Privacy Policy

The “doki.help” service (hereinafter — the Service). Last updated: 17.07.2026.

1. Operator

The operator processing personal data is the owner of the doki.help Service — a foreign operator (foreign tax ID 780728592634). Contact for data-related inquiries: [email protected].

2. What data we process

— Account data: your email address, and when signing in via Google — your name and email from your Google profile.
— Content you upload: documents, photos, scans and their details. These materials may contain personal data, including special categories (for example, medical data — test results, reports).
— Technical sign-in data: IP address, device/browser type, sign-in time (for security and new-login notifications).
— Phone number — only if you provide it for SMS notifications.

3. Purposes and legal basis

We process data to provide the Service: to collect, store, and organize candidate and employee documents, support document checklists, provide controlled access, and help with reminders or status tracking. The legal basis is your consent, given upon registration, and the performance of the contract (provision of the Service).

3.1. Special categories of personal data (health information)

Special (sensitive) categories include health data, financial data and children's data. The Service does not require such data to create an account; processing begins only when you choose and upload the relevant document (medical, financial, etc.), and is limited to the storage, organization and sharing features you request. Do not upload another person's data (including a child's) unless you have a lawful basis or their consent. You can delete the document or your entire account at any time.

4. AI processing

When using document recognition and AI assistant features, part of your data (the document image or the text of your request) is transferred to a third-party AI provider for processing and generating a response. These features are activated by your action. If you do not want such processing — do not use the AI features.

5. Where data is stored

Data is stored in the cloud infrastructure of our provider (Supabase) and in secure file storage. The provider's servers may be located outside Indonesia. By using the Service and uploading documents, you consent to this cross-border transfer and storage of your data outside Indonesia (Arts. 55–56 UU PDP). Files are accessible only via temporary signed links.

6. Sharing with third parties

We do not sell your data. We share it only: (a) with infrastructure providers (hosting, database, sending of emails/SMS) to the extent necessary for the Service to operate; (b) with the AI provider — when the relevant features are used; (c) with an anti-abuse verification service (Cloudflare Turnstile) when you submit the public vacancy application form; (d) at the lawful request of authorized bodies. You decide for yourself to whom and when you open a document via a link.

7. Protection

Data is isolated per account and workspace at the database level (Row Level Security), files are kept in private storage, and transmission is over a secure connection. Document access is limited according to roles and links granted.

7.1. Incidents and breach notification

If a personal-data breach affects your rights, we will notify affected data subjects and the competent authority within 3×24 hours, as required by the UU PDP. Report a security concern to [email protected].

8. Retention and deletion

We keep data while your account is active. You can delete your account and associated data in the app under Settings → Security → Delete account. If you cannot sign in, contact [email protected].

9. Your rights

You have the right to access your data and obtain a copy, correct it, delete it, receive it in a machine-readable format (portability), object to certain processing, withdraw your consent, and lodge a complaint with the competent authority. To do so, contact us at the address indicated.

9.1. Compliance with Indonesian law (UU PDP 27/2022)

For users in Indonesia, data is processed in line with Law No. 27/2022 on Personal Data Protection (UU PDP). The legal bases for processing are your consent and performance of the contract. As a data subject you hold the rights listed above (access, rectification, erasure, portability, objection, withdrawal of consent, and complaint to the competent authority). Special categories (health, finance, children) are processed with heightened care and only at your own initiative.

10. Changes

We may update this Policy. The current version is always available on this page.

By using the Service, you confirm that you have read this Policy and consent to the processing of personal data under the stated terms.