, and only the device that started signing in can complete it. Attachments are kept in private storage and opened through links that work for a few minutes. No system is entirely free of risk; if a data protection failure affects you, we notify you as the law requires.
Children
TeRa is not intended for children under 13, and we do not knowingly collect their data. If you learn that a child has created an account, contact us so that it can be deleted.
Changes to this policy
If this policy changes in a meaningful way, we tell you through the app or this page before the change takes effect. The date at the top shows the version in force.
Contact
Prima Interaktif Email: privacy@primeoffice.id