Privacy Policy

This is the official Privacy Policy for the Interlude mobile and web applications and related services operated by PT Straventa ("Straventa", "we", "us", or "our"). It explains what information we collect, how we use it, when we share it, and the choices available to you.

If you do not agree with this Privacy Policy, please do not use the Service.

1. Introduction

Interlude is a construction project management platform operated by PT Straventa, based in Indonesia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (together, the "Service").

By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information — name, email address, phone number, employee ID, department, job title, and role (admin, project manager, field worker).
• Project and activity data — project names, addresses, start/end dates, budgets, tasks, site instructions, material orders, comments, and approval records that you or your organization create inside the Service.
• Photos and documents — images captured with your device camera or uploaded from device storage to document site progress, inventory, attendance, and activities. See Section 3 for details on camera usage.
• Location data — GPS coordinates captured when you check in or check out of a site via the attendance feature, to verify on-site presence.
• Attendance and payroll data — check-in/out timestamps, site assignments, hours logged, leave requests, and payroll calculation inputs.
• Device and diagnostic information — device model, operating system version, app version, crash reports, and anonymized usage analytics used to diagnose bugs and improve the Service.
• Authentication data — securely hashed passwords and session tokens. We never store passwords in plain text.

3. Mobile App Permissions

The Interlude mobile app requests the following device permissions on Android and iOS. Each permission is used strictly for the feature described below, and you may revoke any permission at any time in your device settings.

• Camera (android.permission.CAMERA) — required to capture photos of construction sites, activities, and inventory for attachment to tasks, site instructions, material orders, and photo documentation reports. Photos are uploaded to our secure servers and linked to the activity that you attach them to. We do not access the camera in the background or without your explicit tap on a "Take Photo" button.
• Photos / Media storage (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO) — required to let you select existing photos and documents from your device gallery to attach to activities. We only access files you explicitly pick via the system file picker.
• Location — fine and coarse (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) — required by the attendance check-in and check-out feature to verify that you are physically at the assigned site. Location is only captured at the moment you tap "Check In" or "Check Out" and is attached to the resulting attendance record. We do not track location in the background.
• Notifications (POST_NOTIFICATIONS) — required to deliver in-app and push notifications about new task assignments, approval requests, and other workflow events you have opted into.
• Audio (RECORD_AUDIO) — if declared, this is a transitive dependency of the camera plugin for video capture. The Service does not currently use audio recording.

Permissions marked "required" only apply when you use the feature that needs them. The app functions with limited capability when a permission is denied — for example, denying camera prevents photo attachment but does not block other features.

4. How We Use Your Information

• To operate and maintain the Service and provide the features you use.
• To authenticate you and keep your account secure.
• To process and display project, activity, attendance, and payroll data.
• To send you notifications you have subscribed to.
• To diagnose technical problems, prevent fraud, and improve reliability.
• To comply with legal obligations and respond to lawful requests from authorities.

5. Information Sharing

We do not sell your personal information. We share information only in these limited cases:

• Within your organization — data you create (tasks, photos, comments, attendance records) is visible to other authorized users in your tenant according to their role-based permissions.
• Service providers — we use trusted third-party infrastructure providers (hosting, database, push notifications, crash reporting) who process data on our behalf under strict confidentiality agreements.
• Legal compliance — when required by law, court order, or valid legal process, or to protect the rights, property, or safety of Interlude, our users, or others.
• Business transfers — if Straventa is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to the same privacy protections.

6. Data Storage and Security

We store your data on secure servers operated by reputable infrastructure providers, with encryption in transit (HTTPS / TLS 1.2+) and at rest. Passwords are hashed with industry-standard algorithms. Access to production systems is restricted to authorized personnel and logged for audit.

Despite our safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but we commit to notifying you and the relevant authorities within 72 hours of discovering a personal data breach that affects your information, as required by applicable Indonesian data protection law.

If you need to request deletion of your account or personal data, email [email protected] from the email address associated with your account. We verify ownership before processing the request.

7. Data Retention

We retain your information for as long as your account is active and your organization uses the Service, plus a reasonable period afterwards for legal, accounting, and backup purposes. When your organization terminates its use of the Service, we will delete or anonymize your personal data within 90 days unless we are legally required to retain it for longer.

8. Your Rights and Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to retention obligations).
• Object to or restrict certain processing of your data.
• Receive your data in a portable format.
• Withdraw consent you have given, without affecting the lawfulness of prior processing.
• Lodge a complaint with the relevant Indonesian data protection authority.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

The Service is intended for use by adults in a workplace setting and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top of this page will always reflect the latest revision. Continued use of the Service after an update constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

PT Straventa
Email: [email protected]
Support: [email protected]
Website: interlude.straventa.com