Privacy Policy

KerjaPlus ("we", "us", "our") operates the platform at kerjaplus.my. We provide AI-powered career tools including resume analysis, ATS checking, job matching, and interview preparation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

KerjaPlus is committed to complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia. As a data processor and data user under the PDPA, we adhere to the following seven principles:

• General Principle — We only collect and process personal data with your consent and for lawful purposes directly related to our career services.
• Notice & Choice Principle — We inform you of the purpose for which your personal data is collected and give you the choice to limit its processing.
• Disclosure Principle — We do not disclose your personal data to third parties without your consent, except as permitted by law or as described in this policy.
• Security Principle — We take practical steps to protect your personal data from unauthorised access, loss, misuse, or disclosure.
• Retention Principle — We retain your personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by law.
• Data Integrity Principle — We take reasonable steps to ensure your personal data is accurate, complete, and up-to-date.
• Access Principle — You have the right to access and correct your personal data held by us, as described in Section 8 of this policy.

If you have any questions or concerns about how your personal data is processed, please contact us at support@kerjaplus.my.

We use the information we collect to:

• Provide, operate, and improve the KerjaPlus platform and its features.
• Analyse your resume and generate personalised career insights.
• Send transactional emails such as account confirmations and subscription receipts.
• Send product updates and relevant career tips (you can opt out at any time).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable legal obligations.

We do not use your personal data for advertising purposes or sell it to data brokers. Any sharing of your data is limited to the specific circumstances described in Section 6 below.

Your resume content is processed by our AI models solely to generate the reports and recommendations you request. Resume data is:

• Processed in-memory during your session and stored securely under your account.
• Never used to train AI models without your explicit, opt-in consent.
• Shared with employers, companies, or recruiter agencies only when you explicitly opt in by using the "Drop Your CV" feature. By opting in, you consent to your CV being made visible to third-party recruiters and hiring companies on our platform.

We may share your data only in the following circumstances:

• Recruiter agencies & employers (opt-in only) — If you use the "Drop Your CV" feature, your CV and profile will be shared with companies and recruitment agencies on our platform. This sharing is entirely voluntary and requires your explicit action to activate.
• Service providers — trusted vendors (e.g., cloud hosting, analytics, email delivery) who process data on our behalf under strict data processing agreements.
• Legal compliance — when required by law, court order, or to protect the rights and safety of our users.
• Business transfers — in the event of a merger or acquisition, your data may be transferred as part of that transaction. We will notify you beforehand.

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete all associated personal data within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes, retained for up to 7 years).

Under the PDPA and general data protection principles, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete data.
• Deletion — request erasure of your account and associated data.
• Portability — receive your data in a structured, machine-readable format.
• Opt-out of marketing — unsubscribe from promotional emails at any time via the link in any email.

To exercise any of these rights, email us at support@kerjaplus.my. We will acknowledge your request promptly and respond as soon as reasonably practicable.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and role-based access controls. However, no system is completely secure, and we encourage you to use a strong, unique password for your account.

KerjaPlus is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us immediately.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you via email or an in-app notice. Your continued use of KerjaPlus after the effective date constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, please contact us at: support@kerjaplus.my