policy Cavaa Kasir

Privacy Policy

This policy explains how PT. Vastu Yantra Persada collects, uses, and protects personal data related to the Cavaa Kasir application.

Effective date: 29 September 2026

1. Introduction

The Cavaa Kasir application (Android package id.cavaa.kasir) is a point-of-sale and outlet management solution provided by PT. Vastu Yantra Persada (“we”, “us”, or “our”). This Privacy Policy applies to business owners (owners), cashier staff, and business data processed through the application and related server services.

By using Cavaa Kasir, you understand that we process data as described on this page in order to operate the service.

2. Data we collect

The types of data we may process include:

  • Account & authentication: name, email, phone number, password (stored securely), and sign-in data via Google Sign-In (email/profile) if you choose that option.
  • Profile & employees: owner profile data, profile photo, employee data (name, username, role, work schedule, photo), and account status.
  • Store/outlet data: store name, address, contacts, social media, logo, tax/rounding settings, payment methods, and operational store configuration.
  • Transactions & operations: orders, payments, cash-book/shift records, sales reports, and uploaded transfer or payment proof images.
  • Device & notifications: Firebase Cloud Messaging (FCM) tokens, platform, and device name/model to deliver relevant notifications.
  • Billing & points: subscription/add-on data, Google Play Billing purchase tokens, manual payment proofs, Cavaa Points balance, and referral codes.
  • Local device data: session tokens, app preferences, Bluetooth/USB printer configuration, and operational caches needed for online/offline use.

We do not request ID-card (KTP) uploads through the Cavaa Kasir app. Account verification status may be managed through server/web processes when applicable.

3. Device permissions

For certain features, the app may request the following permissions:

  • Camera: barcode/QR scanning and capturing payment proof photos.
  • Bluetooth: connecting to receipt printers.
  • Location (when in use): required by Android for Bluetooth device scanning; the app does not use location for business GPS tracking.
  • Notifications: alerts for orders, billing, or service information.
  • Gallery/storage: selecting or saving images (for example payment proofs or table QR downloads).

4. Purposes of processing

Data is processed to:

  • Run cashier operations, order sync, reporting, and store management.
  • Authenticate users, secure accounts, and prevent abuse.
  • Handle subscriptions, add-on purchases, and payment confirmation (including Google Play Billing).
  • Send notifications relevant to store or account activity.
  • Provide customer support and improve service quality.
  • Comply with applicable legal obligations.

5. Third parties

We may use service providers that help operate the application, including:

  • Google Sign-In for the owner sign-in option.
  • Firebase Cloud Messaging for push notifications.
  • Google Play Billing for in-app purchases.
  • Pusher for certain realtime updates.
  • Cavaa servers (including infrastructure on our service domains) for storage and application APIs.

These third parties process data under their own privacy policies and only as needed to provide services to us.

6. Storage and retention

Account and business data are stored on our servers while the account is active or as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Data on the device (tokens, preferences, local caches) remains on the user’s device and can be removed by signing out or uninstalling the app.

7. Security

We apply reasonable technical and organizational measures to protect data, including transmission over secure connections and secure storage of session credentials on the device. However, no method of electronic transmission or storage is completely secure.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of certain personal data, and ask how we process your data. Requests can be sent to the contact email below. We may ask you to verify your identity before processing a request.

9. Children

Cavaa Kasir is intended for business operations. We do not knowingly collect personal data from children below the age required by law without valid consent.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be shown on this page with an updated effective date. The latest version is always available at https://cavaa.id/privacy.

11. Contact

If you have questions about this Privacy Policy or data processing in Cavaa Kasir, contact:

arrow_back Back to home © 2026 PT. Vastu Yantra Persada