بيان الخصوصية

1About This Policy

This Privacy Policy explains how PT Profesional Job Indonesia ("Projob.id", "we", "us") collects, uses, shares, stores, and protects your personal data. It is based on Law No. 27 of 2022 on Personal Data Protection (the "PDP Law"), the Electronic Information and Transactions Law and its amendments, and Government Regulation No. 71 of 2019 on Electronic Systems and Transactions.

This policy covers all Projob.id services:

• projob.id — the public site: job vacancies, company profiles, industrial zones, events, articles, and Cek Loker (job-scam checker);
• member.projob.id and m.projob.id — job seeker services, including the progressive web app (PWA) opened in your browser;
• employer.projob.id — services for hiring companies ("Employers");
• partner.projob.id — services for partners such as event organisers, recruiters, trainers, psychologists, media, and zone operators ("Partners").

It applies to everyone whose data we process: visitors, job seekers, event participants, Employer users, and Partner users. Additional terms apply to cookies (Cookie Policy), psychological tests (Psychological Test Privacy Notice), and Partners (Partner Privacy Policy). Where they differ, the more specific document governs its own subject.

2Who Operates the Service

Projob.id is operated by PT Profesional Job Indonesia, Springlake View, Tower Elodea 11/037, Summarecon Bekasi, Bekasi 17142, Indonesia. We are the personal data controller for data processed to run Projob.id, except where this policy names another party as controller.

Since 1 October 2026, Projob.id services have been operated by PT Profesional Job Indonesia. Your personal data continues to be processed for the same services and the same purposes described in this policy.

3Who Is Responsible for Your Data

• Projob.id is the controller for your ProjobID account, profile, applications sent through our service, events we organise, payments made to us, security, and service communications.
• Employers become separate controllers of the applicant data they receive when you apply, the event candidate data they view, and their booth visitor data. Employers decide for themselves how to assess, contact, and hire, and must comply with the PDP Law for that data.
• Partners (such as event organisers) become separate controllers of the participant data they receive for the events or services they run.
• Processors (our service providers) process data only on our instructions. See section 10.

Projob.id is a job information and matching platform. It is not a job placement agency and does not make hiring decisions on behalf of Employers.

4Data We Collect

4.1Visitors (no account)

• Technical data: IP address, approximate city/region derived from the IP address, browser and device type, pages viewed, referrer, and time of access.
• Cookie and language choices stored in your browser.
• What you submit: vacancy text you check in Cek Loker, reports about vacancies or profiles, newsletter sign-ups, and conversations with the support chat.
• Link source data when you open an invitation or share link (for example UTM codes and referral codes).

4.2Job Seekers

• Account: name, email, phone/WhatsApp number, password (stored as a hash, never in plain text), public ProjobID, sign-in method (password or Google account), and verification status.
• Profile and CV: profile photo, nickname, gender, place and date of birth, ID-card and current address (including a map pin if you add one), marital status, religion, height and weight, whether you hold a driving licence and tax number (yes/no), education and work history, skills, languages, training, achievements, organisations, hobbies, field interests, salary and work-type expectations, social media and portfolio links, and documents you upload.
• Other people's contact details you provide, such as a residence contact person or emergency contact. Please make sure they know about it and agree.
• Applications: vacancies you apply to, timestamps, attached documents, status updates from Employers, invitations to apply, and your ProMatch score for each vacancy.
• Derived scores: ProMatch, Field Direction Score, and profile completeness (see section 7).
• Psychological tests: answers, results, and sharing permissions (see section 16 and the Psychological Test Privacy Notice).
• Membership and transactions: Free/Plus/Silver/Gold plan, validity period, payment history, vouchers, and points.
• Activity: saved vacancies, Inbox messages, notifications, and profile visibility settings.

4.3Event Participants

• Name, email, phone number, and, where an event asks for it, company and job title. Registrations made without an account are recorded with the same data.
• Ticket type, payment status, voucher code, staged approval status, ticket QR code, check-in and check-out times, session attendance, and certificates.
• Location at self check-in: when you scan a check-in QR poster, your browser asks for location permission. We record the coordinates, accuracy, distance to the QR point, the result of the attempt, IP address, and browser type to confirm that you are actually present. Location is taken only when you press check-in, never continuously.
• Booth visits you record by scanning an exhibitor's booth QR code.
• Registration source: the UTM code, referral code, or invitation link you used.

4.4Employers

• Company data: name, logo, profile, business sector, address, industrial zone, and uploaded legal documents.
• Employer user data: name, job title, email, phone number, and role within the company account.
• Vacancies, requirements, notes and statuses on applicants, candidate invitations, event booths, and subscription, plan, billing, and payment history.

4.5Partners

• Identity and profile data: name, organisation, Partner category, contact details, and documents requested for verification, such as national ID card (KTP), tax ID (NPWP), and cooperation agreements (MoU).
• Bank account details for commission payouts or event fund settlement, and the tax data required for them.
• Events, zone vouchers, invitations, sales, commissions, and activity in the Partner portal, including trusted devices for two-step verification.

4.6All Users

• Consent records: which documents you accepted, their version, the time, IP address, and browser type, including your cookie choices while you are signed in.
• Security: sign-in records, failed sign-in attempts, results of automated checks on uploaded files, and access logs for certain data.
• Reports and sanctions: reports you submit or that concern you, evidence, review notes, warning letters, suspensions, terminations, and appeals.
• Communications: emails, WhatsApp messages, and Inbox messages we send to you or you send to us.

We do not store payment card numbers. Card and account details you enter when paying are processed directly by the payment gateway provider.

5Where Your Data Comes From

• From you — when you register, complete your profile, apply, register for events, pay, report, or contact us.
• Automatically from your device — technical data, cookies, and location at self check-in (only with your device permission).
• From Google — your name, email, and photo if you sign in with a Google account.
• From Employers and Partners — application statuses, invitations, approval decisions for event participants, registrations entered by organisers, and booth visits.
• From other users — reports about profiles or vacancies, and contact details entered by job seekers.
• From service providers — payment status from the payment gateway and delivery status for email or WhatsApp.
• Generated by us — ProMatch scores, Field Direction Scores, profile completeness, and psychological test results.

6Purposes and Legal Bases

We process personal data only where there is a lawful basis under Article 20 of the PDP Law.

If we want to use data for a new purpose that is not compatible with the purposes above, we will tell you and, where required, ask for your consent first.

7ProMatch, Field Direction Score, and Automated Decisions

ProMatch is an automated score of how well your profile matches a vacancy's requirements based on education and field of study, experience, skills, languages, location, field fit (Field Direction Score), and profile completeness. Age and gender are not scored in ProMatch. The Field Direction Score estimates which work fields suit you based on your experience, education, skills, training, and interests. Scores are calculated using rules and weights we set. We may use artificial intelligence (AI) to help read vacancy text.

How scores are used:

• Employers see applicants' ProMatch scores to help sort and review applications. The decision to accept or reject remains the Employer's.
• Event organisers may set minimum requirements, such as a certain Field Direction Score or ProMatch score. If your score is below the requirement, the system may automatically decline your registration for that event or your application to that event's vacancies.
• We use scores to suggest relevant vacancies and events to you.

Psychological test results are currently not used in ProMatch or the Field Direction Score. If that changes, we will ask for your separate consent.

You have the right to object to decisions based solely on automated processing (Article 10 of the PDP Law). You can ask for an explanation of the factors behind your score and request a human review through the Projob Support Form. For event requirements, we will pass your review request to the organiser. The quickest way to improve a score is to complete and update your profile.

8Specific Personal Data

The PDP Law treats some data as specific personal data, including health data, personal financial data, and children's data. On Projob.id this may include:

• blood type, disability information, or other health information you choose to add to your profile;
• psychological test results, which we treat as equivalent to specific data;
• Partners' bank account and tax data.

We process such data only for the stated purposes, with explicit consent where required, restricted access, and additional safeguards. You may leave optional fields blank. Religion, marital status, blood type, height, and weight are not used to calculate ProMatch. Employers must not use any data to discriminate (see the Community Guidelines).

9What Is Shown Publicly

• Job seekers have a public profile page at projob.id/id/<ProjobID> with a QR code. It may show your display name, a small profile photo, a short quote, province and city/regency, main skills, professional links, join date, and a partly masked phone number.
• You can set your public profile visibility in account settings to Full, Limited, or Hidden. Unless you change it, the setting is Full.
• CVs, full addresses, email addresses, full phone numbers, documents, applications, and psychological test results are never shown publicly.
• Company data, vacancies, and Partner profiles intended for the public are shown on the site.
• Profiles and content of suspended or terminated users are hidden from the public.

10Sharing Data

We do not sell your personal data. We share data only in the following situations.

10.1With Employers

When you apply, the Employer that owns the vacancy receives your application data: profile and CV, attached documents, contact details, ProMatch score, and application form answers. Your application may also be sent to that company's email address. Psychological test results are included only if you choose to attach them. As event exhibitors, Employers can see event candidates for their vacancies and their booth visitors, and can invite candidates to apply. Once received, the Employer is a separate controller and is responsible for how it uses the data.

10.2With Event Organisers

When you register for an event, the organiser (Projob.id, a Partner, or an organising Employer) receives your registration and attendance data to manage the event, participant approval, check-in, and certificates. Organisers other than Projob.id are separate controllers of that data.

10.3With Partners

Partners receive the data needed for their service, such as participant data for events they manage, zone voucher redemptions, or summaries of registrations from their invitation links used to calculate commissions. Consultant Partners, such as psychologists, can see your data only if you give permission for a specific session.

10.4With Processors

We use service providers that process data on our instructions and are bound by confidentiality and security obligations:

• server, data centre, and file storage providers;
• email delivery services (Alibaba Cloud DirectMail and other email providers);
• a WhatsApp gateway provider for notifications;
• payment gateway providers;
• Google, for sign-in with a Google account and anti-robot checks (reCAPTCHA); Google Analytics is not active, and if enabled it runs only after you accept analytics cookies;
• AI providers for text analysis, such as Anthropic and DeepSeek, when the related features are enabled;
• an IP geolocation service (ipinfo.io);
• the on-site support chat service (Liqaa);
• a messaging service for internal team notifications (Telegram).

10.5With Authorities and in Other Cases

• With law enforcement or competent authorities where required by law, or to handle serious violations such as fraud, exploitation, and human trafficking.
• With a successor business in a merger, demerger, acquisition, or consolidation, with notice to you as required by the PDP Law.
• With other parties at your request or with your consent.

11Transfers Outside Indonesia

Projob.id's main servers are located in Indonesia. Some providers in section 10.4 process data outside Indonesia, for example in Singapore, the United States, or China. These include email services, Google, AI providers, IP geolocation, WhatsApp, and Telegram.

Under Article 56 of the PDP Law, before transferring data abroad we make sure the destination country offers an equal or higher level of protection, or that adequate and binding safeguards exist through our agreements with the provider. If neither applies, we ask for your consent. For AI features we send only the data needed. Where possible, we remove or mask direct identifiers such as names, email addresses, and phone numbers before sending.

12Retention

We keep data for as long as needed for its purpose or as required by law. After that, it is deleted or anonymised.

Backup copies are removed according to our backup cycle. Data already received by Employers or Partners is kept according to their own policies.

13Security

We apply reasonable technical and organisational measures, including:

• encrypted connections (HTTPS) and secure session cookies;
• hashed passwords, and two-step verification for certain portals;
• need-to-know staff access and logging of access to certain data, including every view of a psychological test result by a company;
• screening of uploaded files and limits on sign-in attempts;
• regular backups and system monitoring.

No system is completely secure. Keep your password confidential and contact us promptly if you suspect misuse of your account.

14Your Rights and How to Exercise Them

Under Articles 5 to 13 of the PDP Law, you have the right to:

• be informed about how your data is processed;
• complete, update, and correct inaccurate data;
• access and obtain a copy of your data;
• receive your data in a common machine-readable format, or have it sent to another controller (portability);
• ask us to stop processing and to delete or destroy your data;
• withdraw consent you have given;
• object to decisions based solely on automated processing, including profiling;
• ask us to suspend or restrict processing;
• sue for and receive compensation for unlawful processing, as provided by law.

In your account: edit your profile and public profile visibility in account settings; unsubscribe from newsletters and marketing through the link in every email or in settings; export and delete psychological test data, and revoke permission to share test results, in the Psychological Test menu.

Through the Support Form: send your request via the Projob Support Form (Account & Security category) using your account email address. State your ProjobID or account email and the right you are exercising. We may ask you to verify your identity so that data is not given to the wrong person. We will respond no later than 3 x 24 hours after we receive your complete request. If the request takes longer to carry out, for example a deletion with a grace period, our response will explain the timeline.

We may refuse or limit some requests where the PDP Law provides an exemption. Examples are data we must keep by law, data needed for an ongoing sanction case, or data needed for law enforcement. If we refuse, we will give our reasons. Withdrawing consent does not affect processing carried out before the withdrawal. For data you have already sent to an Employer or Partner, please also contact them. On request, we will help pass your request on.

If you are not satisfied with our response, you may complain to the personal data protection authority or the competent government agency.

15Cookies and Similar Technologies

We use cookies and browser local storage to keep you signed in, protect your account, and remember your language, theme, and PWA settings. Analytics and marketing cookies are used only after you accept them in the cookie banner. Projob.id currently sets no marketing cookies. Cookie names, retention periods, and how to change your choices are set out in the Cookie Policy.

16Psychological Tests

Psychological tests are voluntary and start only after you give explicit consent. Your answers and results are confidential. Results are shared with no one unless you choose to attach them to a specific application, and you can revoke that permission. Test results are not a clinical diagnosis. You can export and delete your test data yourself. Details are in the Psychological Test Privacy Notice.

17Children

Projob.id is intended for users aged 18 and over. We do not knowingly collect data from children under 18. The exception is educational events expressly open to students, where registration is accompanied and approved by a parent or guardian. If we learn that a child's data was collected without parental or guardian consent, we will delete it. Parents or guardians may contact us through the Projob Support Form.

18Data Breach Notification

If a personal data protection failure occurs, we will notify you and the competent authority in writing no later than 3 x 24 hours, as required by Article 46 of the PDP Law. The notice will state what data was exposed, when and how it happened, and what we are doing to handle and recover from it. In some cases we will also inform the public.

19Changes to This Policy

We may update this Privacy Policy. Each version is numbered and dated. For material changes, we will notify you by email, Inbox, or an in-service notice before the change takes effect. Where a change requires new consent, we will ask for it. The current version is always available at projob.id/privacy.

20Contact Us

PT Profesional Job Indonesia (Projob.id)

Springlake View, Tower Elodea 11/037, Summarecon Bekasi, Bekasi 17142, Indonesia

• Privacy, Personal Data Protection Officer, legal matters, and general support: Projob Support Form (support.projob.id/contact) — for personal data matters choose the Account & Security category.

This policy is issued in Indonesian and English. If there is any difference, the Indonesian version prevails.