Skip to content

This page is a draft and is pending the owner's review.

Who this covers

This policy covers the Toko Laundry website and the Toko Laundry app. Your customers' data belongs to the laundry that entered it. Toko Laundry processes it to run the service for that laundry.

What we keep, and why

  • Accounts: name, email address, language and the role in each company, to sign you in and decide what you may do. Where sign-in is through Biwara, the link to your Biwara identity.
  • Companies and branches: names, opening hours, the WhatsApp number each branch sends from, and the team and its schedule, to run the counter.
  • Customers: name, phone number, address and notes, and whether the customer agreed to WhatsApp messages, to take orders and send receipts.
  • Orders and payments: services, quantities, prices, payments and the status of each order, including pickup and delivery places, so the laundry can work and report.
  • Photos and places: delivery proof photos, attendance selfies and work photos, with the place taken from the phone or from the photo's own data, to prove a delivery or a clock-in.
  • Messages: WhatsApp conversations are held in Wavely, not in Toko Laundry.
  • Payout details: the business name, contact phone and bank account the owner submits to receive online payments. The account number is stored encrypted and shown by its last four digits.
  • This website: your theme, your language and whether you are signed in are kept in your browser's local storage. The website loads no analytics or advertising script. The chat button is Wavely's and loads from Wavely.

Who processes it

  • Wavely: WhatsApp messages, the customer conversation list and the chat button. Toko Laundry sends it the company, branches, team and customers so conversations match.
  • BorderPay, through Biwara's payment service: online payments from customers, with the payer reference each one carries, the balance and its withdrawals, and the business name, contact and bank account the owner submits to receive them.
  • TypeSafe: when chat labelling is switched on, the customer's own messages in a quiet WhatsApp chat (the newest, at most 3,500 characters, which can carry a name, a phone number and an address) go to TypeSafe's Jev model, which answers whether the chat looks like an order. No company, branch or customer identifier is sent. We cannot erase the text at TypeSafe.
  • OpenRouter: when an order draft is made from chat text, that text, which usually carries a name, a phone number and an address, goes to OpenRouter and on to the model provider it routes to. No company, branch or customer identifier is sent, and each request asks for providers that do not collect user data. By its own pages OpenRouter stores no prompt unless an account opts in to logging. We cannot erase the text at OpenRouter or upstream.
  • OpenStreetMap Nominatim: to place a branch or a delivery stop on the map, its street address, as typed, goes to the public Nominatim service run by the OpenStreetMap Foundation, together with the server's network address and a fixed Toko Laundry identifier. No name, phone number, order or identifier is sent. Nominatim keeps its own request logs, which we cannot erase.
  • Hostinger: invitation and renewal-invoice emails are sent through Hostinger's SMTP service. It receives the recipient's email address and the message, which carries the invitation link, or the invoice amount, due date and payment link. It may keep copies of sent mail, which we cannot erase.
  • Biwara: sign-in through Biwara Authentication, and the servers and platform services the app runs on.

How long we keep it

We have not yet set a fixed retention period for orders, customers and photos. Some derived dashboard figures are deleted after 90 days, and records of Wavely's webhooks after 45 days. WhatsApp messages are kept in Wavely, not here.

Your choices

There is no self-service export or erasure of personal data yet. Ask us through the contact page and say what you want removed. A customer receives WhatsApp messages from a laundry only if the customer opted in.

Who to contact

Questions about this page, or about your data, go through the contact page.

Operated by: PT Biwara Solution Indonesia