Pendahuluan

LaabamOne Business Solutions Pvt Ltd ("kami" atau "kita") mengoperasikan platform ERP LaabamOne. Kebijakan Privasi ini menjelaskan bagaimana kami mengumpulkan, menggunakan, mengungkapkan, dan melindungi informasi Anda saat Anda menggunakan layanan kami.

1. Informasi yang Kami Kumpulkan

1.1 Informasi Pribadi

Saat Anda mendaftar ke LaabamOne, kami mengumpulkan:

Nama lengkap dan alamat email
Nomor telepon
Nama perusahaan dan detail bisnis
Informasi penagihan dan pembayaran
Nomor identifikasi pajak (GST, PAN)

1.2 Data Bisnis

Selama penggunaan platform, kami menyimpan:

Informasi pelanggan dan vendor
Catatan keuangan dan transaksi
Data karyawan dan penggajian
Informasi inventaris dan produk
Faktur, tanda terima, dan dokumen

1.3 Data Penggunaan

Kami mengumpulkan secara otomatis:

Alamat IP dan informasi perangkat
Jenis dan versi browser
Halaman yang dikunjungi dan fitur yang digunakan
Waktu yang dihabiskan dalam platform
Data log dan laporan kesalahan

2. Bagaimana Kami Menggunakan Informasi Anda

✓

Penyampaian Layanan

Untuk menyediakan, memelihara, dan meningkatkan platform ERP kami dan fitur-fiturnya

✓

Manajemen Akun

Untuk membuat dan mengelola akun Anda, memproses pembayaran, dan menangani langganan

✓

Dukungan Pelanggan

Untuk menjawab pertanyaan, memberikan bantuan teknis, dan menyelesaikan masalah

✓

Komunikasi

Untuk mengirim pembaruan layanan, peringatan keamanan, dan materi promosi (dengan persetujuan Anda)

✓

Kepatuhan

Untuk memenuhi kewajiban hukum, peraturan pajak, dan persyaratan pengajuan GST

✓

Analitik

Untuk menganalisis pola penggunaan dan meningkatkan layanan kami

3. Bagaimana Kami Membagikan Informasi Anda

Catatan Penting

Kami TIDAK menjual, menyewakan, atau memperdagangkan informasi pribadi Anda kepada pihak ketiga untuk tujuan pemasaran.

Kami dapat membagikan data dengan:

Penyedia Layanan: Pemroses pembayaran, penyedia cloud hosting, dan layanan email yang membantu operasional kami
Otoritas Pemerintah: Jika diwajibkan oleh hukum, untuk pengajuan GST, kepatuhan pajak, atau proses hukum
Transfer Bisnis: Jika terjadi merger, akuisisi, atau penjualan aset (dengan pemberitahuan sebelumnya)
Dengan Persetujuan Anda: Ketika Anda secara eksplisit mengizinkan kami untuk membagikan informasi

3.1 Artificial Intelligence (AI) Features

These features are off until you allow them. Nothing is sent to an AI service unless you tap "Allow" on the notice that names exactly what will be sent.

Some optional features use AI to read a document or message you choose and fill in a form for you. When you use one, the file or text you picked is uploaded to our server and passed to OpenAI, L.L.C. (United States) — our AI processing provider — which reads it and returns the extracted values to the app.

Which features use AI, and what each one sends:

AI Scan on a sales invoice or quote: the image/PDF you pick, including the customer name, address, GSTIN, item lines and amounts printed on it.
AI Scan on a purchase bill: the image/PDF you pick, including the vendor name, GSTIN, bill number, item lines and amounts.
AI receipt scan on an expense: the receipt image/PDF you pick, including vendor, date, amount, tax and GSTIN.
AI bank-statement analysis: the statement file you pick, including every transaction line and the account number, bank, branch and IFSC printed on it.
AI replies in Live Chat: the messages you type and any file you attach, plus your company name and the screen you asked from.

We ask permission separately for each of these features, before anything is sent, and the request names the data that feature will send. You can withdraw permission at any time in Settings → AI features & data; the feature then stops sending anything and asks again the next time you use it. If you never use these features, no data is sent to any AI service, and every one of them has a manual alternative.

