Partner Privacy Statement

Introduction

PT Kinetikum Indo Solusi ("Kinetikum", "we", "our", or "us") operates the Projob.id Partner Program ("Partner Program") accessible at partner.projob.id. This Privacy Statement explains how we collect, use, store, share, and protect your personal data when you register and participate as a partner. We are committed to complying with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and applicable international privacy standards.

By registering as a partner, you acknowledge that you have read and understood this Privacy Statement. If you do not agree with any part of this statement, please discontinue your use of the Partner Program.

Information We Collect

We collect several categories of personal data depending on your engagement with the Partner Program:

Account & Identity Information

When you register, we collect your full name, email address, phone number, organization or company name, and partner category (recruiter, training institution, zone operator, or content creator). This information is necessary to create and manage your partner account.

Verification & KYC Documents

To ensure the integrity of our partner network and comply with regulatory requirements, we may collect identity verification documents such as a government-issued ID (KTP/passport), a selfie photograph for identity matching (KYC), and business registration documents (SIUP/NIB). These documents are securely stored and used solely for verification purposes.

Financial & Payout Information

To process revenue sharing and commission payouts, we collect your bank account details including bank name, account number, and account holder name. For international partners, we may collect payment platform identifiers such as Wise, Payoneer, or Xendit account references. Financial data is encrypted and stored separately from other personal information.

Profile & Business Data

As part of your partner profile, we collect your company description, website URL, social media links, company logo, area of expertise, and industrial zone specializations. This information helps us match you with relevant opportunities and display your profile within the partner network.

Usage & Activity Data

We automatically collect data about how you interact with the platform, including pages visited, features used, vacancy submissions, article publications, login timestamps, IP addresses, browser type, device information, and referral sources. This data helps us improve the platform and provide analytics reports.

Communication Data

If you contact our support team, participate in community discussions, or communicate through our platform, we retain those communications including support ticket content, chat messages, and email correspondence for quality assurance and dispute resolution purposes.

How We Use Your Information

We use the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your partner account and profile.
• Identity verification: Verifying your identity through KYC processes to prevent fraud and maintain platform integrity.
• Payout processing: Calculating and disbursing revenue sharing commissions, generating payout reports, and maintaining financial records as required by tax regulations.
• Service delivery: Matching you with relevant job vacancies, zone assignments, and partnership opportunities based on your specializations and zone preferences.
• Analytics and reporting: Providing you with performance dashboards, vacancy statistics, and engagement metrics through your partner dashboard.
• Communication: Sending you partnership-related notifications including payout confirmations, document approval status, vacancy updates, and platform announcements via email and WhatsApp.
• AI-assisted features: When you use AI auto-fill tools for vacancy descriptions, your input is processed through third-party AI services to generate content suggestions. We do not use your data to train AI models.
• Platform improvement: Analyzing usage patterns to enhance features, fix issues, and develop new services that benefit the partner community.
• Legal compliance: Fulfilling our obligations under Indonesian law, including UU PDP, tax regulations, and anti-money laundering requirements.

Legal Basis for Processing

Under UU PDP (Law No. 27/2022), we process your personal data based on the following legal grounds:

• Consent: You provide explicit consent when registering and accepting our Terms and Conditions.
• Contractual necessity: Processing is necessary to fulfill our partnership agreement, including payout calculations and service delivery.
• Legal obligation: We are required to retain certain financial and identity records under Indonesian tax law and business regulations.
• Legitimate interest: We process usage data to improve platform security, prevent fraud, and enhance our services, while balancing your privacy rights.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third party for marketing purposes. We may share your data with the following categories of service providers under strict data processing agreements:

• Payment processors: We use licensed payment service providers (such as Xendit and bank transfer services) to process your payout transactions. These processors receive only the minimum financial data required to complete transactions.
• Cloud infrastructure: Our platform is hosted on secure servers in Indonesia. Your data is stored on infrastructure that complies with Indonesian data localization requirements.
• AI service providers: When you use AI-powered features (such as auto-fill for vacancy descriptions), your input text is sent to third-party AI providers for processing. No personal data or account information is included in these requests.
• Analytics tools: We use analytics services to understand platform usage patterns. These tools collect anonymized and aggregated data that cannot identify individual users.
• Communication services: We use email delivery and WhatsApp Business API services to send you notifications. These providers process your contact information solely for message delivery.
• Government authorities: We may disclose personal data to Indonesian government authorities when required by law, court order, or official investigation.

