Privacy Policy

Effective 1 January 2026

This Privacy Policy explains how PT Generation Infinity Indonesia and Genfity Digital Solutions (together, “Genfity”, “we”, “us”, or the “Platform”) obtain, collect, process, analyse, store, update, display, transfer, disclose, and protect your Personal Data.

This policy applies to every user (“you”, “Merchant”, “User”, or “Customer”) who accesses or uses our dashboard, platform, website, applications, and Genfity Order services.

We provide this policy to explain our approach to personal data protection and our commitment to protecting your Personal Data.

By visiting, accessing, or using Genfity Order, you acknowledge that you have read and understood how your Personal Data is collected and processed as described here.

Personal Data means information that identifies, or can be used to identify, an individual. When you use Genfity Order, we may collect these categories:

• Identity data: Full name, email address, residential or business address, mobile number, date of birth, gender, and official identity documents when needed to verify a Merchant (KYC).
• Financial and transaction data: Payment details, registered bank account numbers, and transaction history for lawful, centralised settlement through Genfity Order, including orders placed through the Consumer App, Genfity POS, and other services.
• Automatic technical data: IP address, Merchant and branch location, device identifiers, and browser interaction information.
• Business data: Business profile details, legal business documents, menu catalogue, and contact details for Merchant staff or representatives.
• Third-party information: If you connect or integrate an account, such as an e-wallet, POS, or ERP service, we may receive data in line with the authorisation you give that provider.

If you provide Personal Data about another person, such as an employee or team member, you confirm that you have obtained their consent for us to process it under this policy.

We use the Personal Data we collect for these purposes:

• Providing the service: Account registration, identity checks (KYC/KYB), POS and Consumer App services, Merchant subscriptions, and order and payment processing through Genfity Order.
• Service improvement and analysis: Maintaining, developing, testing, and evaluating the functionality and security of the platform.
• Support communications: Responding to operational questions, invoice or billing complaints, and system issues.
• Marketing and recommendations: Sending promotions, special offers, product recommendations, and service updates, with opt-out controls for these communications.
• Security and fraud prevention: Investigating suspicious activity, preventing violations and illegal activity, and protecting system integrity.
• Legal compliance: Meeting administrative and regulatory obligations of the Republic of Indonesia or responding to relevant law enforcement, including tax audits and required reports.

We protect your data using encrypted connections, firewall controls, and layered authentication across our infrastructure. We work to protect Personal Data from loss, misuse, and unauthorised access.

You remain responsible for keeping your passwords and access credentials confidential and for not sharing them with third parties without appropriate safeguards.

Retention: We retain your Personal Data until your account is deleted, or for any longer period required to meet Indonesian legal record-keeping obligations for business and financial transactions, after which it will be destroyed.

We do not sell or rent your Personal Data. Where necessary, we may share it with:

• Service providers and partners: Providers that support our daily operations, including payment gateways, delivery and logistics, cloud infrastructure, and data analytics.
• Regulators and law enforcement: Where required by a lawful process under the laws of the Republic of Indonesia or for an authorised investigation.
• Corporate transactions: If Genfity Digital Solutions or an affiliate is involved in a merger, acquisition, or restructuring, a successor may receive relevant data and will continue to protect it under this policy.

You have rights concerning the Personal Data we hold about you, including:

• Access and correction: You may review, update, and correct information in your Merchant account to help keep it accurate.
• Deletion requests and withdrawal of consent: You may request deletion or withdraw consent for processing. This does not remove operational records that must be retained under applicable law.

Requests to close or delete a Merchant or Consumer account are subject to identity verification to prevent unauthorised requests. We process deletion after outstanding amounts owed to us have been paid.

To request deletion, use the account deletion facility in your dashboard and provide the requested details. Requests are processed under the applicable subscription terms.

Because Genfity operates in Indonesia and Australia, technical service delivery may involve transferring data to a recipient outside Indonesia. Where this occurs, we use safeguards intended to meet equivalent privacy and security standards and require confidentiality protections from infrastructure providers.

We may update this policy as our services, technology, and applicable Indonesian regulations change.

We will publish notice of material amendments on this page. Continued use of our products after an update indicates your acknowledgement of the updated policy.

For questions, complaints about data handling, or requests concerning your rights under Indonesian personal data law, contact our representative at: