Terms of Service & Privacy Policy

Terms of Service & Privacy Policy

Effective Date: 27 September 2026

These Terms of Service and Privacy Policy govern the use of the BizDEC Digital Marketing Dashboard and BizDEC App, operated by PT ATMI BizDEC (“BizDEC”, “we”, “our”, or “us”).

By accessing the dashboard, application, or connecting a third-party account such as Google, Meta, or TikTok, users acknowledge and agree to the terms described below.

1. Purpose of the Service

The BizDEC platform is developed to support internal business operations, customer relationship management, training administration, marketing performance monitoring, agenda management, reporting, and other authorized organizational activities.

The platform may integrate with authorized third-party services to support these functions.

2. Authorized Users

Access to the platform is limited to authorized PT ATMI BizDEC personnel and other users specifically approved by PT ATMI BizDEC.

Users are responsible for maintaining the confidentiality of their login credentials and must not allow unauthorized persons to access the platform using their account.

3. Third-Party Account Authorization

Certain features may require users or administrators to authorize access to third-party services, including:

  • Google
  • Meta platforms
  • TikTok
  • Other services explicitly integrated into the BizDEC platform

Authorization is performed through the official authentication or OAuth mechanism provided by the respective platform.

BizDEC does not request or store users’ third-party account passwords.

Users may revoke third-party authorization through the respective third-party account settings at any time.

4. Information We May Access

Depending on the integration and permissions explicitly granted by the user, the platform may access limited information necessary to provide its intended functionality.

Google

For Google integrations, BizDEC may access information permitted through the authorized Google OAuth scopes.

For the current Google Calendar integration, this may include:

  • Calendar event titles
  • Event dates and times
  • All-day event information
  • Event descriptions or notes
  • Event locations
  • Google Calendar event identifiers
  • Authorization information required to maintain the connection

The current integration is used to create, update, and delete calendar events associated with BizDEC Agenda functionality.

BizDEC does not use the Google Calendar integration to access unrelated Google services unless additional permissions are explicitly requested and authorized.

Meta

Where Meta services are connected, the platform may access information permitted by the specific Meta permissions granted by the user, such as account, page, content, or engagement information required for the enabled BizDEC feature.

Only information necessary for the relevant authorized functionality will be accessed.

TikTok

Where TikTok services are connected, authorized information may include:

  • Basic TikTok profile information
  • Username and public profile information
  • Verification status
  • Follower and following counts
  • Total likes or video counts
  • Public video information
  • Public engagement metrics such as views, likes, comments, and shares

The exact information accessed depends on the permissions granted by the user and the capabilities enabled in the platform.

5. How We Use Information

Information accessed through the BizDEC platform may be used only for legitimate organizational and user-facing purposes, including:

  • Internal business operations
  • Agenda and scheduling management
  • Creating, updating, and deleting authorized calendar events
  • Internal reporting and monitoring
  • Social media performance monitoring
  • Customer relationship management
  • Training and program administration
  • Marketing performance analysis
  • Operational coordination
  • Security, troubleshooting, and system maintenance

Third-party user data is not used for purposes unrelated to the functionality for which access was granted.

6. Google User Data – Limited Use

The use of information received from Google Workspace APIs and Google OAuth scopes will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

Google user data obtained through the BizDEC platform will only be used to provide or improve user-facing features explicitly provided by the platform.

BizDEC will not:

  • Sell Google user data
  • Use Google user data for advertising or advertising profiling
  • Transfer Google user data to advertising networks or data brokers
  • Use Google user data to determine creditworthiness or for lending purposes
  • Use Google user data to train general-purpose artificial intelligence or machine-learning models
  • Use Google user data for purposes unrelated to the authorized BizDEC functionality

Human access to Google user data is limited to situations where such access is necessary for authorized support, security, troubleshooting, legal compliance, or where the user has explicitly permitted such access.

7. Data Storage and Security

BizDEC applies reasonable technical and organizational measures to protect information handled by the platform.

Authentication credentials, OAuth tokens, and other sensitive authorization information are stored using security measures appropriate to their sensitivity.

Where technically applicable:

  • Sensitive credentials are encrypted
  • Access is restricted to authorized systems and personnel
  • Data transmission uses secure encrypted connections
  • Access permissions follow organizational roles and responsibilities

Third-party account passwords are not stored by BizDEC.

8. OAuth Tokens

When a third-party account is connected through OAuth, the platform may securely store authorization tokens required to maintain the connection.

