Privacy Policy

melamar.my.id is a job-application assistant: CV workspaces, a job tracker, interview preparation, publishable portfolios, and bookmarks. This policy explains what personal data is processed when you use it and the choices you have.

The administrator of the specific deployment you use (for example, your employer, institution, or the team hosting the app) is responsible for that deployment. References to “we” / “us” mean that administrator together with the application itself.

• Account information. Details you provide when signing up and managing your account, such as your email address and name.
• Content you create. CVs, job descriptions, applications, interview notes, portfolios, bookmarks, and messages — stored so your workspaces are available when you sign in.
• Files you upload. Attachments you submit are processed only to provide the feature you requested (for example, reading a CV file so it can be reviewed in chat).
• Technical and operational data. Basic data needed to run and secure the service, such as error logs and request metadata, plus cookies required to keep you signed in.

Please do not upload credential data or critical documents the service does not need — such as passwords, secret keys, identity documents, or financial account numbers. The service never requires them.

• Provide, maintain, and secure the service and your workspaces.
• Keep you signed in and keep each account's data separate.
• Run the AI-assisted features you request (scoring, suggested edits, role research, interview preparation).
• Publish portfolios and export files when you ask us to.
• Diagnose errors, prevent abuse, and improve reliability.

We do not sell your personal data and do not use your workspace content for advertising.

• When you use an AI feature, the content needed for that request (for example, your CV and the target job description) is sent to AI service providers solely to generate your response.
• Avoid submitting highly sensitive information — such as credential data, identity documents, financial details, or other people's personal data — to AI features.

Portfolios are private by default. When you publish one, its content becomes available to anyone with the link and may be indexed by search engines. Treat anything you publish as public: remove private contact details and sensitive information before publishing, and unpublish at any time to stop further public access (already-shared or cached copies may persist outside our control).

• Service providers. Trusted providers that help operate the service (such as sign-in, hosting, and AI processing), limited to what they need to perform their function.
• Legal and safety. Data may be disclosed where required by law or to protect the security of the service and its users.

We do not share workspace content with advertisers or data brokers.

• Your workspace data is kept until you delete it or request deletion from the deployment administrator.
• Deleting items in the app (for example, clearing chat history, removing an application, or deleting a workspace) removes them from normal use.
• Unpublishing a portfolio stops public access going forward; deleting it also removes the stored content.

Access to workspaces requires sign-in, and each account's data is kept separate. No system is perfectly secure: use a strong, unique sign-in method, keep your devices updated, never share your password with anyone, and report suspected unauthorized access to the administrator promptly. We will never ask for your password or secret keys.

• View and edit your workspace content directly in the app.
• Unpublish or delete portfolios and bookmarks you no longer want.
• Request export or deletion of your workspace data via the administrator.
• Manage your sign-in and profile details in your account settings.

Depending on your jurisdiction you may have additional rights (such as access, correction, restriction, or objection). The administrator will handle such requests in line with applicable law.

The service is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data through the service, contact the administrator so it can be removed.

We may update this policy as the service evolves. Material changes will be reflected in the “Last updated” date above. Continued use of the service after changes take effect means you accept the updated policy.

Privacy questions or requests (access, export, deletion) should go to the administrator of this deployment — the person or team that provided you access. Never include passwords or secret keys in your message.