Privacy Policy

1. Data we collect

Account details: name, username, email, phone number, date of birth, city, and password hash.
Profile information you choose to share, such as a photo, bio, and interests, plus your follower and following lists.
Host verification data: identity document details (KTP or equivalent), liveness/selfie checks, and business details where relevant.
Payout details for hosts: bank account or e-wallet number and account holder name.
Event activity: RSVPs, bookings, check-ins, reviews, chat messages, and event locations you publish or attend.
Payment records created when you book or host, including transaction status and amount in IDR. We do not store your full card, bank or e-wallet credentials — these are handled by the payment provider.
Device and usage data such as IP address, app version, and crash logs, used to keep the Platform secure and reliable.

2. How we use your data

We use your data to operate OTW: authenticating you, showing relevant events, processing payments and payouts, verifying host identity, preventing fraud and abuse, providing customer support, and sending essential service notifications.

3. Who we share it with

Hosts of events you join can see your name and photo so they know who is attending. Guests attending the same event may see each other depending on the event's visibility settings.

Our payment provider — a Bank Indonesia-licensed payment provider (currently DOKU and Finpay) — receives the minimum information required to process a transaction or a payout (such as your name, contact details, amount, and, for hosts, payout account details). It processes this data under its own privacy policy and Indonesia's applicable payment regulations.

Map and place providers receive event location queries so venues and maps can be shown. AI providers may process event text you ask us to help write; we do not send them your identity documents or payment data.

We do not sell your personal data. We may disclose data if required by Indonesian law or a valid legal request.

4. Data retention

We retain account data for as long as your account is active. If you request deletion, we remove personal data within 30 days, except records we are legally required to retain (such as transaction and verification history for tax and anti-fraud purposes, typically up to 5 years).

5. Your rights

You can access, correct, export, or request deletion of your account data at any time from Account settings, or by contacting support@otw.pro.

6. Security

We use industry-standard encryption in transit and at rest, row-level access control on our database, and limit internal access to personal data on a need-to-know basis.

7. Children

OTW is not intended for anyone under 18. We do not knowingly collect data from minors.

8. Contact

Questions about this policy can be sent to support@otw.pro.