Privacy Policy

Last updated 2026-10-24 · MaCloud (indomac123.app), Jakarta, Indonesia

This policy explains what personal data MaCloud (“we”) collects when you use indomac123.app and our client portal, why we collect it, and how we protect it.

1. Data we collect

Account data: your name, contact (WeChat / WhatsApp / phone), login name, and the email address you link to your account.
Google sign-in: if you choose “Sign in with Google”, we receive only your email address and whether Google has verified it (scopes openid and email). We do not receive your Google password, contacts, files or any other Google data.
Service data: the Mac mini you rent, your subscriptions, bills, top-ups, balance and payment records, and payment screenshots you upload.
Security data: sign-in time, IP address, approximate location derived from the IP address (offline database, city level), browser / device type, and failed sign-in attempts.

2. How we use it

To provide the service: set up and run your Mac mini and subscriptions, issue bills, record payments and keep your balance.
To keep your account safe: sign-in alerts, one-device-at-a-time login, lockouts after repeated failed attempts, and investigating suspicious activity.
To contact you: verification codes, bills, payment reminders, top-up and charge notices, and service messages. We do not send marketing email.

3. Sharing

We do not sell your data. We share it only with providers we need to run the service, and only as much as needed: our hosting provider (servers in Jakarta), Google (for sign-in and for sending email), our payment processor when you pay online, and our corporate-card issuer when we buy a subscription on your behalf. We may disclose data if required by Indonesian law.

4. Security

Passwords are stored only as salted hashes. Machine passwords, keys and card numbers are encrypted. Backups stored off-site are encrypted with a key kept offline. The site uses HTTPS only. Staff access is limited by role and protected by two-factor authentication, and every sign-in and change is logged.

5. Retention

We keep account and payment records while you are a customer and for as long as Indonesian tax and accounting rules require afterwards. Sign-in logs are kept for up to 12 months.

6. Your choices

You can view your sign-in history, change your password, and link or unlink your email in the client portal under Settings. To access, correct or delete your data, contact us using the details below. We will reply within 14 days.

7. Contact

WhatsApp +62 852 1118 8761 · or message us in your customer WeChat group.

中文摘要

我们只收集提供服务和保护账号所需的信息：名字、联系方式、登录名、你绑定的邮箱；你租的机器、订阅、账单、充值和付款记录；登录时间、IP、按 IP 估算的大概地点（城市级）和设备类型。用 Google 登录时我们只拿到你的邮箱地址，不会拿到你的 Google 密码或其他数据。

这些信息用于提供服务、保护账号（登录提醒、只允许一处登录、错误锁定）和给你发验证码、账单、催款等通知，不发营销邮件。我们不出售你的数据，只在必要时提供给服务器、Google（登录和发邮件）、支付机构和发卡机构。密码只存加盐哈希，机器密码、密钥和卡号都加密保存，备份加密，全站 HTTPS。你可以在客户后台“设置”里查看登录记录、改密码、绑定或解绑邮箱；要查看、更正或删除数据请联系我们。