Privacy Policy
PT Sofco Graha built the ESS gaji.id application as a Freemium app. This Service is provided by PT Sofco Graha at no cost and is intended for use as is.
This page informs users regarding our policies on the collection, use, and disclosure of Personal Information for anyone who decides to use our Service.
By choosing to use our Service, you agree to the collection and use of information in accordance with this Privacy Policy. The Personal Information we collect is used to provide and improve the Service. We do not use or share your information except as described in this Privacy Policy.
If you do not agree with any of the terms in this Privacy Policy, please do not use our Service.
Terms used in this Privacy Policy have the same meanings as in our Terms and Conditions,
unless otherwise defined herein.
- Face Data Policy
- Face Data We Collect
We analyze photos submitted within the application to identify facial feature points (such as eyes, nose, and mouth landmarks) solely for enabling the online attendance face recognition feature.
- Purpose and Processing of Face Data
Face data is collected and processed exclusively to provide identity verification for the online attendance feature. The processed biometric data is used only to validate the registered user during attendance submission.
- Face Data Sharing and Storage
We do not share, sell, transfer, or disclose face data to any third party. Face data is securely stored on our servers and retained only while the online attendance face recognition feature remains active. Upon deactivation of the feature, associated face data will be permanently deleted in accordance with our internal data retention procedures.
- Face Data We Collect
- Information Collection and Use
For a better experience while using our Service, we may require you to provide certain personally identifiable information.
Employee Self Service (ESS) gaji.id is an Android and iOS application designed for employees. Through ESS, employees may submit leave requests, overtime, permissions, perform Online Attendance (with geotagging and geofencing features), download payslips, and access other employment-related services via smartphone. The application may use third-party services that collect information used to identify users.
Third-Party Service Provider: Google Play Services
- Log Data
In the event of an application error, we may collect data and information (through third-party tools) on your device referred to as Log Data.
This Log Data may include your device IP address, device name, operating system version, application configuration, time and date of usage, and other diagnostic statistics.
- Cookies
Cookies are small data files commonly used as anonymous unique identifiers and stored on your device.
While this Service does not explicitly use cookies, certain third-party libraries or services integrated within the app may utilize cookies
to enhance functionality and performance.You may choose to accept or refuse cookies. Refusal may limit certain features of the Service.
- Service Providers
We may engage third-party companies or individuals to:
- Facilitate our Service;
- Provide the Service on our behalf;
- Perform Service-related services; or
- Assist in analyzing Service usage.
These third parties may access Personal Information solely to perform
assigned tasks on our behalf and are contractually obligated not to
disclose or use the information for other purposes. - Security
We value your trust in providing Personal Information and implement commercially reasonable measures to protect it. However, no method of
transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security. - Links to Other Sites
This Service may contain links to third-party websites. We do not operate these sites and are not responsible for their content or privacy practices.
We encourage users to review the privacy policies of external sites. - Children’s Privacy
This Service does not address individuals under the age of 13. We do not knowingly collect personal data from children under 13.
If we become aware that such data has been collected, it will be deleted immediately. Parents or guardians may contact us if necessary.
- Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes become effective immediately upon posting on this page. Users are encouraged to review
this page regularly for updates. - Contact Us
If you have questions or suggestions regarding this Privacy Policy,
please contact us at:Email: support.ess@gaji.id
Kebijakan Privasi Portal Pelamar Gaji.id
PT Sofco Graha (“Perusahaan” atau “Kami”) berkomitmen untuk melindungi privasi dan data pribadi Anda. Kebijakan Privasi ini menjelaskan bagaimana kami mengumpulkan, menggunakan, dan melindungi data pribadi yang diproses melalui Portal Pelamar Gaji.id.
Penting untuk dipahami bahwa portal ini disediakan oleh kami, namun digunakan oleh Customer (perusahaan pengguna Gaji.id) sebagai pihak yang membuka lowongan pekerjaan dan memproses lamaran Anda.
