← Back to Home

Privacy Policy

Last updated: April 16, 2026

1. Introduction

ADACareer ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").

We comply with Indonesian data protection laws, including:

  • UU No. 27 Tahun 2022 tentang Perlindungan Data Pribadi (Personal Data Protection Law / PDP Law)
  • PP No. 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik
  • UU No. 19 Tahun 2016 tentang Informasi dan Transaksi Elektronik (ITE Law)

By using our Services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

When you register and use our Services, we collect:

Account Information:

  • Full name
  • Email address
  • Phone number (optional)
  • Password (encrypted)
  • Profile photo (optional)

CV/Resume Data:

  • Work experience (job titles, companies, dates, descriptions, achievements)
  • Education history (degrees, institutions, fields of study, GPAs)
  • Skills and competencies
  • Projects and portfolios
  • Certifications and licenses
  • Languages spoken
  • Professional summary
  • Target job roles and career goals
  • Location preferences (city, country)
  • Salary expectations
  • LinkedIn profile, personal website, or portfolio URLs

Job Search Data:

  • Job search queries
  • Saved jobs and job likes
  • Job applications (application date, status, method)
  • Job filters and preferences (work arrangement, experience level, industry)
  • Custom cover letters

Communication Data:

  • Chat messages with AIDA (our AI chatbot)
  • Feedback and support requests
  • Survey responses
  • Emails sent to or from us

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

  • Device Information: Browser type, operating system, device type, screen resolution
  • Usage Data: Pages viewed, features used, time spent on pages, clicks, scrolls
  • IP Address and Location: Approximate geographic location based on IP address
  • Cookies and Tracking: Session cookies, analytics cookies, authentication tokens
  • Log Data: Access times, error logs, API requests

2.3 Information from Third Parties

We may receive information from:

  • Single Sign-On (SSO): If you sign up via Google or LinkedIn, we receive your name, email, and profile photo from those platforms (with your consent)
  • Job Boards: Publicly available job posting data from external sources
  • Analytics Providers: PostHog, Sentry, Langfuse (aggregated usage statistics)

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Providing Core Services (B2C)

  • Create and manage your account
  • Generate AI-powered CV optimization suggestions
  • Calculate job match scores using vector similarity and semantic search
  • Provide personalized job recommendations
  • Track your job applications and saved positions
  • Enable AIDA chatbot to answer your career questions
  • Send job alerts and notifications
  • Generate downloadable CV PDFs

3.2 Future B2B Services (Recruiter/Enterprise Features)

Important Notice - Planned B2B Usage:

We plan to offer B2B recruitment services to companies, HR departments, and recruiters. Your CV data may be used for:

  • Candidate Matching: Employers can search for candidates whose skills match their job requirements
  • Talent Analytics: Aggregated, anonymized insights on talent supply, skill trends, and market data
  • Recruitment Tools: Helping employers find and contact qualified candidates
  • Direct Applications: When you apply to a job, your CV is shared with that specific employer

3.3 AI Model Training and Improvement

  • Train and improve our AI algorithms for job matching, CV analysis, and recommendations
  • Generate vector embeddings (1024-dimensional numerical representations) of CVs and jobs for semantic search
  • Improve AIDA chatbot responses and career guidance accuracy
  • Develop new AI-powered features

3.4 Platform Improvement and Analytics

  • Analyze usage patterns to improve user experience
  • Monitor platform performance and fix bugs
  • Conduct A/B testing for new features
  • Generate anonymized statistics and reports

3.5 Communication and Support

  • Send service announcements, updates, and security alerts
  • Respond to your inquiries and support requests
  • Send welcome emails and onboarding guidance
  • Request feedback to improve our Services

3.6 Legal and Security Purposes

  • Prevent fraud, abuse, and unauthorized access
  • Comply with legal obligations and law enforcement requests
  • Enforce our Terms of Service
  • Protect the rights, property, and safety of ADACareer, users, and the public

4. Legal Basis for Processing (Indonesian PDP Law)

Under Indonesian law, we process your personal data based on:

  • Consent: You provide explicit consent when you register, create a CV, or use our Services
  • Contract Performance: Processing is necessary to provide Services you requested
  • Legitimate Interest: We have legitimate business interests in improving our platform, preventing fraud, and ensuring security
  • Legal Obligation: We must comply with Indonesian laws and regulations

5. How We Share Your Information

We share your information in the following circumstances:

5.1 With Your Consent

  • When You Apply to Jobs: Your CV and application materials are shared with the employer
  • Profile Visibility: If enabled, your profile may appear in employer searches (you can disable this in settings)

5.2 Third-Party Service Providers

We share data with trusted service providers who help us operate the platform:

ProviderPurposeData Shared
AWS CognitoAuthenticationEmail, name, password (hashed)
Neon (PostgreSQL)Database hostingAll user data
OpenAI, Google Gemini, Azure AI, Mistral AIAI features (CV analysis, chat)CV text, chat messages
VoyageAIVector embeddingsCV text, job descriptions
AWS S3, UploadThingFile storageUploaded CV files, photos
AWS SESEmail deliveryEmail address, name
PostHogAnalyticsUsage data, events
SentryError trackingError logs, user ID
LangfuseAI observabilityAI prompts, responses
Stripe, MayarPayment processingEmail, payment info
Upstash RedisCaching, session managementSession tokens, cached data

All third-party providers are contractually required to protect your data and use it only for specified purposes.

5.3 Business Transfers

If ADACareer is involved in a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose your information if required by law or in response to:

  • Valid legal requests (court orders, subpoenas)
  • Law enforcement investigations
  • Protection of our rights, property, or safety
  • Prevention of fraud or illegal activity

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data (which cannot identify you) with partners, researchers, or the public for analytics, research, and reporting purposes.

6. Data Security

We implement industry-standard security measures to protect your data:

Security Measures:

  • Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest (database encryption)
  • Password Security: Passwords are hashed using bcrypt/Argon2 (never stored in plain text)
  • Access Controls: Role-based access control (RBAC) for employees and contractors
  • Authentication: Multi-factor authentication (MFA) for admin accounts
  • Monitoring: Continuous security monitoring and intrusion detection
  • Regular Audits: Periodic security audits and vulnerability assessments
  • Secure Infrastructure: Hosted on AWS and Vercel with enterprise-grade security

Disclaimer: While we strive to protect your data, no system is 100% secure. You use our Services at your own risk. We cannot guarantee absolute security against unauthorized access, hacking, or data breaches.

7. Data Retention

We retain your personal data for as long as necessary to provide Services and comply with legal obligations:

  • Active Accounts: We retain your data while your account is active
  • Deleted Accounts: After account deletion, we retain data for 90 days for recovery purposes, then permanently delete it (unless legal retention is required)
  • Legal Requirements: We may retain data longer if required by Indonesian law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)
  • Anonymized Data: We may retain anonymized data indefinitely for analytics and research
  • Backup Retention: Deleted data may persist in backups for up to 30 days before permanent erasure

8. Your Rights (Indonesian PDP Law)

Under Indonesian Personal Data Protection Law, you have the following rights:

Right to Access

You can request a copy of your personal data we hold. Go to Profile → Data Export or contact privacy@ada4career.com.

Right to Correction

You can update or correct your information at any time through your profile settings.

Right to Deletion

You can delete your account and request erasure of your data. Go to Profile → Delete Account. Note: We may retain certain data for legal compliance.

Right to Withdraw Consent

You can withdraw consent for data processing at any time. Note: Withdrawing consent may limit your access to Services.

Right to Data Portability

You can export your data in a machine-readable format (JSON) through Profile → Data Export.

Right to Object

You can object to certain processing activities. For example, opt-out of employer visibility in Privacy Settings.

Right to File Complaints

If you believe we have violated your data protection rights, you can file a complaint with the Indonesian Ministry of Communication and Informatics (Kominfo).

How to Exercise Your Rights: Email us at privacy@ada4career.com with your request. We will respond within 14 business days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

9.1 Types of Cookies We Use

  • Essential Cookies: Required for authentication and core functionality (e.g., login sessions)
  • Analytics Cookies: PostHog analytics to understand usage patterns (anonymized)
  • Preference Cookies: Remember your settings (theme, language)

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features.

10. International Data Transfers

Your data may be transferred to and processed in countries outside Indonesia, including:

  • United States: AWS (data hosting), OpenAI (AI services), PostHog (analytics)
  • Europe: Neon (database), Vercel (hosting)
  • Singapore: Some AWS infrastructure

We ensure that international transfers comply with Indonesian law by:

  • Using service providers with adequate data protection measures
  • Implementing standard contractual clauses (SCCs)
  • Ensuring encryption in transit and at rest

11. Children's Privacy

Our Services are not intended for individuals under 17 years old. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

If you believe a child has provided personal data to us, please contact privacy@ada4career.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you via email or prominent notice on the Platform
  • Provide at least 7 days' notice before changes take effect (30 days for material changes)

Your continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer (DPO)

ADACareer
Bandung Techno Park
Jl. Telekomunikasi No.1
Sukapura, Dayeuhkolot, Kab. Bandung
West Java 40257, Indonesia

Email: admin@ada4career.com
General Support: admin@ada4career.com

Website: ada4career.com

Response Time: We will respond to privacy-related requests within 14 business days as required by Indonesian law.

Acknowledgment

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL DATA AS DESCRIBED HEREIN.