FISETRA Terms and Conditions

1. Acceptance of Terms

These Terms and Conditions (the "Terms") constitute an agreement between you and PT Idemas Solusindo Sentosa, the provider of FISETRA ("FISETRA" or "we"), governing access to and use of the FISETRA asset management platform.

By creating or activating an account after having had the opportunity to read these Terms, or by indicating agreement through the mechanisms available on the Service, you represent that:

1. You have read, understood and agreed to these Terms;
2. You are at least 18 years old or legally competent according to applicable law; and
3. If you act for and on behalf of a business entity or organization, you have legal authority to bind that business entity or organization.

Recipients who only access tokenized public pages without having an account are not considered registered Customers or Users. However, such recipients are obliged to use the public page only for the purposes stated in the invitation, keep the link confidential, and comply with the special provisions of Section 10.

If you do not agree to these Terms, do not create or activate an account and do not use the Service.

These Terms should be read together with the FISETRA Privacy Policy. If other Commercial Terms are agreed in writing, those terms apply specifically to the commercial matters they govern.

2. Definitions

3. Service Description

FISETRA is a multi-tenant Software-as-a-Service (SaaS) application for enterprise asset management. The Service’s main functions may include:

Feature availability may vary by plan, application version, configuration, device, or stage of development of the Service.

We may add, improve, or customize certain features for product development, security, compliance, or operational reasons. If a change materially reduces the core functionality that Customers use, we will provide notice within a reasonable time before the changes take effect, as far as possible.

During a paid subscription period, we will not permanently discontinue core functions used by Customers unless necessary to comply with legal obligations, address security risks, respond to outages of required third-party services, or address other circumstances beyond our reasonable control. If such discontinuation occurs, we will try to provide alternatives, a transition period, an opportunity to retrieve data, or another reasonable solution based on the circumstances.

Changes do not apply retroactively to a paid subscription period unless required by law or necessary to address urgent security risks. If material changes are unacceptable, the Customer may choose not to renew the Service for a subsequent period.

4. User Accounts

4.1 Account creation

Accounts can be created via:

1. Self-registration, where a User registers with an email address and password and then activates the account through a verification link; or
2. Invitation, where a Company Admin sends an invitation to the User's email address to create or activate an account and connect it to the relevant company.

Invitations expire if they are not used within the period specified by the system.

4.2 Account responsibilities

You must:

• provide correct, accurate and up-to-date information;
• maintain the confidentiality of passwords, OTP codes, access tokens and devices used;
• not share your account with another party or use another person's account;
• use reasonable security measures on your email accounts and devices; and
• immediately notify us and the Company Admin if you know or suspect that your account has been used without authorization.

You are responsible for activity through your account that occurs due to your actions, sharing credentials with others, or negligence that is within your control. You are not responsible for unauthorized activity that is directly caused by our error or negligence, or that occurs after you have reported the incident and we have had a reasonable time to take security measures.

We may request additional verification and temporarily suspend access if necessary to protect your account or the Service.

4.3 Multi-company accounts

One account can be connected to more than one company and can have a different role in each company. You must confirm which company context is active before carrying out work, and you are responsible for the data you enter in that context.

5. Roles and Authority of Company Admins

If your account is connected to a Customer, the Company Admin can:

• view, modify, delete, or otherwise manage Customer Content as authorized;
• assign, change, or revoke User roles and permissions;
• limit the scope of data by department, location, category, or other settings;
• revoke User access to the company;
• manage company communication settings, workflows, and templates; and
• perform other administrative actions available on the Service.

Customer Content is controlled by the Customer, not by individual Users. Internal disputes about authority, employment relationships, data ownership, or User access must be resolved between the User and the Customer. We can assist based on instructions from an authorized party to the extent technically possible.

6. License to Use the Service

Subject to your compliance with these Terms and, for paying Customers, the Commercial Terms, we grant you a limited, non-exclusive, non-transferable, and non-sublicensable license to access and use the Service for internal business purposes.

The license is valid as long as your account or access rights are active. The license may be suspended or terminated if the subscription expires, there is a violation of the Terms, payment arrears, security risks, or legal obligations as described in Section 19.

This license does not grant ownership rights to the Service, source code, designs, documentation or other intellectual property of FISETRA.

7. Prohibited Use

You must not, directly or indirectly:

1. use the Service for an unlawful or fraudulent purpose or in a manner that harms others;
2. access or attempt to access data belonging to other companies, including by manipulating company identifiers, resource identifiers, tokens, or access controls;
3. reverse engineer, decompile, disassemble, or otherwise attempt to obtain the source code, except as expressly permitted by law;
4. conduct penetration testing, vulnerability scanning, load testing, or denial of service attacks without our written consent;
5. use robots, scrapers, or automated tools to retrieve large amounts of data outside the official API and export features;
6. abuse Tokenized Public Pages, forward links thereto to unauthorized parties, or send false responses;
7. upload malware, viruses, malicious code or content that violates the rights of others;
8. enter personal data of third parties without a lawful basis for processing or personal data that is not relevant to the use of the Service;
9. misuse email or notifications to send unsolicited mass messages;
10. rent, resell, sublicense, or provide the Service to third parties without our written consent;
11. remove or change any copyright notices, trademarks, or proprietary attributions;
12. systematically copy the interface, documentation, structure or functionality of the Service to build a competing service; or
13. use access to the Service to obtain or misuse FISETRA's nonpublic technical or business information.

If a violation is suspected, we may limit or suspend access according to the level of risk. For violations that can be corrected and do not pose an urgent risk, we will provide notice and a reasonable opportunity to make corrections.

8. Customer Content

8.1 Ownership

In the relationship between us and Customers, Customers retain all rights and interests they lawfully hold in Customer Content. We do not acquire or claim ownership rights to Customer Content.

8.2 Limited License Granted to Us

The Customer grants us a limited, royalty-free, and non-exclusive license to store, copy, transmit, display, and process Customer Content only to the extent necessary to provide, maintain, secure, improve the reliability of, and support the Service.

We do not sell Customer Content or use it to train artificial intelligence models.

8.3 Responsibility for Content

The Customer is responsible for ensuring that it has the right, authority, and lawful basis to process Customer Content, including employee, vendor, and third-party data and attached files. Customer Content must not violate any law, intellectual property right, confidentiality obligation, or other party's rights.

Customers are also responsible for managing the roles, permissions, approvers and authority of their Users appropriately.

8.4 Confidentiality

We will maintain the confidentiality of Customer Content and limit access to authorized personnel or service providers who need it to provide, secure, maintain, or support the Service. Such personnel and service providers are subject to appropriate confidentiality and security obligations. Customer Content may also be disclosed if required by law or an order from an authorized party.

Internal access for support or investigations will be reasonably restricted as necessary. This obligation does not apply to information that has become publicly available through no breach of ours, was lawfully owned before being received, or was lawfully obtained from another party without an obligation of confidentiality.

8.5 Data backup and recovery

We may perform periodic data backups for system recovery and service continuity. These backups are not an individual archiving service and do not guarantee that any particular data, attachment, transaction, or version will always be available or recoverable.

Recovery capabilities depend on the nature of an incident, backup integrity, the timing of changes, and available technical capabilities. We do not guarantee recovery of data deleted, modified, or overwritten by Users.

Customers are advised to export data periodically through the available features and implement internal procedures to maintain copies of important data.

9. Mobile Application

9.1 Device permissions

The mobile applications may request camera access to scan barcodes and take photos, gallery or file access to select attachments, and permission to send notifications. You can deny or revoke these permissions through the device settings, although doing so may prevent related features from working.

9.2 Local storage and offline mode

The application may store session data, preferences, and a copy of audit data on the device to support work when connectivity is limited. You are responsible for maintaining the physical security of your devices, using screen locks, and reporting any lost device that still has access to the Service.

When logged out, the application deletes or disables the credentials and local data used for active access to the extent supported by the system. Certain cache data or temporary files may remain stored until deleted by the operating system or until the application is removed. Deleting an application will generally delete application data according to the mechanism of the device's operating system.

9.3 Application updates

We may provide updates or require a minimum application version for security, compatibility, or Service continuity. Outdated versions may be unable to use some or all functions.

9.4 Devices and connections

You are responsible for the hardware, mobile data charges, internet connection, and device environment required to use the Service.

10. Tokenized Public Pages and Approval via Email

Some workflows can be accessed without signing in via a tokenized link sent to an email address, including document approval and Self Monitoring reporting pages.

By using the page, recipients are required to:

• use it only for the purposes stated in the invitation;
• ensure that they are authorized to respond;
• keep links and email inboxes private; and
• do not forward links to unauthorized parties.

Actions taken through tokenized links are recorded as electronic activity within the Service. Records may include destination email addresses, related documents or assets, responses, activity times, and available technical information. These records may be used by the Customer as part of an internal audit trail.

The Customer is responsible for determining the authorized party to provide approval and ensuring that the approval method is in accordance with the Customer's internal policies, transaction value and regulatory needs.

This mechanism is not a certified electronic signature. We do not guarantee that it meets any specific electronic signature, authentication, or verification requirement applicable to a particular transaction.

Tokens expire and can be revoked by us or a Company Admin. We are not responsible for the actions of another party who obtains a link because of the recipient's negligence or failure to secure their email account, unless caused by us.

11. Service Availability and Maintenance

We strive to provide the Service on an ongoing basis but do not guarantee that it will always be available, uninterrupted, or error-free. Disruptions may occur because of:

• scheduled maintenance, which will be notified in advance whenever possible;
• emergency maintenance to address system vulnerabilities or failures;
• disruptions to infrastructure, networks, email providers, notification services, application stores, or third-party services;
• use of devices or connections that do not meet the requirements of the Service; or
• force majeure as regulated in Section 18.

Some processes run asynchronously, including email sending, image conversion, import, export, and Self Monitoring triggers. These processes take time and may not be completed immediately.

No specific service-level commitment applies unless expressly stated in the Commercial Terms agreed with the Customer.

If the Service materially fails to function as described or as required by applicable Commercial Terms, the Customer can report the issue through a support channel. After verification, we will make reasonable efforts to correct the problem, provide a temporary solution, rerun the failed process, or provide another reasonable remedy based on the nature of the problem.

12. Plans, Prices, and Payments

Information about plans, features, usage limits, and applicable prices is available on the FISETRA pricing page at https://fisetra.com/pricing/ or in the Commercial Terms provided to the Customer.

The prices and conditions applicable to an order are those displayed or agreed when the order is placed. Price changes do not apply retroactively to a period that has already been paid for and, where applicable, will apply to the next order or renewal period.

Unless expressly stated before payment, subscriptions do not renew automatically. Customers may choose not to renew the Service after the current period ends.

Before payment, we will provide applicable information about the plan, term, price, usage limits, due date, cancellation, refund, and taxes, if any, through the pricing page, order page, quotation, invoice, or other commercial document.

Late payment may result in restricted or suspended access after reasonable notice. A suspension does not remove any payment obligation that has already become due.

If Commercial Terms specifically agreed for an order conflict with these Terms on a commercial matter, the Commercial Terms will apply to that matter, provided they do not conflict with applicable law.

13. Intellectual Property

Intellectual property rights to the Service, including source code, database structure, interface design, logo, FISETRA brand, documentation and development, belong to us and/or our licensors.

These Terms do not transfer any intellectual property rights to you other than the limited license in Section 6.

If you provide suggestions or feedback, you grant us the right to use them without compensation, provided that doing so does not disclose your Customer Content or confidential information.

14. Calculation Results, Audits and Reports

The Service provides data processing, including depreciation calculations, book value, currency conversion based on entered exchange rates, audit differences, and reports and dashboards.

You understand that:

• results depend on the accuracy of the Customer's input data, configurations, methods, and parameters;
• Service output is not accounting, taxation, financial, legal, or asset valuation advice (appraisal);
• Customers must verify results before using them for official reporting, tax matters, investment decisions, or regulatory compliance; and
• physical audit, barcode scanning, and Self Monitoring results also depend on the accuracy of the officer and report recipient.

We are not responsible for errors arising from inaccurate data or configuration, use not in accordance with documentation, or reliance on results without proper verification.

These Terms do not exclude our responsibility where an incorrect result is directly caused by the Service failing to perform a documented function and the error is our responsibility under Section 16.

15. Disclaimer of Warranties

To the extent permitted by law, the Service is provided "as is" and "as available". We do not guarantee that the Service will always be available without interruption, be completely error-free, meet all of the Customer's specific requirements, or be compatible with every third-party device and system.

We will use reasonable efforts to maintain, improve and secure the Service. The disclaimers in this Section are without prejudice to any liability that cannot be excluded under law.

16. Limitation of Liability

To the extent permitted by law:

1. We are not responsible for indirect, special, incidental, or consequential losses, including loss of profits, business opportunities, goodwill, or other losses that are not a direct result of our fault;
2. We are not responsible for data loss or damage caused by the actions or negligence of the Customer or its Users, failure of the Customer's device or connection, or third-party services beyond our reasonable control; and
3. Our total aggregate liability arising from or relating to the Service, whether based on contract, breach of contract, tort, negligence, confidentiality obligations, security incident, data loss, or other basis of claim, will not exceed the amount of subscription fees that the Customer has actually paid to us in the 12 months prior to the first event giving rise to the claim.

The limit applies in aggregate to all claims by the Customer and its Users relating to the same event or series of events, rather than separately to each claim, User, or event.

For free or trial plans, the Service is provided without a specific service-level commitment or service credit.

Users who use an account at the invitation of the Customer must submit claims regarding the Service through the Customer, unless the law provides direct rights that cannot be waived.

Nothing in this Section limits liability to the extent that such a limitation is expressly prohibited by applicable laws and regulations.

17. Indemnification for Third-Party Claims

To the extent permitted by law, the Customer will indemnify us against third-party claims arising directly from:

• Customer Content that violates intellectual property rights, confidentiality obligations, personal data protection requirements, or third-party rights;
• the Customer entering or processing data without the necessary rights or legal basis;
• intentional use of the Service to violate the law or these Terms; or
• User actions carried out on the Customer's instructions or under the Customer's control that give rise to claims against us.

This obligation does not apply to the extent that a claim is caused by our fault, intentional act, or negligence.

We will notify the Customer of a claim within a reasonable time and give the Customer a reasonable opportunity to participate in its defense or settlement. The Customer may not enter into a settlement that admits fault on our behalf or imposes a non-monetary obligation on us without our written consent.

18. Force Majeure

The parties are not responsible for failure or delay in the performance of obligations caused by circumstances beyond their reasonable control, including natural disasters, fire, epidemic, war, riots, government actions, prolonged power outages, national telecommunications disruptions, or failure of key infrastructure providers that cannot be reasonably prevented.

The affected party will make reasonable efforts to reduce the impact and restore the performance of its obligations.

19. Suspension and Termination

19.1 Termination by User or Customer

Users may stop using the Service at any time. Customers may choose not to renew the Service after the current period ends. Early termination, cancellation, and refunds are governed by the Commercial Terms provided before payment.

19.2 Suspension or Termination by Us

We may limit, suspend or terminate access if:

• there is a material breach of the Terms;
• there is activity that compromises the security, integrity or availability of the Service or other Customer data;
• required by law or order of an authority;
• there are payment arrears; or
• provision of the Service becomes legally or technically impossible.

For a violation that can be corrected and does not pose an urgent risk, we will provide notice and a reasonable period to remedy it. We may take immediate action in a security emergency or to prevent greater harm.

19.3 Consequences of Termination

After termination:

• access rights may expire and access tokens may be revoked;
• for 30 calendar days after the subscription ends, the Customer may export available data through the export feature or request data retrieval assistance that can reasonably and technically be provided. A request for assistance may be submitted only by the Company Admin or another party whose authority to represent the Customer can be verified;
• export availability depends on supported formats and features. Exports may not include all attachments, history, configurations, or internal system data;
• after the grace period expires, Customer Content may be deleted or anonymized in accordance with the Privacy Policy and operational deletion cycles, unless still necessary for legal obligations, security, backup, or dispute resolution; and
• backup data may remain stored until the backup retention cycle ends and is not used for normal operations unless required for system recovery.

Customers are responsible for retrieving data before the grace period ends. Provisions regarding ownership, confidentiality, intellectual property, disclaimer, limits of liability, indemnification, law, and dispute resolution remain in effect after termination by their nature.

20. Applicable Law and Dispute Resolution

These Terms are governed and interpreted according to the laws of the Republic of Indonesia.

The parties will first attempt to resolve any dispute through good-faith discussions for up to 30 calendar days after one party provides written notice of the dispute.

If no settlement is reached, the parties agree to the permanent and general jurisdiction of the District Court of South Jakarta, without prejudice to any other right or forum that must remain available under applicable law.

21. Miscellaneous Provisions

21.1 Changes to Terms. We may update the Terms to reflect changes to the Service, operational practices, security, or law. We will provide notice of material changes by email, through the application, or on the website within a reasonable period before they take effect. Changes do not apply retroactively unless required by law or necessary for security. Customers who do not agree to a material change may choose not to renew the Service. Price changes apply only to subsequent orders or periods.

21.2 Severability. If a provision is declared invalid or unenforceable, the provision will be adjusted to the minimum extent possible and the remaining provisions will remain in effect.

21.3 Waiver. The failure of either party to exercise a right is not considered a permanent waiver of that right.

21.4 Assignment. You may not assign your rights or obligations under these Terms without our written consent. We may assign these Terms to an affiliate or successor as part of a restructuring, merger, acquisition, or sale of the business, upon notice to the Customer.

21.5 Entire Agreement. These Terms, the Privacy Policy and the applicable Commercial Terms constitute the entire agreement regarding the Service. In the event of a conflict, the more specific document applies to the subject matter it regulates.

21.6 Language. These Terms are made in Indonesian. If a translation is available and there is a difference in interpretation, the Indonesian version shall prevail, to the extent permitted by law.

21.7 Relationship of the Parties. These Terms do not create a partnership, joint venture, agency, employment, or fiduciary relationship between the parties.

22. Support, Complaints and Security Reports

Customers and Users can submit support questions, complaints, or security reports to [email protected].

To help us respond, a report should include the account identifier, name of the company involved, description of the problem, estimated time of the incident, and any available supporting evidence. Do not send passwords or OTP codes.

We will respond within a reasonable time based on the level of urgency and available information. Reports of suspected unauthorized access, credential leaks, or risks to data may be prioritized.

23. Contact Us