Cross-System Data Isolation

The Projob.id ecosystem includes multiple platforms (projob.id job portal, partner.projob.id, employer.projob.id). In compliance with UU PDP, we maintain strict data isolation between these systems. Your partner account data is not automatically shared with or accessible from other Projob.id platforms. If you also hold an employer or job seeker account, each account is managed independently with separate consent and data management controls.

Data Security

We implement comprehensive security measures to protect your personal data, including:

• Encrypted connections (SSL/TLS) for all data transmission between your browser and our servers.
• Secure password hashing using industry-standard algorithms (bcrypt) — we never store passwords in plain text.
• Role-based access controls that limit employee access to personal data on a need-to-know basis.
• Separate storage of sensitive documents (KYC, bank data) with additional encryption layers.
• CSRF (Cross-Site Request Forgery) protection on all form submissions.
• Regular security audits and monitoring for unauthorized access attempts.
• Automated session management with configurable timeout periods.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and enable all available verification methods (email and WhatsApp verification) to protect your account.

Data Retention

We retain your personal data for as long as your partner account is active and as necessary to fulfill the purposes described in this Privacy Statement. Specific retention periods include:

• Account data: Retained for the duration of your active partnership, plus 2 years after account closure for dispute resolution.
• Financial records: Retained for a minimum of 10 years after the last transaction, as required by Indonesian tax law.
• KYC documents: Retained for 5 years after verification completion, then securely deleted unless required for ongoing legal obligations.
• Usage logs: Retained for 12 months, then anonymized for aggregate analytics.
• Support communications: Retained for 3 years after ticket resolution.

When you request account deletion, we perform a soft-delete process: your profile is deactivated immediately, personal identifiers are anonymized, and remaining data is purged according to the retention schedules above.

Cookies & Tracking Technologies

Our platform uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication, session management, language preferences, and CSRF protection. These cannot be disabled.
• Analytics cookies: Used to understand how partners interact with our platform. You can opt out of analytics cookies through our cookie consent banner.
• Preference cookies: Store your display preferences such as language selection and theme (light/dark mode).

We use a cross-subdomain cookie consent system that respects your choices across all Projob.id properties. You can manage your cookie preferences at any time through the cookie settings available at the bottom of every page.

Your Rights

Under UU PDP and applicable data protection laws, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you. Most of this data is directly accessible through your partner dashboard.
• Right to correction: You may update or correct inaccurate personal data through your profile settings, or by contacting our support team.
• Right to deletion: You may request the deletion of your personal data, subject to our legal retention obligations. Account deletion can be initiated through your account settings.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request your personal data in a structured, commonly used format for transfer to another service.
• Right to withdraw consent: You may withdraw your consent for data processing at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to the processing of your personal data for certain purposes, including direct marketing communications.

To exercise any of these rights, please contact us at privacy@projob.id or submit a request through your partner dashboard support ticket system. We will respond to your request within 3 x 24 hours as required by UU PDP.

International Data Transfers

Our primary data storage is located in Indonesia. In certain cases, your data may be processed outside Indonesia when using third-party services (such as AI content generation or international payment processing). In such cases, we ensure that adequate data protection safeguards are in place through contractual agreements that meet UU PDP requirements for cross-border data transfers.

Children's Privacy

The Partner Program is intended for business entities and individuals aged 18 years or older. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will promptly delete that information and terminate the associated account.

Data Breach Notification

In the event of a personal data breach that poses a significant risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 3 x 24 hours as required by UU PDP. The notification will include the nature of the breach, the data affected, the measures taken to address the breach, and recommendations for steps you can take to protect yourself.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will notify you through an in-app notification or email at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when this statement was last revised.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Statement or our data practices, please contact us: