Soya Privacy Policy

Privacy Policy

Updated at August 27, 2026

This Privacy Policy explains how PT. YAO JING TRADE ("we," "our," or "us"), the operator of the Soya mobile application, collects, uses, and safeguards your personal data when you use our Services. We act as the data controller for all personal data processed under this Policy. If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at: hermawandevi219@gmail.com.

1. What Personal Data We Collect

We are committed to collecting only the personal information necessary to provide and maintain our Services. The information we collect is as follows:

1.1 Data You Provide

1.2 Data Collected Automatically

1.3 Data Collected with Your Permission

2. How We Process Your Personal Data

We process your personal data only for the purposes set out below, in compliance with applicable laws. Our processing is always based on legitimate interests, the performance of a contract, legal obligations, or your consent (where required).

2.1 Service Provision and Customer Support

We use your personal data (such as your name and email address) to deliver our Services, enable account access, and respond to your inquiries.

2.2 Processing Payments

We partner with third-party payment processors to handle transactions securely. We collect limited payment-related information (such as transaction IDs and billing details) to link your payment method to your account, generate invoices, and maintain accurate financial records.

2.3 Improving Our Services

We analyze usage data to enhance the usability, quality, functionality, and performance of our Services. This includes debugging, error detection, internal research, and technological development.

2.4 Marketing and Advertising

We use tracking technologies (such as cookies and device identifiers) to deliver both personalized and non-personalized ads during your use of our Services.

We do not sell your data or share it with advertisers to create long-term user profiles. Where required by law, you may opt out of personalized advertising through your device settings or in-app preferences.

2.5 Security and Service Integrity

We process information to maintain the security and integrity of our Services, including fraud prevention, user authentication, and enforcement of our Terms of Service.

2.6 Legal Compliance

We may process or disclose your information only when required by applicable laws, court orders, or lawful requests from authorities. Any such disclosure is limited in scope and subject to due process.

2.7 Sensitive Personal Data

We do not actively collect sensitive personal data (such as racial or ethnic origin, political opinions, or religious beliefs). If you voluntarily provide such information (for example, in a self-description), we will process it only where necessary and lawful—such as to prevent unlawful acts or to cooperate with lawful investigations.

3. How We Share Your Personal Data

We never sell or rent your Personal Data. We only share it when strictly needed to keep our Services running, deliver what you request, and make them better—always in line with the law. We may share your information in the following circumstances:

3.1 Service Providers

We rely on trusted third-party vendors to support our operations, including cloud hosting, customer support, analytics, and fraud prevention. These providers are authorized to access your data only as needed to perform their designated tasks and are bound by strict confidentiality obligations.

3.2 Payment Processors

We partner with reliable third-party payment processors to facilitate secure transactions. These processors may access billing information and transaction records solely for the purpose of completing your purchases.

3.3 Third-Party Integrations

You may choose to link your account with external platforms such as Google. Doing so may allow these platforms to share limited information with us, such as user identifiers, public profile details, or authentication tokens. You can disconnect these links at any time through your account or device settings.

3.4 Legal and Safety Requirements

We may disclose your information when required by law, court order, or other valid legal process. We may also share information to detect and prevent fraud, enforce our Terms of Service, or protect the safety, rights, and property of our users, the public, or our company.

3.5 Business Transfers

In the event of a merger, acquisition, asset sale, or similar corporate restructuring, your Personal Data may be transferred as part of the business assets. Under such circumstances, we will take reasonable steps to ensure your information continues to be protected in line with this Privacy Policy or equivalent standards.

4. Storage and Transfer of Your Information

4.1 Storage and Security Measures

Your information may be stored and processed in any country where we or our service providers operate. We implement robust organizational and technical safeguards to ensure the security of your data during storage and transfer.

All communications between your device and our servers are protected by industry-standard encryption protocols (such as HTTPS/TLS) to maintain the confidentiality and integrity of your information.

4.2 Data Retention Practices

We keep your personal information only for as long as needed to fulfill the purposes outlined in this Policy, or as mandated by law.

• For active account holders, we retain your data throughout the duration of your account's activity or as required to deliver our Services.
• For casual or temporary users, we retain information for a limited period following your last interaction, in accordance with legal requirements.

We may preserve certain data to meet legal obligations, resolve disputes, or enforce our agreements. Once data is no longer needed, we either delete it securely or anonymize it. Backup copies may be retained temporarily for system recovery and auditing, consistent with our retention schedules.

4.3 International Data Transfers

Your information may be transferred to and processed in countries outside your own, solely for the purposes described in this Policy. When required, we rely on recognized transfer mechanisms—such as Standard Contractual Clauses—to ensure your data receives adequate protection in accordance with applicable laws.

5. Third-Party Services and Websites

Our Services may contain links to or integrate with external websites, apps, or platforms operated by third parties. Please note that this Privacy Policy does not cover the data practices of those third parties.

If you choose to connect your account with an external service (such as Google), we may share limited information with that service to enable the integration. This may include:

• Your user ID or profile identifier
• Confirmation that the connection was initiated from our Service
• Minimal usage or diagnostic data necessary for the integration to function

You may disconnect your account from any third-party service at any time through your in-app settings or by reaching out to us.

We encourage you to read the privacy policies of any third-party platforms you interact with. We do not control, endorse, or take responsibility for the content, security, or privacy practices of these external services.

6. Children's Privacy

Our Services are not designed for or directed at individuals under the age of 18 (or the age of majority in your jurisdiction, if higher).

We do not intentionally collect personal information from anyone under this age limit. If we discover that we have accidentally gathered such data, we will take immediate steps to delete it and close the associated account.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hermawandevi219@gmail.com. We will assist you in reviewing, deleting, or managing your child's data.

In cases where parental consent is required by law, we will not process a minor's personal data without obtaining verifiable permission from a parent or guardian.

We are committed to protecting children's privacy and complying with all applicable child protection laws in the regions where we operate.

7. Your Privacy Rights

Depending on where you live and the data protection laws that apply to you, you may have certain rights regarding your Personal Data. These rights may include:

• Access Your Data: You can ask us whether we are processing your Personal Data and request a copy of the information we hold about you.
• Transfer Your Data: You may request that we provide your Personal Data in a structured, commonly used, and machine-readable format, or transmit it directly to another controller where technically feasible.
• Delete Your Data: You may request the deletion of your Personal Data, subject to certain legal exceptions that may require us to retain it.
• Correct Your Data: If you believe any information we hold about you is inaccurate, incomplete, or outdated, you may ask us to update or correct it.
• Restrict or Object to Process: You may ask us to limit or stop processing your Personal Data in specific circumstances.
• Manage Sensitive Data: You may request that we restrict access to any sensitive Personal Data you have provided, or ask us to delete it.
• Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your withdrawal.
• Opt Out of Automated Decisions: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects on you, except where necessary for providing our Services or where you have explicitly consented.
• Opt Out of Data Sales or Sharing: If we share your Personal Data for targeted advertising purposes, you may opt out. Please note that we may still share limited information with trusted service providers for essential business functions.
• Non-Discrimination: We will not treat you differently for exercising your privacy rights. This means we will not deny you services, charge different rates, or provide a lower level of service simply because you have made a privacy-related request.

To exercise any of these rights, please contact us at hermawandevi219@gmail.com. Please note that these rights may not be absolute and are subject to applicable legal exceptions—we may need to retain certain information for security, legal, or operational reasons. We will respond to your request in accordance with applicable law, and if you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

8. Account and Data Deletion

You may request to delete your account and the Personal Data associated with it at any time. You can initiate this process through the following steps:

• Log in to your account
• Navigate to Settings > Account Cancellation
• Confirm your request for permanent deletion

Once your request is confirmed, your account will be deactivated immediately. All content you have created, posted, or shared through your account will be removed, and your account cannot be restored or reactivated afterward.

Please note that:

• Information that other users have shared about you (such as messages they sent or posts they made) will not be deleted as part of this process
• We may retain certain data where required by law, or for legitimate purposes such as fraud prevention, dispute resolution, or regulatory compliance
• Backup copies may be kept temporarily for system recovery or auditing purposes, in line with applicable legal requirements

If you need help with the deletion process or have any questions, please reach out to us at hermawandevi219@gmail.com.

9. Data Protection Measures

We take your privacy seriously and are committed to safeguarding your Personal Data in accordance with applicable laws. Therefore, to protect your information from unauthorized access, use, or disclosure, we employ a range of security measures, including:

• Encryption: We use industry-standard encryption protocols (such as HTTPS/TLS) to secure data transmitted between your device and our servers
• Access Control: We restrict access to Personal Data through authentication protocols and permission management
• Ongoing Monitoring: Our systems are regularly reviewed for vulnerabilities and potential threats
• Staff Awareness: Our team receives training on data protection and security best practices
• Data Minimization: We collect and retain only the information necessary to provide our Services

While we strive to protect your information, no internet-based system is completely foolproof. We cannot guarantee absolute security. We recommend that you take precautions when sharing personal information online, particularly in public areas of the Service, and keep your account credentials confidential.

If you have any security concerns or suspect misuse of our Services, please reach out to us using the contact information provided in the "Contact Us" section.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal obligations, or other relevant factors. If we make material changes, we will notify you in advance through in-app messages, emails, or other appropriate channels. The revised version will always display an updated "Last Updated" date at the top. Your continued use of our Services after the changes take effect constitutes your acceptance of the updated Policy.

11. Contact Us

We welcome any questions, concerns, or suggestions you may have about this Privacy Policy or the way we handle your information. Please feel free to get in touch with us through any of the following options:

• Email: hermawandevi219@gmail.com
• In-App Support: You can reach us directly through the "Help" or "Feedback" features inside the Soya app

We will respond to your inquiry as promptly as possible and do our best to assist you.