We do not keep the file or message you picked after the values have been extracted from it. It is held only for as long as that single request takes and is not saved to our servers afterwards; only the extracted values are returned to the app, and they are stored only if you choose to save the form.

OpenAI processes this data as our service provider in order to return the extracted values. Under the OpenAI API terms that govern this use, OpenAI may process the data only to return that result, is required to protect it, and does not use data submitted through the API to train its models. We do not use it for advertising and we do not share it with any other AI service.

3.2 AI Assistant Connections (ChatGPT, Claude and other MCP clients)

Nothing is connected until you authorise it. You sign in, choose exactly one company, and approve — on a screen that names the application asking and the exact address your approval will be sent to.

Separately from the features above, you can connect an outside AI assistant — such as ChatGPT or Claude — so that it can answer questions about one of your companies. This works the opposite way round from 3.1: instead of us sending a document to an AI service, the assistant you chose asks us for figures and we answer. It reaches us over a standard connector interface (the Model Context Protocol) at mcp.laabam.one.

What a connection can and cannot do:

Read-only: every operation an assistant can call only reads. None of them creates, edits, deletes, sends a message, or moves money.
One connection, one company: the company is fixed at the moment you approve, and cannot be changed afterwards — not by you, not by the assistant, and not by anything written into a conversation with it. To reach a second company you approve a second, separate connection.
What it can read: for that one company only — invoices, customers, products, vendors, bank balances, expenses, profit and loss, and receivables. It cannot list or reach your other companies, and it is never given the name of the database your records are held in.
Checked on every request: your permission to open that company is re-verified each time the assistant asks, not once when you connected. If you lose access to a company, the connection loses it at the same moment.

The assistant you connect is not our service provider, and this is the part worth reading closely. Whatever it reads is then handled by whoever operates it — OpenAI for ChatGPT, Anthropic for Claude — under their privacy policy and their terms, not ours. Once figures leave us in answer to a question you asked, they can appear in that conversation and be retained by that provider under its own rules, which may differ from ours. Connect only assistants you are content to give that visibility to.

On our side we store the credential the connection uses, which single company it is fixed to, which of your logins approved it, and when. We do not store your conversations with the assistant, the questions it asks us, or the answers we return.

That credential lasts until you revoke it or it expires, whichever comes first. Nothing about the connection survives revocation except the record that it once existed.

You can see every AI assistant you have authorised, across all of your companies, in Settings → Security → AI Connections, and revoke any of them from there. Revoking takes effect immediately rather than waiting for expiry, and the assistant must ask for your approval again before it can read anything further. Removing a person from a company also ends the connections that person authorised for it.

4. Hak Privasi Anda

Akses

Meminta salinan semua data pribadi yang kami simpan

Koreksi

Memperbarui atau memperbaiki informasi yang tidak akurat

Penghapusan

Meminta penghapusan data pribadi Anda (sesuai ketentuan hukum)

Pembatasan

Membatasi bagaimana kami menggunakan data Anda dalam situasi tertentu

Untuk menggunakan hak Anda, silakan hubungi kami di privacy@laabam.one atau hubungi +91 73056 41462

5. Keamanan Data

Kami menerapkan langkah-langkah keamanan standar industri untuk melindungi informasi Anda:

🔒

Enkripsi SSL

Enkripsi SSL 256-bit untuk data yang sedang dikirim

🛡️

Enkripsi Basis Data

Enkripsi AES-256 untuk data yang tersimpan

🔐

Kontrol Akses

Akses berbasis peran dengan autentikasi dua faktor (2FA)

💾

Pencadangan Harian

Cadangan otomatis dengan retensi 30 hari

🚨

Deteksi Intrusi

Pemantauan dan peringatan 24/7

✅

ISO/IEC 27001:2022 (ISMS/24M04105)

Manajemen keamanan bersertifikat

6. Penyimpanan Data

Kami menyimpan data pribadi dan bisnis Anda selama akun Anda aktif atau selama diperlukan untuk menyediakan layanan. Setelah akun dihapus:

Data pribadi dihapus dalam 30 hari
Catatan keuangan disimpan selama 7 tahun (sesuai hukum pajak India)
Cadangan dihapus dalam 90 hari
Data analitik anonim dapat disimpan tanpa batas waktu

7. Cookie & Pelacakan

Kami menggunakan cookie dan teknologi serupa untuk:

Menjaga Anda tetap masuk
Mengingat preferensi Anda
Menganalisis lalu lintas dan penggunaan situs
Menyediakan fitur yang dipersonalisasi

Anda dapat mengontrol cookie melalui pengaturan browser Anda. Menonaktifkan cookie dapat membatasi fungsi platform.

8. Privasi Anak

LaabamOne dirancang untuk penggunaan bisnis dan tidak ditujukan untuk anak di bawah 18 tahun. Kami tidak secara sengaja mengumpulkan data dari anak di bawah umur. Jika Anda yakin kami telah mengumpulkan data tersebut, hubungi kami segera.

privacyPage.mobileApp.title

privacyPage.mobileApp.description

privacyPage.mobileApp.dataCollection.title

privacyPage.mobileApp.dataCollection.description

privacyPage.mobileApp.dataCollection.items.0
privacyPage.mobileApp.dataCollection.items.1
privacyPage.mobileApp.dataCollection.items.2
privacyPage.mobileApp.dataCollection.items.3
privacyPage.mobileApp.dataCollection.items.4
privacyPage.mobileApp.dataCollection.items.5
privacyPage.mobileApp.dataCollection.items.6

privacyPage.mobileApp.permissions.title

privacyPage.mobileApp.permissions.description

📷

privacyPage.mobileApp.permissions.camera.title

privacyPage.mobileApp.permissions.camera.description

📁

privacyPage.mobileApp.permissions.storage.title

privacyPage.mobileApp.permissions.storage.description

🔔

privacyPage.mobileApp.permissions.notifications.title

privacyPage.mobileApp.permissions.notifications.description

🌐

privacyPage.mobileApp.permissions.internet.title

privacyPage.mobileApp.permissions.internet.description

📍

privacyPage.mobileApp.permissions.location.title

privacyPage.mobileApp.permissions.location.description

privacyPage.mobileApp.thirdPartySDKs.title

privacyPage.mobileApp.thirdPartySDKs.description

privacyPage.mobileApp.thirdPartySDKs.items.0
privacyPage.mobileApp.thirdPartySDKs.items.1
privacyPage.mobileApp.thirdPartySDKs.items.2
privacyPage.mobileApp.thirdPartySDKs.items.3

privacyPage.mobileApp.tracking.title

privacyPage.mobileApp.tracking.description

privacyPage.accountDeletion.title

privacyPage.accountDeletion.description

privacyPage.accountDeletion.howTo.title

1
privacyPage.accountDeletion.howTo.steps.0
2
privacyPage.accountDeletion.howTo.steps.1
3
privacyPage.accountDeletion.howTo.steps.2
4
privacyPage.accountDeletion.howTo.steps.3

privacyPage.accountDeletion.dataDeleted.title

privacyPage.accountDeletion.dataDeleted.items.0
privacyPage.accountDeletion.dataDeleted.items.1
privacyPage.accountDeletion.dataDeleted.items.2
privacyPage.accountDeletion.dataDeleted.items.3
privacyPage.accountDeletion.dataDeleted.items.4

privacyPage.accountDeletion.retentionNote.title

privacyPage.accountDeletion.retentionNote.content

9. Transfer Data Internasional

Data Anda terutama disimpan di pusat data aman di India. Jika kami mentransfer data secara internasional, kami memastikan perlindungan memadai, termasuk:

Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Kepatuhan terhadap GDPR dan undang-undang perlindungan data yang berlaku

10. Perubahan Kebijakan Ini

Kami dapat memperbarui Kebijakan Privasi ini dari waktu ke waktu. Kami akan memberi tahu Anda mengenai perubahan penting melalui email atau platform. Melanjutkan penggunaan layanan setelah perubahan berarti Anda menerima kebijakan yang diperbarui.

Privasi Anda adalah Prioritas Kami