LEGAL
Privacy Policy
This Policy explains how Sky Drone Indonesia processes information through SDI-AI Smart. A customer organisation may also control information submitted by its personnel and should provide any additional workplace privacy notice required by law.
1. Information processed
- Account details, role, organisation, warehouse assignment and authentication records.
- Device identifiers, app version, network and security logs.
- Warehouse, project, BIN, pallet, SKU, quantity, issue, review and approval records.
- Photographs, videos, filenames, timestamps, capture details and optional coordinates.
- Drone, controller, mission and capture-session information when those modules are used.
- Audit events, comments, reports, integration activity and support communications.
2. Purposes
Information is processed to provide and secure the platform; authenticate users; conduct stocktakes; preserve evidence; reconcile inventory; support approvals and reports; operate authorised integrations; investigate errors or misuse; comply with legal duties; and improve reliability.
3. AI processing
When an administrator enables AI analysis, relevant evidence may be processed by configured AI services, which can include OpenAI. Administrators should not submit unnecessary personal, confidential or regulated information and must configure processing consistently with customer requirements.
4. Sharing and processors
Information may be available to authorised customer personnel, Sky Drone Indonesia support personnel where necessary, and contracted infrastructure, communications, security, AI or integration providers. It may also be disclosed where required by law or to protect users, systems and legal rights.
5. Storage and international processing
Data may be stored or processed in locations used by the configured hosting and service providers, including outside the user's country. The responsible customer should ensure its configuration and contractual safeguards meet applicable data-transfer requirements.
6. Retention
Records are retained according to the customer agreement, administrator settings, operational requirements, backup cycles and legal obligations. Retention can differ by record type. Data may remain in protected backups for a limited period after deletion from active systems.
7. Security
SDI-AI Smart uses role-based access, authenticated sessions, audit records and transport security when correctly deployed. No system can guarantee absolute security. Users must protect credentials and report suspected access or data incidents promptly.
8. Choices and rights
Requests to access, correct, export, restrict or delete personal information should normally be made through the user's employer or account administrator. Requests may also be directed to Sky Drone Indonesia through its official published support channel. A request may be limited where retention is required by law, security or an overriding contractual obligation.
9. Location, camera and files
Android or controller applications should request camera, file, media and location permissions only when needed for a selected feature. Permission can be controlled through device settings, although disabling it may prevent the corresponding feature from working.
10. Changes
This Policy may be updated as the platform, providers or law changes. Material updates will carry a new version and effective date and may be presented to users through the platform.