For example, the Google Calendar integration may store:

  • Access tokens
  • Refresh tokens
  • Token expiration information
  • Authorized account information
  • Granted scopes
  • Connection timestamps

These tokens are used only to perform authorized API operations on behalf of the connected account.

OAuth tokens are not sold, disclosed for advertising purposes, or intentionally exposed to unauthorized third parties.

9. Sharing and Disclosure of Information

BizDEC does not sell personal information or third-party platform data.

Information may only be shared where reasonably necessary:

  • To provide the requested service or functionality
  • With service providers required to operate the platform
  • To maintain system security or investigate abuse
  • To comply with applicable laws, regulations, or lawful government requests
  • As part of an organizational restructuring, merger, or acquisition where legally permitted and subject to applicable privacy requirements

Where third-party data is involved, any sharing will remain subject to the applicable platform’s developer and user-data policies.

10. Data Retention

Information is retained only for as long as reasonably necessary to provide the relevant BizDEC functionality, meet legitimate organizational requirements, maintain system integrity, or comply with applicable legal obligations.

Authorization information may be retained while the relevant third-party integration remains active.

When authorization is revoked or an integration is permanently disconnected, associated authorization credentials may be removed or invalidated where technically appropriate.

BizDEC does not intentionally maintain unnecessary permanent copies of third-party user data.

11. Data Deletion and Revocation

Users may stop third-party data access by revoking authorization through the corresponding platform.

For Google accounts, users may revoke the application’s access through their Google Account security and connected-app settings.

Users may also request deletion of information associated with their use of BizDEC integrations by contacting PT ATMI BizDEC through its official contact channels.

Following a valid deletion request, applicable personal or third-party user data will be deleted or anonymized unless retention is required by law, security requirements, contractual obligations, or legitimate organizational record-keeping requirements.

Revoking third-party authorization may cause related features of the BizDEC platform to stop functioning.

12. Acceptable Use

Users must not:

  • Attempt unauthorized access to the platform
  • Access information beyond their assigned authorization
  • Share credentials with unauthorized persons
  • Interfere with system operation or security
  • Use the platform for unlawful purposes
  • Attempt to extract, scrape, copy, or misuse third-party platform information beyond authorized functionality
  • Circumvent access controls or third-party platform restrictions
  • Use data obtained through the platform for unauthorized advertising, resale, profiling, or other prohibited purposes

13. Third-Party Services

The BizDEC platform may depend on third-party services and APIs, including Google, Meta, TikTok, hosting providers, infrastructure providers, and other authorized services.

The use of these third-party services may also be governed by the respective provider’s terms, privacy policies, and developer policies.

PT ATMI BizDEC does not control changes, interruptions, or limitations imposed by third-party platforms.

14. Service Availability

We aim to maintain reliable access to the platform but do not guarantee that the service will always be uninterrupted, error-free, or continuously available.

Service availability may be affected by:

  • Maintenance
  • Technical failures
  • Network interruptions
  • Third-party API availability
  • Changes in third-party platform policies
  • Security measures
  • Events outside the reasonable control of PT ATMI BizDEC

15. Privacy

PT ATMI BizDEC respects the privacy of users and handles personal and third-party platform information only for legitimate and authorized purposes.

We seek to collect and access only the information reasonably necessary for the functionality being provided.

Our use of information obtained through third-party APIs is limited to the purposes disclosed in this policy and the permissions granted by the user.

16. User Rights and Control

Subject to applicable law and organizational requirements, users may request:

  • Information regarding personal data held by BizDEC
  • Correction of inaccurate personal information
  • Deletion of applicable personal information
  • Disconnection of supported third-party integrations
  • Information about how authorized third-party data is being used

Requests may be submitted through PT ATMI BizDEC’s official contact channels.

17. Changes to These Terms and Privacy Policy

We may update these Terms of Service and Privacy Policy from time to time to reflect:

  • Changes in platform functionality
  • New integrations
  • Legal or regulatory requirements
  • Changes in third-party platform requirements
  • Security or operational improvements

The effective date shown at the top of this page will be updated when material changes are made.

18. Governing Law

These Terms of Service and Privacy Policy are governed by the applicable laws and regulations of the Republic of Indonesia.

19. Contact

For questions regarding these Terms of Service, Privacy Policy, data access, or deletion requests, users may contact:

PT ATMI BizDEC
Surakarta, Indonesia
Website: https://atmibizdec.id


The use of information received from Google Workspace APIs and Google OAuth scopes will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.