Privacy Policy

1. Data we collect

We only collect the data needed to run the features you use:

• Account data: name, email address, role (job seeker or HR), and profile photo if you sign in with Google.
• Profile and career documents: CVs you upload, experience, education, certificates, and other profile details.
• Jobs and applications: job links or text you paste, analysis results, generated CVs and cover letters, and the application stages you record.
• Conversations with Coptera Assistant.
• Hiring team data: company profiles, job posts, and candidate data processed by HR accounts.
• CopTalent: profile details you submit voluntarily so recruiters can find you.
• Payments: plan, amount, and transaction status. Payment details are handled by the payment provider, not stored by us.
• Technical data: IP address (for security and usage limits), device and browser type, guest identifiers, and aggregate visit statistics.

2. How we use data

• To run features: analysing jobs, assessing fit with your CV, preparing application documents, and answering your questions.
• To manage accounts, quotas, credits, and payments.
• To keep the service secure and prevent abuse, including fake job posts.
• To improve the service through aggregate statistics and answer-quality evaluation.
• To send important account or service information.

3. What we do not do

• We do not sell your personal data.
• We do not apply to jobs on your behalf automatically.
• We do not invent experience in your CV or cover letter.

4. AI processing

To produce analyses and answers, the relevant text (such as CV content, job descriptions, and your messages) is sent to AI model providers: Anthropic, and other providers through OpenRouter. That text is used to process your request.

AI output can be wrong. Review it before you use it. Do not upload data that is not needed, such as national ID numbers, bank details, or health data.

5. Who processes data for us

We use the following providers to run the service. They process data on our instructions:

• Supabase: database, authentication, and file storage.
• Google Cloud: API servers.
• Vercel: site hosting and visit statistics.
• Anthropic and OpenRouter: AI processing.
• Mayar and Lynk.id: payments.
• Google: sign-in with Google.

6. Transfers outside Indonesia

Some of these providers process data outside Indonesia, for example in Singapore or the United States. We choose providers that apply adequate data protection.

7. Who can see your data

• Your CopTalent profile is visible to registered HR accounts, only if you opt in.
• Applications you send to jobs on Coptera are visible to the hiring team that owns the job.
• A public profile page is only visible to people you share its link with.

8. Retention and security

We keep data while your account is active, or as long as needed for the purposes above and our legal obligations. Access is restricted, connections are encrypted, and personal API keys are stored only as hashes.

9. Your rights

Under Indonesia's Personal Data Protection Law, you have the right to access, correct, obtain a copy of, and request deletion of your personal data, and to withdraw consent. You can change some data directly on your profile page. For other requests, including account deletion, email hello@copteracareer.com from your account's email address.

10. Cookies and local storage

We use cookies to keep you signed in, and browser local storage for preferences such as theme, mode (job seeker or HR), and guest identifiers. We do not use third-party advertising cookies.

11. Chrome extension

The Coptera extension only reads the job page you have open when you click its button, then sends that content to Coptera for analysis. It does not monitor your browsing history.

12. Minors

Coptera is intended for users aged 18 and over. Users under 18 need permission from a parent or guardian.

13. Changes to this policy

We may update this policy. We will announce significant changes on the site or by email, and update the date above.