- Definisi Operasional
- Data Pribadi: Segala informasi mengenai individu yang
teridentifikasi, mencakup identitas diri, riwayat profesional, serta data teknis. - Pengendali Data (Data Controller):
Customer (perusahaan yang Anda lamar), yang menentukan
tujuan dan metode pemrosesan data pelamar. - Prosesor Data (Data Processor):
PT Sofco Graha, yang memproses data pribadi atas instruksi Customer. - Pelamar: Individu yang mengakses dan menggunakan portal
untuk mengajukan lamaran pekerjaan.
- Data Pribadi: Segala informasi mengenai individu yang
- Jenis Data yang Diproses
Kami memproses data dari dua entitas utama:- Data Pelamar (Kandidat)
- Identitas: Nama lengkap, tempat tanggal lahir, jenis kelamin, alamat, dan kontak (email/telepon).
- Dokumen Resmi: NIK, NPWP, ijazah, transkrip nilai, dan sertifikat profesional.
- Data Profesional: Riwayat pekerjaan, CV, cover letter, portofolio, dan foto.
- Data Teknis: Alamat IP, jenis perangkat, dan log aktivitas penggunaan portal.
- Data Customer (Perusahaan Pengguna)
- Identitas Badan Hukum: Nama perusahaan, nomor registrasi, dan NPWP.
- Informasi Akun: Kredensial login dan kontak tim rekrutmen.
- Konten Lowongan: Deskripsi posisi, persyaratan, lokasi, dan kisaran gaji.
- Data Pelamar (Kandidat)
- Metode Pengumpulan Data
- Input Langsung: Data yang dimasukkan secara manual oleh Pelamar maupun Customer melalui formulir digital.
- Unggahan Dokumen: Dokumen pendukung (CV/Ijazah) yang diunggah langsung ke sistem.
- Pengumpulan Otomatis: Data teknis yang terekam secara otomatis saat pengguna mengakses portal untuk memastikan keamanan sistem.
- Tujuan dan Dasar Hukum Pemrosesan
Sebagai Prosesor Data, PT Sofco Graha memproses informasi berdasarkan instruksi Customer untuk tujuan:- Menyediakan dan mengelola layanan Portal Pelamar.
- Menyalurkan data lamaran dari Pelamar kepada Customer terkait.
- Menyimpan data untuk keperluan proses seleksi dan rekrutmen.
- Menjamin keamanan, integritas, dan performa sistem.
- Keamanan dan Retensi Data
- Keamanan: Kami menerapkan standar keamanan teknis seperti enkripsi, kontrol akses ketat, dan audit berkala untuk melindungi data dari akses yang tidak sah.
- Masa Simpan (Retensi):
- Data Pelamar: Disimpan selama proses rekrutmen aktif
atau sesuai kebijakan retensi Customer, kemudian akan dihapus atau dianonimkan. - Data Customer: Disimpan selama masa kontrak kerjasama
dengan PT Sofco Graha berlangsung.
- Data Pelamar: Disimpan selama proses rekrutmen aktif
- Hak Subjek Data
Sesuai dengan hukum yang berlaku di Indonesia, Pelamar memiliki hak untuk mengakses, memperbaiki, atau meminta penghapusan data mereka.
Catatan Penting: Karena status kami adalah Prosesor Data, setiap permintaan terkait akses atau penghapusan data lamaran harus diajukan langsung kepada Customer (Perusahaan yang dilamar) selaku Pengendali Data. Kami akan berkoordinasi dengan Customer untuk memfasilitasi permintaan tersebut secara teknis. - Hubungi Kami
Kebijakan ini dapat diperbarui secara berkala sesuai dengan perkembangan hukum dan teknologi. Jika Anda memiliki pertanyaan teknis mengenai perlindungan data pada portal ini, silakan hubungi Data Protection Officer kami melalui:- Email: privacy@gaji.id
- Yurisdiksi: Seluruh ketentuan diatur berdasarkan hukum Republik Indonesia.
LinkedIn Integration Privacy Policy
Effective Date: February 10, 2026
Last Updated: February 10, 2026
This LinkedIn Integration Privacy Policy (“Policy”) is a specific policy that supplements the main Privacy Policy of PT. Sofco Graha (“we”, “us”, or “our”) and governs the processing of personal data in connection with the use of the LinkedIn integration feature on the gaji.id platform (“Service”). By enabling the LinkedIn integration feature, you (“User” or “you”) confirm that you have read, understood, and agreed to the terms of this Policy.
- Scope
This Policy applies to all personal data processing activities carried out by us for the purposes of:- Connecting your LinkedIn account with the gaji.id system.
- Publishing job vacancy information to your LinkedIn Company Page.
- Providing technical functionalities related to the LinkedIn integration feature.
- Types of Data Processed
In connection with the Service, we may collect and process the following categories of data:- LinkedIn Access Tokens, which are authentication credentials enabling our system to perform actions on behalf of your Company Page.
- Company Page Data, including Company Page ID, company name, and basic metadata.
- Administrator Profile Data, consisting of basic profile information used to verify administrative authority.
- Application Authorization Data, including scopes and permissions granted to our system.
- Purpose of Data Processing
The personal data collected is processed solely for the following purposes:- Verifying user identity and administrative authority.
- Authenticating and maintaining system connectivity between gaji.id and LinkedIn.
- Facilitating the publication of job vacancies to your LinkedIn Company Page.
- Displaying integration status within the gaji.id system interface.
We do not process personal data for any purpose other than those stated in this Policy.
- Data Storage and Security
We implement reasonable and appropriate technical and organizational measures to protect personal data processed under this Service.- Storage Location
Data is stored within secure cloud infrastructure operated by certified service providers and hosted in data centres that comply with industry security standards. - Technical and Organizational Safeguards
We implement reasonable and appropriate security measures, including:- Encryption of data at rest.
- Encrypted data transmission (TLS/HTTPS).
- Role-based access control mechanisms.
- Periodic system security audits.
- Data Retention
- Access tokens are retained only while the integration remains active.
- Upon termination of the integration, access tokens are permanently deleted within a maximum of 24 hours.
- Non-identifiable system logs may be retained for audit purposes for a maximum of 90 days.
- Storage Location
- Data Disclosure and Sharing
We do not disclose, transfer, sell, rent, or otherwise share your LinkedIn data with any third party. All data is processed exclusively within our internal systems and is not used for:- Marketing activities.
- Commercial profiling.
- Cross-platform behavioural analysis.
- Any third-party interests beyond the Service functionality.
- Data Subject Rights
In accordance with applicable data protection laws, users have the right to:- Withdraw consent at any time.
- Disconnect the LinkedIn integration through the gaji.id system.
- Revoke application access via LinkedIn settings.
- Request access to, correction of, or deletion of personal data.
Requests may be submitted via email to: privacy@gaji.id
- Third-Party Services
LinkedIn is a third-party service beyond our direct control. Users acknowledge and agree that:- LinkedIn processes personal data in accordance with its own privacy policies.
- We are not responsible for LinkedIn’s data processing practices.
- Job Content DataAll job vacancy content published through the Service:
- Remains the property and responsibility of the user.
- Is not modified by our system.
- Is processed identically to content displayed on gaji.id.
- Is subject to LinkedIn’s data retention policies after publication.
- Policy Updates
We reserve the right to amend this Policy at any time. Continued use of the Service constitutes acceptance of the updated Policy. - Legal Compliance
This Policy is governed by and construed in accordance with:- Indonesian Law No. 27 of 2022 on Personal Data Protection.
- International data protection principles including lawfulness, fairness, purpose limitation, and data minimization.
- Contact Information
PT. Sofco Graha
Email: privacy@gaji.id
Website: https://gaji.id