Privacy Policy

Effective date: July 1, 2026

This Privacy Policy explains what information ThisProfileIs ("we", "us") collects when you use the Service, and how it is used, stored, and shared. It should be read together with our Terms of Service, which governs the license we hold over your data, including the talent-pool use described there.

1. Information We Collect

Account information: email address, and a password (if you register directly) or your Google/LinkedIn account ID if you sign in with those providers.
Profile information: your name, contact details, photo, work history, education, and skills — either entered manually or extracted from a CV/resume file you upload.
Third-party sign-in data: if you use "Sign in with Google" or "Sign in with LinkedIn", we receive your name, email address, and profile photo from that provider, per their OAuth consent screen.
Usage data: basic technical data such as IP address and browser type, collected automatically for security and analytics.

2. How We Use Your Information

To create, host, and let you publish your profile as a personal website;
To parse uploaded CV files into structured profile data (using automated and/or AI-assisted parsing tools);
To authenticate you and keep your account secure;
For the talent-pool and business purposes described in Section 3 of our Terms of Service, which you agree to when you register.

3. Where Your Data Is Stored

Uploaded CV files and photos are stored on Google Drive rather than on our servers. Your published profile site is hosted via Cloudflare Pages. Account and profile records are stored in our application database on our own server infrastructure.

4. Third-Party Services

We use the following third-party services to operate the product, each of which processes a limited slice of your data as part of providing their service to us: Google (sign-in and file storage), LinkedIn (sign-in), Cloudflare (hosting and DNS), and an AI/LLM provider (CV parsing). We do not sell access to these providers beyond what's necessary for them to perform their function for us.

5. Cookies

We use a single essential, HTTP-only session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

6. Data Retention & Deletion

If you delete your account, your login credentials are invalidated and your profile is unpublished immediately. As described in our Terms of Service, we may retain a copy of your data — including an archived copy of files in Google Drive — for record-keeping, legal, and talent-pool purposes, subject to your statutory rights under applicable law (including Indonesia's UU PDP).

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us through the details below. We will respond within a reasonable time, subject to the retention rights described above.

8. Children's Privacy

The Service is not directed to children and is not intended for users who are not legally able to enter into our Terms of Service in their jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.