Privacy Policy

CVHub.id ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our CV-building platform and website (collectively, the "Service"). It complies with Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi / "PDP Law") of the Republic of Indonesia, the Electronic Information and Transactions Law (UU ITE No. 11 of 2008 as amended by Law No. 19 of 2016), and the international standards set by the General Data Protection Regulation (GDPR) where applicable.

1. Data Controller

CVHub.id is operated by an Indonesian entity. For the purposes of the PDP Law and applicable regulations, the data controller is:

2. Personal Data We Collect

2.1 Data You Provide

• Account Information: email address, name, and password when you register.
• CV Content: your uploaded CV file (PDF, DOCX, or TXT) and any personal data contained within, including but not limited to your name, contact information, work history, education, skills, and other professional information.
• Cover Letters: content you generate or upload for cover letters.
• Payment Information: when you purchase a plan, payment processing is handled by our third-party payment gateways Xendit and Midtrans. We do not store your credit card or banking details on our servers.
• Communications: any messages or inquiries you send to us.

2.2 Data Collected Automatically

• Usage Data: pages visited, time spent, interactions with our AI tools, and feature usage patterns.
• Device & Browser Information: IP address, browser type, operating system, and device identifiers.
• Cookies & Similar Technologies: we use essential cookies for authentication and functionality. Analytics cookies help us improve the Service. You can manage cookie preferences in your browser settings.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, maintain, and improve the CV building and AI optimization Service.
• To process AI-powered rewriting, reformatting, and ATS analysis of your uploaded CV.
• To process payments via Xendit and Midtrans.
• To communicate with you about your account, transactions, and Service updates.
• To detect, prevent, and address technical issues, fraud, and abuse.
• To comply with legal obligations under Indonesian law.

We do not use your uploaded CV data to train or improve AI models without your explicit consent. Your CV content is only processed at your request for the purpose of the Service.

4. AI Processing of Your CV

Our Service uses artificial intelligence to analyze, rewrite, reformat, and optimize your uploaded CV. When you upload a CV:

• Your CV content is temporarily processed by our AI engine to generate optimized output.
• Processed CVs are stored in your account for your convenience. You may delete them at any time.
• We implement technical and organizational measures to protect your data during AI processing, including encryption in transit and at rest.
• Your data is not used to train or improve third-party AI models.

5. Legal Basis for Processing

Under the PDP Law and GDPR, we process your data based on the following legal grounds:

• Consent: you have given explicit consent by accepting this Privacy Policy and using the Service.
• Contractual Necessity: processing is necessary to fulfill the Service you've requested (CV building, AI optimization).
• Legal Obligation: processing required to comply with Indonesian laws and regulations.
• Legitimate Interests: improving our Service, security, and fraud prevention.

6. Data Sharing & Third Parties

We may share your data with the following categories of third parties:

• Payment Processors: Xendit and Midtrans process your payment data. Their privacy policies govern the handling of your payment information.
• Hosting Providers: our infrastructure is hosted on secure third-party servers.
• Legal Authorities: when required by law or in response to valid legal requests from Indonesian authorities.

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data only as long as necessary to provide the Service and fulfill the purposes described in this policy, or as required by Indonesian law. Account data is retained until you delete your account. CV data is retained until you remove it or delete your account. Payment records are retained for the period required by applicable tax and financial regulations (generally 5 years under Indonesian law).

8. Your Rights

Under the PDP Law and applicable regulations, you have the following rights:

• Right to Access: request a copy of your personal data.
• Right to Rectification: correct inaccurate or incomplete data.
• Right to Erasure: request deletion of your data ("right to be forgotten").
• Right to Restrict Processing: limit how we use your data.
• Right to Data Portability: receive your data in a structured, machine-readable format.
• Right to Object: object to processing based on legitimate interests.
• Right to Withdraw Consent: withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@cvhub.id. We will respond within the timeframe required by the PDP Law (30 days, extendable as permitted).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/HTTPS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your data may be processed on servers located outside Indonesia. When data is transferred internationally, we ensure appropriate safeguards are in place in accordance with the PDP Law and applicable regulations.

11. Cookies

We use the following types of cookies:

• Essential Cookies: required for authentication and basic service functionality.
• Analytics Cookies: help us understand how you use the Service to improve your experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be notified to you via email or through the Service.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, or to exercise your rights under the PDP Law, please contact our Data Protection Officer: