Pastipro Privacy Policy
How Pastipro collects, encrypts, and protects your personal information, authentication sessions, and digital product credentials.
Effective update: October 2026Information We Collect
Pastipro only collects information directly necessary to process digital product transactions, deliver orders, and provide customer support services.
- Account Identity: Display name, verified email address, profile image, and two-factor authentication (2FA) status from Clerk authentication.
- Transaction & Order Data: Purchase history, selected payment channel, billed amount in IDR, and top-up target details (such as game User ID and Server/Zone ID).
- Support Communications: Messages and attachments you submit through Support Tickets or seller onboarding applications.
Credential Security & Digital Product Encryption
All software keys and premium account credentials stored in Pastipro's vault are encrypted using AES-256-GCM alongside cryptographic fingerprints (HMAC-SHA256) to prevent duplicate stock.
To protect buyers against email interception, Pastipro never writes license codes or account passwords into notification emails or server logs.
Payment Processing & Third Parties
Pastipro does not store your credit/debit card numbers or banking credentials. All payments are securely processed through the official Midtrans payment gateway.
For Game Top-Up orders, the system only forwards the target game identifier (User ID / Zone ID) and product SKU code to our automated fulfillment provider (Digiflazz) to complete delivery.
User Rights & Account Deletion
You can update your profile, change your email address, configure two-factor authentication (2FA), or delete your account through Security Settings at any time.
If an account is deleted via Clerk, your personal profile is automatically anonymized in our system, while minimal transaction accounting records are retained as required for financial auditing.