Privacy Policy
This policy explains what personal data MINSIGO Cloud (the "service", at minsigo.my.id) handles, why, and what choices you have. The service is a private attendance-status dashboard for the Asigoers team, run by the team's administrators.
In short: sign-in uses only your Google email address. The service keeps the member details and attendance statuses the team needs to run, uses them for nothing else, and does not sell or share them for advertising.
1. Who is responsible
The service is operated by the Asigoers team administrators. For any privacy question or request, contact badguitarehab@gmail.com.
2. Data we handle
- Google sign-in data
- Your verified Google email address, received when you sign in. We request only the
openidandemailscopes. We do not receive your Google password, contacts, files, calendar, or any other Google account content through sign-in. - Member record
- Kept by administrators in a private Google Sheet: username, nickname, email, phone number, employee ID, notification preference, saved work locations (coordinates and labels for home and office), the access credentials of the attendance system used by the member's workplace, and flags showing whether the member is active and whether they are an administrator.
- Attendance status
- The daily status you declare (WFO, WFH, SURTUG and similar), with its date. It is stored as events in the team's Google Calendar and as rows in the Google Sheet.
- Session data
- After sign-in, a random session token with your email and role is held in Google Apps Script's cache for up to 6 hours so you stay signed in, then expires on its own. You can also sign out earlier.
- Technical logs
- Google Apps Script and Google Cloud may log execution events (such as errors and timestamps) for troubleshooting. Our web server at minsigo.my.id keeps standard access logs (IP address, time, page requested, browser type) for security and troubleshooting.
3. How we use it
- To confirm that a signed-in Google account belongs to a registered member, and to give administrators their extra tools.
- To record, display and let you correct your daily work status.
- To submit a member's daily attendance to the attendance system used by their workplace, according to the status they declared, using the saved locations and credentials in their record.
- To let administrators add, update and deactivate member records.
- To keep the service secure and fix faults.
We do not use this data for advertising, profiling, or selling, and we do not use it to train AI or machine-learning models.
4. Google user data and the Limited Use requirements
MINSIGO Cloud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- The email address received at sign-in is used only to identify you and check your membership. It is not used for advertising, and it is not sold or transferred to anyone for their own purposes.
- Only administrators can see the member list, and only to run the service. No one else reads this data, except where needed for security or to comply with the law.
- The service's operator account uses its own Google Sheets and Google Calendar access to read and write the team's attendance sheet and calendar. That access covers the team's own data, not your personal Google account.
5. Who we share data with
- Google, which hosts and runs the service (Google Apps Script, Google Sheets, Google Calendar, Google Cloud) under its own terms and privacy policy.
- The attendance system used by your workplace, which receives your attendance submissions as described in section 3.
- Authorities, only where the law requires it.
We do not sell personal data and do not share it with advertisers or data brokers.
6. Storage and security
Member records and statuses are stored in Google's infrastructure. Access to the member sheet and calendar is limited to the service's administrators. Sign-in is restricted to registered members, and sessions expire automatically. No method of storage is perfectly secure, so we cannot guarantee absolute security.
7. How long we keep data
A member's record is kept while they are part of the team. When someone leaves, an administrator deactivates their record. On request, we will delete or correct a person's personal data, except attendance records the team must keep for record-keeping purposes. Session tokens expire after at most 6 hours.
8. Your choices and rights
You may ask us to tell you what we hold about you, to correct it, or to delete it, and you may withdraw your consent to the processing described here (which ends your use of the service). Contact badguitarehab@gmail.com. We will reply as soon as we reasonably can. You may also revoke the service's access to your Google account at any time in your Google Account permissions. Where Indonesian law (including Law No. 27 of 2022 on Personal Data Protection) gives you further rights, those rights apply.
9. Cookies and this website
This public website (home, privacy and terms pages) sets no cookies, runs no analytics or advertising scripts, and loads no third-party resources. The sign-in flow itself is run by Google and the Google Apps Script platform, which may use their own cookies under Google's policies.
10. Children
The service is for working adults on the team. It is not directed to children, and we do not knowingly collect data from them.
11. Changes to this policy
If this policy changes, we will update the date above. If a change affects how personal data is used, we will tell members.