Privacy Policy

PT Yasta Mitra Nusantara · Effective 13 October 2026

1. Controller and scope

PT Yasta Mitra Nusantara (YMN) operates YMN Living Office. This policy covers the Living Office writer's Google OAuth access for internal YMN work. The application runs on company devices; this public website only provides app information and does not ask visitors to upload company records.

2. Data accessed

After an authorized user selects Login with Google and grants consent, the writer may process:

• Account identity necessary for authorization and consent status, such as the signed-in email address.
• Google Drive files created by the app or explicitly selected/shared with it through official Google flows, including file content, file identifiers, revisions and task-related metadata.
• Necessary technical evidence such as transaction status, timestamps, readback results and file references for auditing and recovery.
• OAuth credentials needed to maintain the approved session, held in protected local storage according to the application implementation.

This writer requests Google Drive scope https://www.googleapis.com/auth/drive.file. It does not request blanket access to all Google Drive content. YMN's existing internal reader has separate authorization and controls; the writer grant is not lent to the Bridge or unrelated integrations.

3. Purposes

Data is used for authorized internal work products, identifying the correct file, checking revisions and readback, preventing duplicates, keeping necessary records and recovering failed transactions. Access and actions remain subject to applicable task and approval boundaries.

4. Storage and security

The application and writer credentials operate in YMN's local environment with device access controls. Authorized business files remain in the selected Google Drive account/service. Transaction records may be retained within the app or appropriate company evidence records. Access restrictions, authentication, readback and recovery practices are used to reduce unauthorized access or changes; no system can guarantee absolute security.

5. Sharing and use

Data is processed through Google APIs and services directly required to perform approved tasks. YMN does not sell Google user data, use it for ad targeting or use data obtained through this writer to train general-purpose AI/ML models. Access is not extended to others merely because they can view this public website. Where separate internal integrations or providers are involved, their use remains governed by separate configuration, relevant notices and applicable authorization.

6. Retention, revocation and deletion

Work data and evidence are retained for as long as reasonably needed for the task, security or legitimate company administrative obligations. Users may revoke app access in Google Account security settings or request the YMN administrator to disconnect the integration and remove associated local credentials. Revocation prevents future access through that grant; it does not automatically remove legitimate business records or audit evidence that must be retained. Requests to access, correct or delete applicable data can be sent to the contacts below and will be reviewed under relevant authorization and legal requirements.

7. Contact and updates

For privacy questions or revocation/deletion requests, contact yastaprocurement.id@gmail.com or procurement@yastamitranusantara.com. Material policy updates will be published here with an effective date.