Privacy Policy
This Privacy Policy describes how Harmony Home Rest (the “Property Management Portal” or “Service”) collects, uses, and protects information when you use our web application hosted at https://housing.tomitha.biz.id/.
1. Who we are
The Service is operated for property and boarding-house (kost) management, including bookings, tenant (penghuni) registration, payments, and related records. If you have questions about this policy, contact the property administrator who provided your account.
2. Information we collect
- Account data: login username/email and password (stored securely; passwords are hashed, not stored in plain text).
- Property and tenancy data: property names, room details, bookings, payments, and occupancy records you enter in the system.
- Tenant personal data: names, phone numbers, check-in/check-out dates, and identity documents (e.g. KTP images) submitted through registration or self check-in flows.
- Configuration data: settings such as notification phone numbers and message templates stored in the application database.
- Technical data: standard server logs from our hosting provider (e.g. IP address, request time) for security and troubleshooting.
3. How we use information
We use collected information to:
- Operate the portal (authentication, dashboards, reports, receipts).
- Manage bookings, tenant registration, checkout, and billing records.
- Store identity documents where enabled (see Section 4).
- Support optional staff workflows (e.g. preparing WhatsApp messages via wa.me links you send manually).
4. Google Drive and Google APIs
When document upload is enabled, identity files (such as KTP) may be uploaded to Google Drive using Google APIs. Uploads are performed by the application server on behalf of the property owner’s authorized Google account or configured storage. Files are stored in designated folders (e.g. tenant data folders) controlled by the property operator.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell personal data.
5. Where data is stored
- Application database: hosted on Neon PostgreSQL (cloud).
- Application hosting: Vercel.
- Documents: Google Drive when upload features are active.
6. Sharing with third parties
We do not sell your personal information. Data is processed by infrastructure providers (hosting, database, Google) only as needed to run the Service. Staff access is limited to authorized portal users created by the administrator.
7. Retention
Records are retained while the property operator uses the Service and as required for legal, tax, or operational purposes. The administrator may archive or delete records according to internal policy.
8. Security
We use HTTPS, access controls, and industry-standard practices. No method of transmission or storage is 100% secure; please use strong passwords and protect staff accounts.
9. Your rights
Depending on applicable law, tenants and users may request access, correction, or deletion of personal data by contacting the property administrator. Identity documents in Google Drive are managed by the same administrator.
10. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after changes means you accept the updated policy.