Information and Communication Channels

Privacy Statement

PT Pesonna Optima Jasa

Last updated: December 19, 2025

PT Pesonna Optima Jasa ("We") are committed to protecting and respecting the privacy of Users in accordance with the laws and regulations in force in Indonesia as well as third-party platform policies, including Google Play Store and Apple App Store. This Privacy Statement explains how We collect, use, store, protect, and delete Users' personal data. By accessing the optimajasa.co.id website and/or using Our mobile applications (Sakti POJ and Expressa), Users declare that they have read, understood, and agreed to this Privacy Statement.

Scope

This Privacy Statement applies to:

• The optimajasa.co.id website

• The Sakti POJ and Expressa mobile applications

• All digital services operated by PT Pesonna Optima Jasa

Collection of Personal Data

Data Collected Voluntarily

Users can access the website without providing personal data. However, for certain features (such as the careers page, mobile application, and internal services), We may collect the following data:

• Full name

• Email address

• Phone number

• Job application data and other supporting information

This data is used specifically for the recruitment process and internal administrative purposes.

Data Collected Automatically

We may automatically collect technical data, including:

• IP address

• Browser type and version

• Device operating system

• Date and time of access

• Pages visited and activity on the website

• Links clicked and the amount of data transferred

This data is used for usage analysis, service improvement, and system security.

Use of Data on Mobile Applications

To support the operational functions of the Sakti POJ and Expressa applications, We collect the following data:

Location Data

We collect location data (real-time or periodic) with the User's consent to:

• Verify attendance location on the Sakti POJ application.

• Track courier and package positions on the Expressa application.

Location data is only used while the application is in use and in accordance with the service's function.

Camera and Media Access

We require the following access permissions:

• Camera: for QR scanning, capturing proof-of-delivery photos, and task documentation

• Gallery/Media: for uploading photos, issue videos, and digital signatures

This access is only used when the related feature is run by the User.

Collection and Use of Facial Data (Biometric)

We use facial recognition technology as part of Our internal services.

Purpose of Collection

Facial data is used to:

• Initialize the User's identity

• Verify identity during the attendance process

• Improve the accuracy and performance of the facial recognition system

This access is only used when the related feature is run by the User.

Storage of Facial Data

• Facial data is stored securely in an internal database

• Facial data is not shared with third parties

• Facial data is not used for commercial or advertising purposes

Retention Period

Facial data will be stored for as long as the User's relationship with Our services continues and will be deleted no later than 1 (one) year after that relationship ends, or as required by applicable law.

Cookies and Similar Technologies

Our website uses cookies and similar technologies (including web beacons) to:

• Remember User preferences

• Analyze website usage

• Improve website performance and security

Users can configure their browser to refuse or delete cookies. However, some website features may not function optimally as a result.

Data Security

We implement reasonable technical and organizational security measures to protect personal data from:

• Unauthorized access

• Unlawful disclosure

• Alteration or destruction of data

Although no system is entirely secure, We continuously improve Our security in line with industry best practices.

Data Disclosure

We will not disclose personal data to third parties without the User's consent, except:

• When required by laws and regulations

• When requested by an authorized authority

• When necessary to protect the rights, safety, and security of the User or the Company

User Rights

Users have the right to:

• Access their own personal data

• Update or correct their data

• Request deletion of their data in accordance with applicable law

• Withdraw consent to certain data collection through device or application settings

Requests can be submitted through the Company's official channels.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time. Changes will be published through the website or application, and Users are deemed to accept such changes by continuing to use Our services.