Al Rizqi Privacy Policy
Last updated: 6 August 2026
This Privacy Policy explains how Al Rizqi & Co ("we", "us", "our") collects, uses, and protects your personal data when you use the ATS CV Builder and the career consultation service at cv.alrizqi.com (the "Service"). We are committed to handling your data in line with Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, "UU PDP") and, where it applies to you, the EU General Data Protection Regulation ("GDPR").
1. Data Controller
The party responsible for your data is Al Rizqi & Co. For any privacy question or request, contact us at hello@alrizqi.com.
2. Personal Data We Collect
- Your CV file and its content. When you use the CV Builder, your uploaded PDF is processed in memory only to generate your score, feedback, and optimized PDF. We do not save, store, or archive your CV or its contents on our servers.
- Name. The name you enter is used only to build your optimized CV during that session and is not retained afterwards.
- Email address. Collected only if you choose to subscribe to our updates, or if you contact us. We store subscription emails until you ask to be removed.
- Payment information. Payments are handled entirely by our payment providers (see Section 6). We never receive or store your card or bank account details. We keep a minimal record (such as a transaction ID and amount) to grant your credits or confirm a consultation.
- Cookies. Strictly necessary cookies only (see Section 5).
3. Purpose of Processing
- To provide the CV analysis, feedback, and optimized PDF you request.
- To operate the free-usage limit, credit balance, and paid features.
- To process payments and deliver purchased credits or consultations.
- To send you product updates or tips, if you subscribed.
- To respond to your enquiries and provide support.
4. Legal Basis
We process your data on the basis of your consent (e.g. subscribing, accepting cookies, submitting a CV for analysis), the performance of a contract (delivering credits or a consultation you paid for), and our legitimate interests in operating and securing the Service. This corresponds to the lawful bases under UU PDP and GDPR Article 6.
5. Cookies
We use strictly necessary cookies only — no analytics, advertising, or third-party trackers. For the full list of what we store and why, see our Cookie Policy.
6. Data Sharing & Third-Party Processors
We do not sell your data. We share the minimum necessary with the following processors, each acting under its own privacy terms:
- Anthropic (Claude AI): the text of your CV is sent to Anthropic's API to generate the AI feedback and optimized wording. It is processed to fulfil your request and, per Anthropic's API terms, is not used to train their models. We do not store it.
- MoonPay / Helio and DOKU: payment processing.
- Calendly: scheduling consultation calls.
- Google (Gmail): sending us operational email notifications (e.g. that a payment or subscription occurred).
- Our hosting/infrastructure provider, solely to run the Service.
7. International Data Transfers
Some processors (such as Anthropic, MoonPay, Calendly, and Google) operate outside Indonesia. Where your data is transferred internationally, we rely on those providers' safeguards and, where required, appropriate transfer mechanisms consistent with UU PDP and GDPR.
8. Data Retention
- CV files and content: not retained. Processed in memory and discarded after your result is generated.
- Subscription emails: kept until you unsubscribe or ask for deletion.
- Payment records: kept only as long as needed to provide the Service and meet legal or accounting obligations.
9. Your Rights
Under UU PDP and GDPR, you have the right to access, correct, update, or delete your personal data; to withdraw consent; to object to or restrict processing; to data portability; and to lodge a complaint with the relevant supervisory authority. To exercise any of these, email us at hello@alrizqi.com and we will respond within a reasonable time.
10. Data Security
We process CVs in memory without writing them to disk, serve the Service over encrypted HTTPS, and limit data collection to what is necessary. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
11. Children
The Service is not directed to children. If you are under the age of majority in your jurisdiction, please use the Service only with the consent of a parent or guardian, as required by UU PDP.
12. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date above reflects the latest version. Significant changes will be reflected on this page.
13. Contact
For any question about this Policy or your data, contact hello@alrizqi.com.