Data Processing Notice for Customers and Workers
PT Karya Dewata Bagus operates GoodJob and acts as the Personal Data Controller for the processing described in this Policy. This Policy explains the data we collect, the reasons for using it, the parties that receive it, the retention period, and the rights of Customers and Workers. This Policy applies when you use the application, website, Customer Service, official WhatsApp, payments, Worker registration, or otherwise interact with GoodJob. Short notices may be shown when OTP, location, camera, identity card, bank account, chat, and payment features are used.
1. Controller Identity
PT Karya Dewata Bagus
Address : Regus Office Benoa Square, Jl. Bypass Ngurah Rai No. 21A, Jimbaran, Bali
Email : admin@goodjobindonesia.com
WhatsApp Customer Service : +62-852-2100-2902
Website : https://goodjobindonesia.com
Support is available seven days a week. Response times may vary depending on the type of report, verification requirements, and operational conditions.
The above contact may be used for privacy questions, data access, correction, objection, consent withdrawal, account closure, data deletion, and incident reports.
2. Terms and Roles
- Personal Data means data relating to an identified or identifiable person.
- Specific Personal Data includes data receiving special protection under law, including personal financial data and children’s data.
- GoodJob determines the purposes and controls the processing as the Personal Data Controller.
- Service providers that process data under GoodJob’s instructions act as Processors. Banks, payment providers, WhatsApp, or certain parties may act as independent controllers for their own obligations.
- Customers and Workers are independently responsible for data that they receive and use outside GoodJob’s control.
3. Data We Collect
| Category | Examples of data |
|---|---|
| Account and authentication | Name, WhatsApp number, email if provided, role, account status, OTP time and result, session, device, and consent records. |
| Customer profile | Profile photo if provided, address, location point, Job history, preferences, ratings, reviews, reports, and communications. |
| Worker profile and verification | Name, address, identity card number and photo, selfie or profile photo, date of birth if required, category, area, experience, portfolio, certificates, licenses, manual check results, and video call or meeting if conducted. |
| Bank account and payment | Bank name, account number and holder name, verification status, Transaction value, payment method and status, payout, refund, App Fee, tip, tax, invoice, chargeback, and payment provider references. GoodJob does not store full payment card numbers. |
| Job and location | Description, schedule, duration, address, coordinates, en-route status, Attendance Code, performance status, before-and-after evidence, and chronology. |
| Chat and support | Messages, attachments, reports, Customer Service communications, ticket number if available, dispute evidence, and resolution results. |
| Content and reputation | Photos, videos, portfolios, ratings, reviews, responses, violation reports, and moderation decisions. |
| Technical data | IP address, operating system, device model, application version, language, time zone, permitted application or device identifiers, notification token, access logs, errors, performance, security, and suspicious activities. |
We do not request telephone contacts, SMS, microphone, or background location in the current application version. A system photo picker may be used so that the application does not require broad access to the entire gallery.
4. Data Sources
- Directly from you when registering, completing profiles, creating or accepting Jobs, uploading documents, sending chat messages, paying, or contacting support;
- Automatically from the application, device, network, maps, notifications, security, and analytics;
- from other Customers or Workers in a Transaction;
- from payment providers, banks, WhatsApp, Google or Firebase, cloud providers, verification providers, and other support services; and
- from authorities or other lawful sources when necessary for security, disputes, or legal compliance.
5. Purposes and Legal Bases of Processing
Activity
Purpose
Primary basis
Account and OTP
Create, authenticate, recover, and secure accounts.
Contract performance, relevant consent, and legitimate security interests.
Worker verification
Check identity, bank account, qualifications, and category eligibility, and prevent fraud.
Pre-contract steps, contract performance, legal obligations, legitimate interests, and special consent where required.
Jobs and location
Match Users, show maps, verify attendance, operate status, and handle safety and disputes.
Contract performance and device permission consent for location access.
Payments, refunds, payouts
Process held payments, App Fees, tips, refunds, payouts, reconciliation, chargebacks, tax, and audit.
Contract performance and legal obligations.
Chat, support, and moderation
Facilitate communications, handle reports, maintain security, enforce terms, and retain evidence.
Contract performance, legal obligations, and balanced legitimate interests.
Analytics and improvement
Measure performance, fix errors, develop features, and prevent misuse.
Balanced legitimate interests or consent where required.
Marketing
Send promotions and measure campaign effectiveness.
Consent that may be withdrawn.
Legal and safety
Respond to authorities, disputes, incidents, emergencies, and protect people and assets.
Legal obligations, vital interests, and balanced legitimate interests.
| Activity | Purpose | Primary basis |
|---|---|---|
| Account and OTP | Create, authenticate, recover, and secure accounts. | Contract performance, relevant consent, and legitimate security interests. |
| Worker verification | Check identity, bank account, qualifications, and category eligibility, and prevent fraud. | Pre-contract steps, contract performance, legal obligations, legitimate interests, and special consent where required. |
| Jobs and location | Match Users, show maps, verify attendance, operate status, and handle safety and disputes. | Contract performance and device permission consent for location access. |
| Payments, refunds, payouts | Process held payments, App Fees, tips, refunds, payouts, reconciliation, chargebacks, tax, and audit. | Contract performance and legal obligations. |
| Chat, support, and moderation | Facilitate communications, handle reports, maintain security, enforce terms, and retain evidence. | Contract performance, legal obligations, and balanced legitimate interests. |
| Analytics and improvement | Measure performance, fix errors, develop features, and prevent misuse. | Balanced legitimate interests or consent where required. |
| Marketing | Send promotions and measure campaign effectiveness. | Consent that may be withdrawn. |
| Legal and safety | Respond to authorities, disputes, incidents, emergencies, and protect people and assets. | Legal obligations, vital interests, and balanced legitimate interests. |
Where we rely on consent, we explain the specific purpose and provide a way to withdraw it. Withdrawal does not affect processing that was lawful before withdrawal or processing that has another legal basis.
6. Use of Location, Camera, and Notifications
6.1 Location
6.1 Location
With device permission, location is used while the application is active to select addresses, find nearby Workers, show routes or en-route status, verify attendance, prevent fraud, and handle disputes. Real-time location is not used for background tracking. You may refuse or revoke permission through device settings.
6.2 Camera and media
The camera or photo picker is used after your action for identity card, selfie, profile, portfolio, Attendance Code, work documentation, and dispute evidence. Camera permission is not required if you select media through the system photo picker where the feature is available.
6.3 Notifications
Notifications are used for OTP, chat, offers, Job status, security, payout, refund, and legal updates. Non-critical notifications may be managed through the application or device. Marketing messages may be stopped without affecting necessary service messages.
7. Recipients and Disclosure of Data
We do not sell Personal Data. We only share relevant data with the following recipients:
-
Matched Customers and Workers. Public profiles are limited to necessary information. Full Customer address is shared after the Worker is selected or at the stage required for performance;
-
Payment providers and banks for payment, verification, refund, payout, reconciliation, chargeback, and compliance;
-
WhatsApp or communications providers for OTP, notifications, and support;
-
Google Maps and location services for maps and addresses; Google ML Kit or scanner components for Attendance Codes; and Firebase for core functions, notifications, chat, storage, and application reliability according to the configuration used;
-
Backend, cloud, storage, email, analytics, crash reporting, security, verification, and Customer Service providers acting under contract and instructions;
-
Professional advisers, auditors, insurers if any, or lawful successors in merger, investment, restructuring, and business transfer; and
-
Authorities, regulators, courts, emergency services, or other parties where required by law or necessary to protect safety and rights.
Internal teams only receive access based on function and need. Access to bank account data for manual payout is limited to officers handling disbursement and related supervision.
8. Storage and Retention
| Category | General retention period |
|---|---|
| Account and profile | While the account is active and up to 2 years after closure, unless certain data falls under another category or a dispute is ongoing. |
| Incomplete or rejected Worker registration | Up to 6 months after the process ends, unless required for fraud prevention or legal defense. |
| Identity card and verification evidence | While the Worker account is active and up to 2 years after closure or the last Transaction, unless law or disputes require longer retention. |
| Bank account and payout instructions | While the Worker account is active. Transfer and reconciliation records are retained according to transaction and tax retention. |
| Transaction payment, refund, tax, and invoice records | 10 years from the end of the tax year or related Transaction, or longer if required by law or dispute. |
| Chat and Job evidence | 5 years after the Transaction ends. Content may be retained longer during complaints, investigations, or legal proceedings. |
| Location | Real-time location is used during operational need. Location event logs forming part of Transaction evidence are retained for up to 5 years. |
| Technical security logs and consent records | Up to 2 years, unless required longer for security, audit, or consent proof. |
| Marketing data | Until consent is withdrawn or up to 2 years after the last interaction, whichever occurs earlier. |
After the retention period ends, data is deleted, destroyed, blocked from active processing, or anonymized. Backups may remain for limited recovery cycles and are not used for new purposes.
9. Data Security
We implement reasonable administrative, technical, and organizational measures according to the level of risk. These measures may include encryption in transit, role-based access restrictions, authentication, environment segregation, security logging, vendor management, limited backups, incident handling, and periodic review.
No system is risk-free. You must protect your device and OTP, avoid sending card data or passwords through chat, use a secure connection, and promptly report unrecognized activity.
10. Data Subject Rights
- Obtain information about the Controller’s identity, purposes, bases, and accountability of processing;
- Access and obtain a copy of Personal Data according to law;
- Complete, update, or correct inaccurate data;
- Withdraw consent for processing based on consent;
- Terminate, restrict, delete, or destroy data according to legal requirements;
- Object to decisions based solely on automated processing;
- Obtain data in a commonly machine-readable format where the right to portability applies; and
- Submit complaints, claims, or compensation requests under applicable laws.
Requests may be submitted through available account features or from the registered number or email to admin@goodjobindonesia.com.
We may request proportionate verification. We will provide confirmation or take action within 3 x 24 hours where such period is required by the Indonesian Personal Data Protection Law, and will handle other requests within a reasonable period according to complexity and legal obligations.
We may reject or delay a request on a limited basis if identity cannot be verified, data must be retained for transactions, tax, security, disputes, rights of others, or legal obligations. Reasons will be provided to the extent permitted.
11. Account Closure and Deletion
You may request deletion through available account features or by sending a request from the registered number or email to admin@goodjobindonesia.com. We will verify the request, inform you of any open Transactions or obligations, then close the account and delete or anonymize data that is no longer required.
Account deletion does not automatically delete payment, tax, consent, security, complaint, and legal evidence records that must or may lawfully be retained. Such data is restricted for retention purposes and deleted after the applicable period ends.
12. Children’s Data
GoodJob is not intended for account creation by persons under 18 years of age. For childcare, education, transportation, or other services involving children, Customers may only provide children’s data that is necessary and must have authority as a parent or guardian.
Workers may not photograph, record, store, or share children’s data without the express permission of the parent or guardian and a lawful purpose. Parents or guardians may request correction or deletion through our contact.
13. Cross-Border Data Transfer
Some technology providers may process data outside Indonesia. Before transfer, we assess the purpose, data type, recipient, location, contract, security, and protection mechanism. Transfers are conducted where the recipient country has adequate protection, binding protection is in place, required consent is obtained, or another basis is available under the Indonesian Personal Data Protection Law.
14. Personal Data Protection Incidents
If a Personal Data protection failure occurs, we will investigate, limit the impact, restore systems, and document the handling. We will provide written notification to affected Data Subjects and the competent authority or institution no later than 3 x 24 hours after becoming aware where required by law. The notification will state the data disclosed, the time and manner of the incident, relevant impact, and handling steps.
15. Policy Changes
We may update this Policy due to changes in features, vendors, risks, or law. Material changes are notified before taking effect through the application, website, email, WhatsApp, or official channels. We request new consent where new processing requires consent. The version and effective date are displayed in the document.
16. Complaints and Closing
Privacy complaints may be submitted to PT Karya Dewata Bagus through admin@goodjobindonesia.com. You may also exercise your right to complain to the competent authority or institution or court under Indonesian law.
This Policy must be read together with the User Terms and Conditions, the Worker Agreement for Workers, and the GoodJob Transaction Policy.