Privacy Policy

Account Information: When you sign in through Manus OAuth, we receive your name, email address, and profile identifier. This is used to create and manage your account.

Client Registration Data: When you register as a client, we collect your full name, nickname, date of birth, gender, nationality, and contact information (email, phone number). This information is necessary to process your form applications.

Verification Data: To verify your identity, we may collect a photo of your national ID card and a face selfie. For email or mobile verification, we collect your email address or phone number respectively. A face selfie is required for all verification methods.

Application Data: When you submit form applications, we collect details about the form type, pen specifications, and any additional notes you provide.

Support Data: If you contact support, we collect the content of your messages and any attachments you share.

Usage Data: We automatically collect basic usage information such as login times and page visits to improve the Portal experience.

We use the information we collect for the following purposes:

• To create and manage your client account
• To verify your identity and prevent fraud
• To process and manage your form applications
• To communicate with you about your applications, approvals, and department updates
• To provide customer support
• To maintain the security and integrity of the Portal
• To generate anonymised reports and statistics for department operations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

When you submit ID and face verification, we use AI-assisted analysis to compare your ID photo with your selfie. This analysis:

• Is used solely to assist staff in verifying your identity
• Does not make automated decisions — a human staff member always reviews and makes the final verification decision
• Extracts your name and ID number from the card for cross-referencing only
• Does not store biometric templates or facial recognition data beyond the original images

Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL encryption.

Secure Storage: Your data is stored on secure, access-controlled servers. Uploaded files (ID documents, selfies) are stored in encrypted cloud storage with unique, non-guessable file paths.

Access Control: Only authorised TK Department staff with administrative privileges can access your personal data and verification documents. Access is logged and monitored.

Session Security: Your login sessions are protected with secure, signed cookies. Sessions expire automatically after a period of inactivity.

We retain your personal data for as long as your account is active and as needed to provide you with our services. Specifically:

• Account data is retained while your account remains active
• Application records are retained for department record-keeping purposes
• Verification documents are retained for the duration of your active verification status
• Support tickets are retained for reference and quality assurance

If you wish to delete your account and associated data, please contact TK Department staff through the support system. We will process deletion requests within a reasonable timeframe, subject to any legal or operational retention requirements.

You have the following rights regarding your personal data:

• Access: You can view your personal data through your Profile page at any time
• Correction: You can update your personal information through your Profile page or by contacting support
• Deletion: You can request deletion of your account and data by contacting support
• Objection: You can object to specific uses of your data by contacting support