Konek QR
Sign up free
  1. Home
  2. How it works
  3. Pricing
  4. Developers
  5. Documentation
  6. Listener app
  7. Security
  8. Check a QRIS
  9. FAQ
  10. Contact
Sign up freeLog in

Konek QR Terms of Service

The rules for using Konek QR: what we do and do not do, your account, your QRIS, payment detection, fees and the limits of our liability.

Document status

  1. Version0.1
  2. StatusDRAFT
  3. In force sincenot set yet
  4. Last changed4 November 2026

These terms govern your use of Konek QR: the konekqr.web.id website, the app.konekqr.web.id dashboard, the pay.konekqr.web.id payment pages, the api.konekqr.web.id API and the Konek QR Listener Android app. By signing up for or using any of them, you agree to these terms, the Privacy Policy, the Acceptable Use Policy, the Balance Policy and, if you use the API, the API terms in section 17.

1. Who we are

Konek QR is operated by Konek QR ("we"). You can reach us at [email protected] or on WhatsApp at 0899-6511-116.

2. What Konek QR does

Konek QR is software for merchants who already have a static QRIS from their own merchant account. From that QRIS, Konek QR:

  • makes a QR with the amount built in for each invoice;
  • shows a payment page with your shop's name and logo;
  • matches payments read by the Konek QR Listener app on your phone to invoices, then tells your systems and channels by webhook or Telegram.

3. What Konek QR does not do

  • Konek QR never receives, holds or sends your buyers' money. Buyers pay straight into your merchant account at your QRIS provider. No funds pass through Konek QR, so there is nothing to withdraw from us.
  • Konek QR is not connected to the QRIS switching network, to banks or to any payment service provider's systems, and it does not issue QRIS. The QR that Konek QR makes comes from your own static QRIS; only the amount changes.
  • Konek QR is not affiliated with, approved by or supervised by Bank Indonesia, ASPI, GoPay, DANA, ShopeePay or any other QRIS provider. Their names are used only to describe the services you use.
  • We never ask for the password, PIN, OTP or token of your merchant account, and we never sign in to it.

4. Your account

  1. You must be at least 18 and legally able to enter into contracts. If you sign up for a business, you confirm that you are authorised to act for it.
  2. The information you give us must be true, and you must keep it up to date.
  3. You are responsible for everything done through your account, your API keys and the Listener phones you pair. Keep your password and API keys safe, turn on 2FA, and disconnect a lost phone from the Devices page.
  4. An NMID can be verified on one account only, and a Listener phone serves one account only. Creating extra accounts to get around limits, the free quota or action we have taken on your account is not allowed.
  5. Tell us at [email protected] as soon as you suspect someone else is using your account.

5. Your QRIS

  1. You may only add a QRIS that belongs to you or to the business you act for. Before it can be used for live invoices, ownership is verified with a small payment into that QRIS, which the Listener must detect.
  2. Your QRIS and merchant account remain subject to your provider's terms. You alone are responsible for following them, including rules on extra charges to buyers, business categories and transaction limits.
  3. By default, Konek QR adds a unique code of Rp1–499 to the invoice amount so that each payment can be recognised. A QRIS provider may treat that addition as an extra charge to the buyer. If you do not want that risk, switch the unique code to the mode that takes it off the amount, in your QRIS settings.
  4. Your QRIS provider may limit, freeze or close your merchant account at its own discretion. We cannot reverse its decision.
  5. Changing your QRIS requires verifying again and a 24-hour wait. This protects you from someone trying to divert your payments to another QRIS.

6. Payment detection

  1. Automatic confirmation depends on your phone: the merchant app must show the payment notification, the Listener must be running with notification access, and the phone must be online. We do not guarantee that every payment is detected, or detected on time.
  2. An invoice's status shows what we know: pending, paid, paid late, expired or cancelled. Payments that match no invoice go to the "unmatched" box.
  3. For goods or services of high value, also check the transaction history in your merchant app before you hand them over. You can mark an invoice paid by hand at any time.
  4. Test mode makes QRs that cannot be paid on purpose. A simulated payment in test mode is not a real payment.

7. Fees and balance

  1. In each calendar month (WIB), the first 100 successful transactions on your account that are detected automatically are free. After that, the fee is 0.7% of the amount paid, rounded up to the rupiah, taken from your prepaid balance when the invoice is paid.
  2. Manual confirmations and test mode are always free, with no limit.
  3. Fees are never taken from the buyer's money, because that money never passes through Konek QR.
  4. The balance is governed by the Balance Policy. A negative balance holds back new live invoices until you top up; test mode keeps working.
  5. If the fee or the free quota changes, we tell you by email and in the dashboard at least 14 days before it applies. Changes never apply to fees already taken.

8. Prohibited use

You may not use Konek QR for anything the Acceptable Use Policy prohibits, online gambling and fraud included, or to break Indonesian law.

9. Limits, suspension and closure

  1. We may limit live invoices, suspend API keys, suspend an account or close it when there is strong reason to believe these terms are being broken, when there is a security risk, or on a lawful request from the authorities. The Acceptable Use Policy explains how.
  2. When we stop your live invoices, we tell you why by email, unless the law or an ongoing investigation forbids it. You can ask for a review by a person at [email protected].
  3. You can close your account at any time by asking for it on the Account page of the dashboard. Our team closes it and lets you know by email; until then you can take the request back. Any remaining balance is settled under the Balance Policy, and your data is kept or deleted under the Privacy Policy.

10. Personal data

We process personal data under the Privacy Policy. Your buyers' data that you send to Konek QR (in an invoice's description, referenceId or metadata, for example) is your responsibility: send only what is needed, and make sure you are allowed to share it.

11. Availability

We work to keep Konek QR running, but we do not promise an uninterrupted service. Maintenance, network problems or third-party failures can stop it for a while. When that happens, your buyers' payments still land in your merchant account; only the confirmation is delayed. Outages are posted at status.konekqr.web.id.

12. Intellectual property

The Konek QR software, name, logo and documentation belong to us. You may use them only to use this service. Logos and content you upload remain yours; you allow us to use them only to show your payment pages and run the service.

13. Limitation of liability

To the extent the law allows:

  1. We are not responsible for payment funds, which we never receive or hold, or for the actions of QRIS providers, banks or payer apps.
  2. We are not responsible for losses from payments that were not detected, or detected late, when you handed over goods without checking the status or your transaction history.
  3. We are not responsible for indirect losses, lost profits or data lost in your own systems.
  4. Our total liability to you is at most the fees you paid to Konek QR in the 3 months before the event.

These limits do not apply to losses caused by our intent or gross negligence.

14. Indemnity

You cover the losses and third-party claims against us that arise because you broke these terms, the Acceptable Use Policy or the law, including claims from your buyers about the goods or services you sell.

15. Changes to these terms

We may change these terms. We announce important changes by email and in the dashboard at least 14 days before they apply. If you do not agree, you can close your account before that date. Using Konek QR after a change applies means you accept it.

16. Law and disputes

These terms are governed by the laws of the Republic of Indonesia. If a dispute arises, we will first try to settle it by discussion within 30 days of either side raising it in writing. If that fails, the dispute goes to the district court that has jurisdiction under Indonesian civil procedure.

17. API terms

These terms apply when you use the Konek QR REST API (api.konekqr.web.id), webhooks, GET /v1/events, the SDKs, or the openapi.yaml and llms.txt files. They add to the Terms of Service; where the two conflict, the Terms of Service apply.

API keys

  1. API keys are created in the dashboard and shown only once. Keep them on a server or in a secrets manager, never in source code, repositories, mobile apps or web pages.
  2. The API is for servers only. Requests from a browser (carrying an Origin header) are refused, and there is no CORS.
  3. A test key (kq_test_…) only sees and creates test-mode objects; a live key (kq_live_…) only live ones. Give each key the narrowest scopes it needs (payments:read, payments:write, events:read).
  4. You are responsible for every request made with your keys. If a key leaks, revoke it in the dashboard at once and create a new one.

Who the API is for

The API may only be used for the QRIS of the account holder. You may not use one account to create invoices on another merchant's QRIS, resell API access, or build a service that makes others depend on your account without our written permission.

Usage limits

  • 120 requests per minute per key, and 120 invoice creations per minute per account. Beyond that the answer is 429 rate_limited with a Retry-After header.
  • At most 200 live invoices awaiting payment per account.
  • At most 5 waiting (long-poll) GET /v1/events requests at once per account.
  • At most 5 webhook endpoints per account.

We may change these limits to keep the service stable. We announce changes that lower a limit in advance, except during an outage or an attack.

Webhooks and events

  1. Webhooks are sent only to HTTPS URLs. Redirects are not followed, and the endpoint must answer 2xx within 15 seconds.
  2. Every webhook is signed in the Standard Webhooks format. Verify the signature before you process an order; the webhook verification guide shows how.
  3. Delivery is at least once: the same event can arrive more than once. Filter by webhook-id.
  4. Failed webhooks are retried for about 3 days. Events can be read again through GET /v1/events for 30 days; after that they are deleted.
  5. An endpoint that fails every delivery for 3 days is disabled automatically, and the account owner is told by email. An admin can also disable it.

What a status means

paid means Konek QR received a payment notification from your Listener phone that matched the invoice, or the invoice was marked paid by hand or simulated (paidVia says which). Konek QR does not hold funds and cannot confirm the balance of your merchant account. To lower the risk, use requireDetection so invoices are refused when no Listener phone is active, use expectedNmid so invoices are refused when the QRIS is not yours, and watch paidLate and device.offline.

Changes to the API

  1. This is version v1 of the API. We may add endpoints, fields, enum values and event types without notice; make your integration ignore what it does not know.
  2. Changes that can break existing integrations, such as removing a field or changing its meaning, are announced by email and in the documentation at least 90 days ahead, unless needed to close a security hole.

SDKs and sample code

The @konekqr/node and konekqr/laravel SDKs and the sample code in the documentation are provided as they are. Test them in test mode before using them for live invoices.

What is not allowed

On top of the Acceptable Use Policy, you may not:

  • try to reach another account's data, or test the API's security outside the rules on the Security page;
  • send fake notifications, signatures or events;
  • overload the API on purpose or get around the usage limits, such as with many keys or many accounts;
  • copy the Konek QR documentation for another service that imitates Konek QR.

Suspension

We may suspend keys, webhook endpoints or an account's API access when they break these terms or put the service or other users at risk. Where we can, we tell you first.

18. Language

These terms are written in Indonesian and English. If the two differ, the Indonesian version applies.

19. Contact

Questions about these terms: [email protected] or WhatsApp 0899-6511-116.