SLS-C (Smart Lighting System – Clever) is a platform developed and operated by PT. Santinilestari Energi Indonesia to monitor, manage, and report the operational status of smart street lighting infrastructure across Indonesia. SLS-C is available as a web application and as mobile applications for Android and iOS distributed through Google Play Store and Apple App Store.
This Privacy Policy applies to all users of the SLS-C platform and mobile apps — including system administrators, field technicians (contractors), project owners (customers), and operators — and describes how we collect, process, store, and protect personal and operational data.
Account & Identity Data
When a user account is created by a system administrator, we store:
Usage & Activity Data
We automatically collect usage information when you interact with the platform:
- Login and logout timestamps
- IP address and browser user-agent string
- Pages visited, actions performed, and features used
- Session duration and navigation history within the app
Uploaded Files
Users with the appropriate role may upload:
Uploaded files are stored securely on the server and accessible only to authorized users.
Mobile App & Device Permissions
The SLS-C mobile application may request the following device permissions. Each permission is used solely for the feature described below, and you may revoke it at any time through your device settings.
- Camera: Used to capture photographs of street lighting devices during field inspections and maintenance visits. Camera access is requested only when you initiate a photo capture action.
- Location (GPS): Used to display your current position on the device map view, helping field technicians navigate to nearby devices. Location is accessed only while the app is in use and is not stored or transmitted to our servers.
- Storage / Files: Used to read and save device photos, inspection documents, and exported reports to your device's local storage.
- Push Notifications: Used to deliver real-time operational alerts (e.g., device offline, status change) to your device. You may disable notifications at any time in your device settings.
- Internet Access: Required to communicate with the SLS-C server for all platform features.
We do not access your contacts, microphone, call logs, or any other sensitive device data.
SLS-C primarily manages smart street lighting devices. The platform stores and displays operational data transmitted by each device. This data belongs to the project owner and is managed on their behalf.
Device Information
Location Data
Each registered device stores GPS coordinates used to display device locations on maps:
Telemetry & Operational Data
Real-time and historical data pushed from devices includes:
Maintenance Records
Data recorded by field technicians during inspections and repairs:
- Device inspection reports with dates, findings, and technician names
- Repair records including problem descriptions and resolutions
- SIT (Site Investigation & Test) device assessments
- Label and classification data attached to devices
Data collected through SLS-C is used exclusively for the following purposes:
- Platform operation: Authenticate users, enforce role-based access control, and provide the core monitoring dashboard and device management features.
- Device monitoring: Display real-time and historical device status, telemetry, and operational data to authorized users.
- Alert & notification delivery: Send status-change notifications via in-app alerts and WhatsApp integration when devices change operational state.
- Reporting & analytics: Generate project performance reports, device health summaries, and maintenance history exports.
- Audit trails: Record user actions (status overrides, device edits, bulk operations) to maintain accountability and traceability.
- Push notifications: Deliver real-time operational alerts to your registered mobile device when devices you monitor change status, go offline, or require attention.
- System maintenance: Diagnose technical issues, monitor server health, and improve platform stability.
Access to data within SLS-C is strictly governed by the role assigned to each user account:
- Administrators have full access to all data across all projects.
- Customers can only view data for devices and projects associated with their organization.
- Contractors can only access devices assigned to their contractor ID.
- Operators have read-only or limited write access as configured by administrators.
External Sharing
We do not share personal data with external parties except in the following limited circumstances:
- Notification services: Device alert messages may be routed through a WhatsApp API gateway to deliver operational notifications. Only device status information (no personal credentials) is transmitted.
- Legal obligations: We may disclose data if required by applicable Indonesian law, court order, or lawful government request.
- Business transfers: In the event of a merger or acquisition, user data may be transferred as part of business assets, with prior notice provided.
- Account data is retained for as long as the account is active. Deactivated accounts may be retained for up to 12 months for audit purposes before permanent deletion.
- Device telemetry snapshots are retained according to the system's configured snapshot retention period (configurable by administrators). Older snapshots are automatically purged.
- Maintenance records and inspection reports are retained indefinitely as they form part of the permanent device history.
- Uploaded files (photos, documents) are retained until explicitly deleted by an authorized user.
- Activity logs are retained for a rolling period and used for security auditing.
We implement industry-standard security measures to protect your data:
- Encrypted transmission: All data is transmitted over HTTPS (TLS).
- Password hashing: User passwords are never stored in plain text — they are hashed using bcrypt before storage.
- Role-based access control (RBAC): Every page and API endpoint is protected by permission checks using Filament Shield.
- Session security: Sessions are encrypted and invalidated on logout.
- Server-side storage: Uploaded files are stored in a private server directory, not publicly accessible by default.
- Database isolation: Production databases are not publicly reachable and are protected by firewalls.
As a user of SLS-C, you have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may update your profile information directly within the platform settings, or request corrections via your administrator.
- Deletion: You may request permanent deletion of your account and associated personal data (name, email, phone, profile photo). Note that certain records (device history, audit logs, maintenance reports) may be retained to fulfil legal and operational obligations even after account deletion.
- Restriction: You may request that we limit how we use your data while a correction or deletion request is being processed.
- Portability: You may request an export of your personal data in a machine-readable format.
How to Request Account & Data Deletion
To submit a data deletion request, you may use either of the following methods:
- Online form: Visit our Support page and submit a message with the subject "Account Deletion Request", including the email address linked to your account.
- Email: Send a deletion request to info@sei-lighting.co.id with subject line "Data Deletion Request – SLS-C".
To exercise any of your other rights, contact us using the details in Section 12.
SLS-C uses cookies strictly for functional purposes:
- Session cookie: Keeps you authenticated across page loads during your active session. Deleted when you close your browser or log out.
- CSRF token cookie: Protects form submissions against cross-site request forgery attacks.
- Preference cookies: Remember your interface preferences (e.g., sidebar state, theme) between sessions.
We do not use advertising cookies, analytics tracking cookies (Google Analytics, Facebook Pixel, etc.), or any third-party tracking technologies.
SLS-C is a professional platform intended exclusively for use by authorized business users — including system administrators, field technicians, project managers, and organizational operators.
User accounts are created exclusively by system administrators of the subscribing organization, ensuring that only verified professional users gain access to the platform.
We may revise this Privacy Policy periodically to reflect changes in our platform features, legal requirements, or data practices. When material changes occur, we will:
- Update the "Last updated" date at the top of this page.
- Notify active users via an in-app notification or email where required by applicable law.
Continued use of SLS-C after any changes have been posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: