Privacy Policy

SAD.MBA is an unincorporated business run directly by its founder, located at Ruko Jati Kepuh C-03, Candi, Sidoarjo, Indonesia. Under the PDP Law, we are the personal data controller for the data you give us through this service.

Questions or requests about your personal data can be sent to [email protected].

We only collect what we need to run the service:

• Waitlist data: the email address you enter in the form.
• Account data: your name, email address, and a password stored as a one-way hash.
• Application documents you upload: essays, CV, transcript, language certificate, recommendation letters, and details about the scholarship and the stage at which you were cut.
• Voice recordings and their transcripts, when you recount your interview or practice in the simulator.
• Answers, notes and plans you create in the app.
• Usage data: device and browser type, IP address, access times and pages opened. We use this to keep the service secure and to improve it.
• Payment data: handled directly by our payment provider. We receive the status and amount of a transaction, but we do not store your card number or banking credentials.

We do not ask for specific (sensitive) personal data such as health data, biometric data or criminal records. If your documents contain such data, we process it only to analyze those documents. You are welcome to remove or redact those parts before uploading.

We do not use your voice recordings to identify you or verify your identity.

Every use of your data has a clear purpose and legal basis:

• Running the service (autopsy, grading, story mining, interview simulation, planning and scholarship matching). The basis is the performance of our agreement with you, namely the Terms of Service.
• Letting you know when SAD.MBA opens, if you joined the waitlist. The basis is your consent, which you can withdraw at any time using the unsubscribe link in every email.
• Training and improving our grader with your documents. We only do this with separate, explicit consent from you. The setting is off by default, and declining does not reduce the features you get.
• Keeping the service secure and preventing misuse. The basis is our legitimate interest, balanced against your rights.
• Meeting legal obligations, such as keeping transaction records for tax purposes.

We will not use your data for any other purpose without telling you and, where required, asking for your consent first.

Your documents and recordings are analyzed by artificial intelligence systems. The results are estimates, such as the most likely causes of a rejection or a score against a rubric. They do not determine whether a scholarship provider accepts you, and we never share them with providers.

You have the right to ask how a result was reached and to object to it. An awardee review is available if you want an assessment from a person.

The analysis runs on Claude models from Anthropic, a third-party AI provider. Anthropic processes data on our behalf, and under its commercial terms the data we send is not used to train its models.

We do not sell your personal data. It is only shared with:

• Service providers acting on our behalf as data processors: storage and servers (Unihost), AI (Anthropic), email delivery, and a licensed Indonesian payment provider named on the payment page.
• Awardee reviewers, and only for the documents you choose when you book an awardee review. They are bound by a duty of confidentiality.
• Public authorities, where the law or a court order requires it.

We do not share any data with LPDP, Chevening or any other scholarship provider.

Data is stored on servers located in Singapore. AI analysis is processed in our AI provider's data centers, which may be in other countries, including the United States. As the PDP Law requires, we make sure that the destination country offers an equivalent level of protection, or that adequate and binding safeguards are in place by contract. If neither applies, we ask for your consent first.

• Documents, recordings and analysis results are kept while your account is active. You can delete them one by one at any time.
• If you delete your account, data is removed from live systems within 30 days and from backups within 90 days.
• Waitlist emails are kept until you unsubscribe, or for no more than 12 months after the service opens.
• Transaction records are kept for as long as tax and bookkeeping rules require.

Once a retention period ends, the data is deleted or destroyed so that it can no longer be linked to you.

Data is encrypted in transit and at rest. Access on our side is limited to people who need it to do their work, and every access is logged.

No system is entirely free of risk. If a personal data protection failure affects your data, we will notify you and the personal data protection agency in writing no later than 3 x 24 hours after we become aware of it. The notice will state what data was exposed, when and how it happened, and what we are doing about it.

As a personal data subject, you have the right to:

• be informed about who processes your data, for what purpose, and on what basis;
• access your personal data and obtain a copy of it;
• complete, update and correct inaccurate data;
• end the processing of your data, or have it deleted or destroyed;
• withdraw consent you have given;
• object to decisions based solely on automated processing;
• delay or restrict processing;
• receive your data in a commonly used, machine-readable format and move it elsewhere;
• bring a claim and receive compensation for unlawful processing of your personal data, as provided by law.

Most of these rights can be exercised directly from your account settings. For the rest, send a request to [email protected]. We respond to requests for access, correction, restriction of processing and withdrawal of consent no later than 3 x 24 hours after we receive them. We may first need to confirm that the request really comes from you.

Exercising these rights is free of charge.

SAD.MBA is intended for postgraduate scholarship applicants aged 18 or over. We do not knowingly collect children's data. If you are under 18, you need the consent of a parent or guardian to use the service.

Your documents may contain other people's data, such as the name and position of a referee. We process that data only to analyze your documents. Please make sure you are entitled to share it, or redact it before uploading.

This site does not use advertising cookies or third-party trackers. The only things we store in your browser are:

• one cookie named “lang”, which remembers your language choice for one year;
• a temporary note of your scroll position when you switch languages, which is cleared when you close the tab.

Both are needed for the site to work the way you chose, so they do not require separate consent. If we later add analytics or other non-essential cookies, we will update this policy and ask for your consent first.

This policy may change as the service or the law develops. For significant changes, we will notify you by email or in the app before they take effect. The effective date of the latest version is always shown at the top of this page.

Contact us at [email protected], or by post at Ruko Jati Kepuh C-03, Candi, Sidoarjo, Indonesia, with questions, requests or complaints about your personal data.

If you feel our response has not resolved the issue, you have the right to complain to the agency responsible for personal data protection in Indonesia.