Privacy Policy

1. Who We Are

PT Kitar ("the Company," "we," "us," or "our") (Jalan Jenderal Sudirman 52, Floor 21, Jakarta 12190, Indonesia) operates getkitar.com and the Kitar device grading and dynamic pricing platform. We are committed to handling personal information responsibly and in line with applicable Indonesian data protection law, including Law No. 27 of 2022 on Personal Data Protection (UU PDP), and international good-practice standards. Contact: [email protected].

2. Information We Collect

Kitar's core service processes device condition images submitted by buyback desk operators and refurbished device retailers. The personal data we handle falls into the following categories:

• Account and contact data you provide when registering: name, business name, email address, and phone number.
• Device condition images uploaded for grading: photographs of used handsets submitted through the dashboard or API. These images may incidentally contain device identifiers such as IMEI or serial numbers visible in the frame, or personal items visible in the background. We process these images solely to produce a condition grade and price suggestion; we do not extract or store any incidentally captured personal information beyond what is necessary for grading.
• Grading and transaction records: device grade outputs (screen wear score, battery health estimate, housing grade), price suggestions, and associated metadata (timestamp, user seat that submitted the request).
• Usage and technical data collected automatically: IP address, browser type, session duration, API call logs. This data is used to operate and secure the platform.
• Communication content: messages you send us by email or contact form.

3. How We Use Information

We use the information we collect for the following purposes:

• To provide the Kitar grading and pricing service: analysing device condition images, returning condition grades on an A/B/C/D scale, and generating price suggestions anchored to live Jakarta secondhand market data.
• To operate and improve the platform: monitoring system performance, diagnosing errors, and developing new grading capabilities.
• To manage your account, process payments, and communicate with you about your subscription.
• To respond to inquiries and support requests.
• To meet legal obligations under Indonesian law.

We do not sell personal information. We do not use device condition images or grading data to train our models without your explicit written consent.

4. Sharing

We share information only as follows:

• Service providers acting as processors on our behalf under written contract, including cloud hosting and infrastructure providers. These providers may process data outside Indonesia; where they do, we require appropriate contractual safeguards.
• Payment processors for subscription billing. Payment card data is handled entirely by the payment processor and is not stored by Kitar.
• Legal authorities where required by Indonesian law or a valid legal order.

We do not share device condition images or grading results with third parties except as described above.

5. Retention and Security

We retain account data for the duration of your subscription and for a reasonable period thereafter to meet legal obligations or resolve disputes. Device condition images submitted for grading are retained for up to 90 days from submission to support dispute resolution, then deleted. Grading result records (grade output and price suggestion, without the original image) are retained for the duration of your subscription period.

We apply administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, loss, or disclosure. As an early-stage operation, we apply industry-standard security practices appropriate to our size and the data we handle.

6. Your Rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection and applicable international good-practice standards, you may have rights to access, correct, delete, or restrict use of your personal information, and to object to certain processing or withdraw consent. To make a request, email [email protected]. We respond within a reasonable period (typically 30 days). We may need to verify your identity before acting on a request.

7. Cookies

See our Cookie Policy for details on the cookies and similar technologies used on getkitar.com.

8. Changes and Contact

Material changes will be reflected by an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically.