Individual Service (Self-Service)

TERMS AND CONDITIONS OF USE OF PANTOGRAF - INDIVIDUAL SERVICE (SELF-SERVICE)

Provider: PT Pemeta Antariksa Grafika | Document Version: 2.0 (Individual) | Effective Date: 3 August 2026

These Terms and Conditions of Use (the “Terms and Conditions”) constitute a legally binding agreement between PT Pemeta Antariksa Grafika (“Pantograf”, the “Provider”, or “We”) and each individual who registers for and uses Pantograf’s Individual Service (the “User” or “You”). By clicking “I Agree” at registration, You declare that You have read, understood, and agreed to be bound by all of these provisions. If You do not agree, You may not register for or use the Service.

These Terms and Conditions are prepared for individual Users. Terms for business entities, government agencies, and institutions are set out in a separate document.

English text is provided for convenience. The Indonesian text prevails (see Article 26).

Article 1 - Definitions

(1) Unless expressly provided otherwise, capitalized terms in these Terms and Conditions have the following meanings:

a. “Platform” or “Pantograf” means the web-based (WebGIS) platform developed, owned, and provided by the Provider, which presents maps, data, and spatial analysis results interactively through a browser.

b. “Provider” or “We” means PT Pemeta Antariksa Grafika, a limited liability company established under the laws of the Republic of Indonesia, domiciled in South Jakarta, with Business Identification Number (NIB) 1405260002939, at Jl. BDN 1, Kelurahan Cilandak Barat, Kecamatan Cilandak, Kota Administrasi Jakarta Selatan, DKI Jakarta 12430.

c. “Portal” means the site portal.pantograf.app used for Account registration and management, storage of User information, and Subscription payment and billing.

d. “Application” means the Platform software where the User uploads, processes, displays, and stores User Data.

e. “Service” means the overall individual service provided by the Provider through the Portal and the Application under these Terms and Conditions.

f. “User” or “You” means an individual with legal capacity who registers an Account in their own name and uses the Service for their own purposes.

g. “Account” means access credentials in the form of a username and password or other authentication method granted to the User to access the Service.

h. “User Data” means all spatial or GIS files, documents, certificates, data, and content uploaded or entered by the User into the Application, including personal data contained therein.

i. “Subscription Period” means the Service subscription period selected and paid for by the User, as displayed on the Portal and confirmed by email.

j. “Voucher” means a promotional code, discount, or service credit issued by the Provider and usable by the User in accordance with Article 7.

k. “Pantograf Output” means analyses, visualizations, tools, or generic functions generated by the Platform that do not contain User Data.

l. “User Processed Output” means maps, documents, analyses, or other media produced using User Data as input, including materials composed by the User with the Platform as a means of presentation.

m. “Aggregated and Anonymized Data” means statistical data, usage metrics, and technical information regarding system performance, features used, and error logs, that has been processed and/or anonymized so that it cannot be used to identify the User, the User’s projects, or any individual, and which is neither User Data nor personal data.

n. “Calendar Day” means any day including Saturdays, Sundays, and official public holidays; “Business Day” means a day other than Saturday, Sunday, and official public holidays.

o. “Child” means a person under 18 (eighteen) years of age.

p. “Thematic Geospatial Information” or “IGT” means Geospatial Information depicting one or more particular themes prepared by reference to Basic Geospatial Information, as referred to in Law of the Republic of Indonesia Number 4 of 2011 on Geospatial Information.

Article 2 - Electronic Acceptance and Legal Capacity

(1) Consent to these Terms and Conditions is given electronically through the User’s affirmative action, namely by clicking “I Agree” when registering an Account.

(2) Such electronic consent constitutes valid and binding consent under the laws and regulations on electronic information and transactions.

(3) The Provider records the time, date, Account identity, and version of the document agreed as an audit trail, and retains that record while the Account is active and for 5 (five) years thereafter.

(4) By agreeing to these Terms and Conditions, the User represents and warrants that the User is at least 18 (eighteen) years of age and has legal capacity under Indonesian law, and is registering for and in their own name.

(5) These Terms and Conditions and all amendments may be accessed again by the User at any time through the Portal, and the Provider provides a copy of the version agreed by the User upon request.

(6) The text of the Terms and Conditions displayed at registration is the Indonesian text.

Article 3 - Age Limit and Protection of Children

(1) The minimum age to use the Service is 18 (eighteen) years. The Service is not designed, intended, or marketed for use or access by a Child.

(2) The Provider provides an age-verification mechanism at registration and does not knowingly process a Child’s personal data through the Service.

(3) If the Provider learns that an Account was registered by a Child, the Provider will deactivate that Account and delete related personal data, unless consent is obtained from the Child’s parent or guardian to the extent such processing is permitted by law and regulation.

(4) The Provider provides a reporting mechanism for anyone who finds suspected use of the Service by a Child or suspected violation of a Child’s rights, through the channel referred to in Article 10.

Article 4 - Scope of Service: Portal and Application

(1) The Service consists of two parts subject to these single Terms and Conditions:

a. the Portal, which is limited to Account registration and management, storage of User information, and Subscription payment and billing; and

b. the Application, where all User Data is uploaded, processed, displayed, and stored.

(2) The Provider grants the User a limited, non-exclusive, personal, non-transferable, and non-sublicensable right to use the Application during the Subscription Period.

(3) The grant of use rights under paragraph (2) is not a sale of the Platform and does not transfer ownership of the Platform or the intellectual property rights therein.

(4) Features available to the User, including storage and project limits, are displayed on the Portal when selecting a Subscription package and may differ between packages.

(5) Account without a package. The User may register an Account without selecting a package. In that case the User obtains access only to the Portal, the Application is not yet activated, and these Terms and Conditions apply insofar as they concern the Account, personal data, and use of the Portal. The Provider charges no fee for an Account without a package.

(6) The Provider may close an unused Account without a package after a reasonable period, after prior notice to the User by email and an opportunity to download data, in accordance with Article 22.

Article 5 - Account

(1) The Account is personal and used by the User alone. The User may not sell, rent, or transfer the Account to another party.

(2) The User must keep access credentials confidential and use an adequate password.

(3) The User must notify the Provider without undue delay if the User knows or suspects unauthorized use of the Account.

(4) The User is responsible for activity conducted through the Account, except activity occurring after the User has given notice under paragraph (3), or occurring because of the Provider’s fault.

Article 6 - Subscription, Price, and Payment

(1) Subscription prices are displayed on the Portal in Indonesian Rupiah and already include Value Added Tax and other applicable taxes, unless expressly stated otherwise on the order page.

(2) Before payment, the Portal displays at least: the selected package, the Subscription Period, the total price payable, and available payment methods.

(3) Payment is made through payment channels provided on the Portal. The Provider issues an electronic payment proof or receipt to the User after payment is received.

(4) The Subscription Period begins after payment is received and confirmed, unless otherwise stated on the order page.

(5) If a payment-system failure causes the User to be charged without an active Service, the Provider refunds that amount no later than 14 (fourteen) Calendar Days after verification.

(6) Free Trial. The Provider may offer a free trial package for a limited period, usable only 1 (one) time by each User. The trial period begins when the User confirms activation, not when the Account is registered.

(7) Expiry of the trial does not create a payment obligation and does not automatically convert into a paid Subscription. The Provider does not bill unless the User first selects a paid package and completes payment.

(8) After the trial ends without the User selecting a paid package, access to the Application is stopped, and User Data is treated in accordance with Article 22.

Article 7 - Vouchers and Promotions

(1) The Provider may issue Vouchers as promotional codes, discounts, or service credits, with terms and validity announced at issuance.

(2) Unless otherwise stated, a Voucher: (a) is valid for 1 (one) use; (b) cannot be cashed out, transferred, or exchanged for another form; (c) does not apply retroactively to completed transactions; and (d) cannot be combined with other promotions.

(3) Voucher terms, including validity and applicable packages, are shown before the User completes payment.

(4) The Provider may cancel a Voucher obtained or used unlawfully, with notice to the User stating the reason. Such cancellation does not reduce the User’s rights to Service already paid in full.

(5) Use of a Voucher does not reduce the User’s rights under Article 9 and consumer-protection laws and regulations. If a refund is made for a transaction that used a Voucher, the refund equals the amount of money actually paid by the User.

Article 8 - Subscription Renewal

(1) The Subscription Period does not renew automatically unless the User expressly and separately activates automatic renewal.

(2) If the User activates automatic renewal, the Provider:

a. notifies the next planned charge and amount by email no later than 7 (seven) Calendar Days before the charge date; and

b. provides a means to disable automatic renewal at any time through the Portal, effective before the next charge date.

(3) Price changes do not apply to a running Subscription Period. Price changes for renewal are notified together with the notice under paragraph (2)(a), and the User may disable automatic renewal before the charge date.

Article 9 - Cancellation, Refunds, and Exchange

(1) The User may exchange the Service or cancel a purchase within at least 2 (two) Business Days from receipt of the Service, where there is:

a. an error and/or mismatch between the Service received and what was agreed;

b. an error and/or mismatch in the time of Service provision;

c. a hidden defect; or

d. the Service cannot be used as it should.

(2) In addition to the rights under paragraph (1), the Provider grants a cancellation right in its own discretion within 7 (seven) Calendar Days from payment, provided the Service has not been used materially, with a full refund.

(3) If the User ends the Subscription before the Subscription Period ends because of the Provider’s fault or negligence, the User is entitled to a proportional refund for the unused remainder of the Subscription Period.

(4) Cancellation and refund requests are submitted through the channel in Article 10. The Provider responds no later than 3 (three) Business Days and pays the refund no later than 30 (thirty) Calendar Days after the request is approved.

(5) Refunds are made through the same payment method as the original payment, unless otherwise agreed with the User.

Article 10 - Complaints Service

(1) The Provider provides a complaints service for Users via email contact@pantograf.app and complaint channels available on the Portal.

(2) Complaint procedure: the User submits a complaint with Account identity and a description of the issue; the Provider records the complaint and issues a ticket number.

(3) The Provider gives an initial response no later than 3 (three) Business Days after the complaint is received, and resolves the complaint no later than 30 (thirty) Calendar Days, unless the matter needs further examination, which is notified to the User with an estimated resolution time.

(4) Complaints are handled by Provider personnel competent in the relevant field.

(5) Resolving a complaint under this Article does not reduce the User’s right to pursue dispute resolution under Article 25.

Article 11 - Permitted Use

(1) The User may use the Service for the User’s own personal or professional purposes, including to produce User Processed Output.

(2) The User may use User Processed Output for the User’s own purposes, including commercial purposes, subject to Article 13.

Article 12 - Prohibitions

(1) The User must not:

a. reverse engineer, decompile, disassemble, or otherwise attempt to obtain the Platform source code;

b. copy, redistribute, rent, lend, sell, or transfer the Service or any part of it to a third party;

c. rebrand, alter branding, or remove the Provider’s ownership marks or attribution;

d. access or attempt to access systems, servers, or data not belonging to the User, interfere with Platform security and integrity, or distribute malicious software;

e. use the Service in a manner that violates laws and regulations, including uploading data obtained unlawfully;

f. use the Platform or Pantograf Output to train, develop, or improve artificial intelligence or machine-learning models, or to systematically extract data from the Platform; this prohibition does not apply to User Processed Output that belongs to the User under Article 13; and/or

g. use the Platform to build a product or service substantially similar to or competing with the Platform.

Article 13 - Data Ownership, Outputs, and Intellectual Property Rights

(1) All intellectual property rights in the Platform - including code, design, technology, algorithms, models, and interfaces - are the exclusive property of the Provider.

(2) User Data is and remains the property of the User. The Provider acquires no ownership rights in User Data.

(3) User Processed Output is the property of the User.

(4) Pantograf Output that is generic and does not contain User Data is the property of the Provider.

(5) The User grants the Provider a limited, non-exclusive, royalty-free license for the Subscription Period solely to store, process, and display User Data as needed to operate the Service at the User’s request. This license ends when the Subscription Period ends and Article 22 is carried out.

(6) For User Processed Output that the User publishes to the public, the User includes the attribution “Made with Pantograf” or a similar format specified by the Provider. This obligation does not apply to internal, personal, or limited-party use.

(7) The User represents and warrants that the User is entitled to upload User Data and that User Data does not infringe third-party rights.

(8) The Provider does not disseminate, publish, or make available to third parties on its own initiative Thematic Geospatial Information containing User Data. The Provider acts as a platform and technology-tool provider, and not as a geospatial-information organizer with respect to User Data.

Article 14 - Provider Access and Confidentiality of User Data

(1) On the Individual Service, Provider personnel do not open, read, or access the contents of User Data, except in the limited cases in paragraph (4). This commitment binds the Provider and distinguishes the Individual Service from services for business clients.

(2) For the avoidance of doubt, paragraph (1) addresses access to the contents of User Data by a person. Automatic processing of User Data by the Platform system as needed to operate the Service at the User’s request - including storage, display, analytic processing, indexing, and backup under the license in Article 13(5) - is not access under paragraph (1).

(3) The Provider’s administrative account is used only for infrastructure maintenance, system-health monitoring, backup, and disaster recovery, and is not used to read the contents of User Data.

(4) Provider personnel may access the contents of User Data only where:

a. the User expressly requests it, for example for technical support requested by the User, limited to what is needed to handle that request;

b. it is strictly necessary to address a service disruption, security incident, or system emergency that cannot be resolved without such access, limited to the minimum data scope and duration; or

c. required under a lawful request from law enforcement or a court in accordance with laws and regulations.

(5) For access under paragraph (4)(b), the Provider notifies the User without undue delay after handling is complete. For access under paragraph (4)(c), the Provider notifies the User insofar as notice is not prohibited by law or a competent order.

(6) The Provider logs every access under paragraph (4) and provides that record to the User on request.

(7) The Provider keeps User Data confidential and does not disclose it to third parties except as provided in this Article and Article 15.

Article 15 - Personal Data Protection

(1) For the User’s personal data processed through the Portal - including Account data, billing and payment data, and security and usage data - the Provider acts as Personal Data Controller (Pengendali Data Pribadi).

(2) For other persons’ personal data contained in User Data uploaded by the User to the Application, including personal data in certificates or similar documents, the User acts as Personal Data Controller and the Provider acts as Personal Data Processor (Prosesor Data Pribadi) processing on the User’s behalf. The User must ensure a lawful basis for processing that personal data.

(3) The Provider’s bases for processing personal data under paragraph (1) are performance of a contract, compliance with legal obligations, and/or the User’s consent for specific purposes stated when consent is requested.

(4) The Provider provides the User with information on the legality of processing, purposes of processing, types and relevance of personal data, retention periods, processing periods, and the User’s rights, through the Privacy Policy, which is an inseparable part of these Terms and Conditions.

(5) The User has the right to: obtain information; complete, update, and correct personal data; obtain access and copies; end processing, erase, and/or destroy; withdraw consent; object to decisions based solely on automated processing including profiling; delay or restrict processing; claim and receive compensation for processing violations; and obtain and use personal data in a commonly used or machine-readable format and transmit it to another controller insofar as systems can communicate securely.

(6) Requests to exercise rights under paragraph (5) are submitted in a recorded manner through the channel in Article 10 and answered no later than 30 (thirty) Calendar Days.

(7) If a personal-data protection failure occurs for personal data of which the Provider is Controller, the Provider gives written notice no later than 3 × 24 (three times twenty-four) hours to the User as data subject and to the competent authority, containing at least the personal data disclosed, when and how it was disclosed, and remediation and recovery measures.

(8) If a personal-data protection failure occurs for personal data of which the User is Controller under paragraph (2), the Provider notifies the User no later than 1 × 24 (one times twenty-four) hours after learning of it and provides reasonable cooperation.

(9) Transfer of personal data outside the territory of the Republic of Indonesia is made only where the destination country has an equal or higher level of personal-data protection, or there is adequate and binding protection, or based on the User’s consent, in accordance with Article 56 of Law of the Republic of Indonesia Number 27 of 2022 on Personal Data Protection (UU PDP).

(10) The Provider engages other processors (sub-processors) only as needed to operate the Service. The list of sub-processors and processing locations is published in the Privacy Policy accessible through the Portal, and changes are notified before they take effect.

Article 16 - Aggregated and Anonymized Data

(1) The Provider may produce and use Aggregated and Anonymized Data for system-health monitoring, statistical analysis, and developing and improving Platform quality.

(2) The right under paragraph (1) does not give the Provider the right to access, read, use, or disclose User Data, and does not diminish Article 14(1).

(3) The Provider does not treat map content, spatial or GIS files, documents, certificates, or the substance of the User’s projects as part of Aggregated and Anonymized Data.

Article 17 - Third-Party Components and Data

(1) The Platform may contain or display open-source software components, basemaps, map tiles, or other third-party data subject to the license terms and attribution requirements of the relevant third parties.

(2) The User complies with those third-party license terms and attribution obligations, including maintaining attribution notices displayed on maps or outputs.

(3) Availability and accuracy of third-party components or data are outside the Provider’s control. If third-party components or data become unavailable and materially affect the Service, Article 18(3) applies.

Article 18 - Nature of Outputs and Service Availability

(1) The Provider endeavors to make the Service function as described on the Portal and to provide technical support and error fixes within a reasonable time.

(2) Platform outputs are analysis and visualization aids produced based on data, parameters, and information used by the User. Those outputs are not professional advice, legal opinions, technical assessments, or a sole basis for decision-making, and the User is responsible for independent verification before relying on them, especially for purposes with legal consequences.

(3) Except as expressly stated in these Terms and Conditions or required by applicable laws and regulations, the Provider does not warrant that the Service will operate without interruption or error at all times, be continuously available, or fit the User’s particular needs, purposes, or uses.

(4) If a disruption makes the Service materially unusable for more than 7 (seven) consecutive Calendar Days in one Subscription Period, the User is entitled to an extension of the Subscription Period for the duration of that disruption.

(5) Scheduled maintenance notified in advance within a reasonable time is not counted as a disruption.

Article 19 - Liability

(1) The Provider is liable for loss suffered by the User insofar as the loss arises from the Provider’s fault or negligence, in accordance with applicable laws and regulations.

(2) Liability under paragraph (1) covers loss that is a direct consequence of the Provider’s fault or negligence and that was foreseeable when these Terms and Conditions were agreed, in accordance with the Indonesian Civil Code (Kitab Undang-Undang Hukum Perdata) on damages. The Provider does not bear loss that is not a direct consequence of its fault or negligence.

(3) The User is responsible for decisions taken based on Platform outputs, subject to Article 18(2), and for the lawfulness and compliance of User Data uploaded by the User.

(4) The User holds the Provider harmless from third-party claims insofar as those claims arise from User Data uploaded by the User in violation of third-party rights or laws and regulations.

(5) Nothing in these Terms and Conditions is intended to transfer or limit Provider liability that cannot be transferred or limited under laws and regulations.

Article 20 - Security

(1) The Provider implements reasonable technical and organizational security measures to protect the Service and User Data from unauthorized access, disclosure, alteration, or destruction.

(2) The Provider provides adequate authentication means and encourages the User to enable multi-factor authentication when available.

(3) The User applies reasonable security practices on the User’s side, including keeping access credentials confidential.

(4) This Article does not diminish the Provider’s liability under Article 19.

Article 21 - Term and Termination

(1) These Terms and Conditions take effect when the User gives consent and continue while the User’s Account is active.

(2) The User may end the Subscription and close the Account at any time through the Portal, with refund rights under Article 9 where the conditions are met.

(3) The Provider may suspend or terminate the Service if the User materially breaches these Terms and Conditions, after written notice and an opportunity to cure within 7 (seven) Calendar Days, except for unlawful use or use that endangers Platform or other Users’ security, which may be suspended immediately with notice.

(4) If termination by the Provider under paragraph (3) proves unfounded, the User is entitled to a proportional refund.

(5) Expiry of these Terms and Conditions does not extinguish provisions that by their nature survive, including ownership, confidentiality, and dispute resolution.

(6) For termination under this Article, the Parties waive Articles 1266 and 1267 of the Indonesian Civil Code insofar as those provisions require a prior court decision.

Article 22 - Data Return and Deletion

(1) The User may download User Data and User Processed Output at any time during the Subscription Period.

(2) After the Account is closed or the Subscription Period ends without renewal, the Provider provides the User an opportunity to download User Data for 30 (thirty) Calendar Days.

(3) After the period in paragraph (2) ends, the Provider deletes User Data from active systems and from backups according to the backup cycle, no later than 90 (ninety) Calendar Days.

(4) At the User’s request, the Provider deletes earlier and confirms deletion in writing, except where retention obligations under paragraph (5) apply.

(5) The Provider may retain data required to be retained by laws and regulations, limited to the data and period required. In that case, the Provider stops processing and restricts access to that data, deletes it when the retention obligation ends, and explains this to the User.

(6) Retention periods for the User’s personal data, including Account and billing data that is not User Data, are set out in the Privacy Policy.

Article 23 - Amendments to the Terms and Conditions

(1) The Provider may amend these Terms and Conditions. Amendments are not retroactive and do not apply to a running Subscription Period insofar as they increase the User’s obligations or reduce the User’s rights.

(2) Amendments are notified to the User by email and/or the Portal no later than 14 (fourteen) Calendar Days before they take effect.

(3) User consent to amendments is not inferred solely from continued use. For amendments that increase obligations or reduce rights, the Provider seeks the User’s express consent.

(4) If the User does not agree to an amendment, the User may end the Subscription before the amendment takes effect and receive a proportional refund for the remainder of the Subscription Period.

(5) Changes to personal-data processing information under Article 15(4) are notified to the User before those changes occur.

Article 24 - Force Majeure

(1) The Parties are not liable for failure or delay in performing obligations caused by circumstances beyond reasonable control, including natural disaster, pandemic or outbreak, widespread network or power disruption, widespread cyberattack, embargo, or government action.

(2) If force majeure lasts more than 30 (thirty) Calendar Days, either Party may end the Subscription, and the User is entitled to a proportional refund for the remainder of the Subscription Period.

Article 25 - Governing Law and Dispute Resolution

(1) These Terms and Conditions are governed by and construed in accordance with the laws of the Republic of Indonesia.

(2) Any dispute is first resolved amicably through the complaints service under Article 10.

(3) If amicable resolution is not reached, the User may choose to resolve the dispute through a body that settles disputes between consumers and business actors, or through a court of general jurisdiction, in accordance with consumer-protection laws and regulations.

(4) This provision does not reduce the User’s right to bring a claim in the district court at the User’s domicile insofar as permitted by laws and regulations.

(5) Out-of-court dispute resolution does not extinguish criminal liability as provided in laws and regulations.

Article 26 - Language

(1) These Terms and Conditions are made in Indonesian. If the Provider provides a translation in another language, that translation is for ease of understanding.

(2) If there is a difference in interpretation between the Indonesian text and its translation, the Indonesian text prevails.

Article 27 - Miscellaneous and Contact

(1) Severability. If any provision is held invalid or unenforceable, the remaining provisions remain in force.

(2) Assignment. The User may not assign rights and obligations without the Provider’s written consent. The Provider may assign its rights and obligations to a party that takes over all or substantially all of its business, with notice to the User, and such assignment does not reduce the User’s rights.

(3) Entire Agreement. These Terms and Conditions together with the Privacy Policy constitute the entire agreement between the Parties regarding the Individual Service.

(4) Contact. Questions and notices are sent to: PT Pemeta Antariksa Grafika, Jl. BDN 1, Kelurahan Cilandak Barat, Kecamatan Cilandak, Kota Administrasi Jakarta Selatan, DKI Jakarta 12430, email contact@pantograf.app.

BY CLICKING “I AGREE”, THE USER DECLARES THAT THE USER HAS READ, UNDERSTOOD, AND AGREED TO ALL PROVISIONS OF THESE TERMS AND CONDITIONS OF USE.