Privacy Policy

1. Who we are

TKET ("we") connects Thai-Korean bilingual job-seekers with employers at tkettalent.com. We decide how your personal information is used, and this policy explains how. It is written for people in Thailand and Korea, under Thailand's Personal Data Protection Act (PDPA) and Korea's Personal Information Protection Act (PIPA). Contact us at tket.official@gmail.com.

2. What we collect

You don't have to give us any of this. Without a Google sign-in and a profile you can't apply for jobs through TKET, and without uploading a resume you can still fill in your details by hand.

• Google account: your name, email address, profile photo and Google account ID, when you sign in.
• Profile: name, location, education, work experience, skills, languages, certifications, awards, the roles and work you want, and the countries where you can already work.
• Resume: the PDF you attach, and anything written in it.
• Applications: which jobs you applied to, when, your match score, your profile and resume at that time, your consent, and our internal review status.
• Talent pool: whether you joined, when, and which version of the consent you agreed to.
• Korea survey: where you live, what you're doing now, your education, graduation date, field of study and Korean level, the work and services you want, when you'd like to move to Korea, your email, an optional name, whether you'd like an interview, and where you found the survey.
• Usage: pages visited and jobs shown, linked to a random ID stored in your browser, not your name. If you haven't signed in, this can include the skills and preferences used to match you.
• Security: a scrambled (hashed) version of your IP address, to limit abuse.

3. Why we use it, and our legal basis

We don't sell your information, and we don't use it for advertising. Joining our LINE OpenChat is optional and separate from applying.

• To run your account, match you with jobs, and handle applications you ask us to make: because it's needed to provide the service you requested (PDPA section 24(3); PIPA article 15).
• To have your resume read automatically by OpenAI, and to share your application with an employer: with your consent, which you give with a tick box at that moment.
• To keep your profile and resume in our talent pool and contact you about other jobs that may suit you: with your consent, which you give with a separate tick box on your profile page. You can leave at any time. We still ask before sharing your details with an employer for any job.
• To plan a service that helps people move to Korea for work, email you when it's ready and, if you ask, arrange a short interview: with your consent, which you give with a tick box on the survey.
• To keep the service secure, prevent abuse and understand how it's used: our legitimate interests (PDPA section 24(5); PIPA article 15).
• To meet legal duties, where a law requires it.

4. Sensitive information

We don't ask for sensitive information, such as religion, race or ethnicity, health, disability, political views, union membership, criminal records or biometric data. Please remove it from your resume before uploading, along with national ID, resident registration and passport numbers. If it's included anyway, we don't use it for matching, but it will stay in the resume file you gave us.

5. Who we share it with

If you choose to join our LINE OpenChat, LINE's own terms apply, and other members can see what you post there.

• Employers: when your application is put forward, we share your profile, resume and contact details with the employer for that job. Where a job came through a recruitment platform, such as kowork.kr, we may also share them with that platform to reach the employer. They then handle your information under their own privacy policies. We share only with your consent, given when you apply.
• OpenAI, L.L.C.: reads resume text to fill in your profile, and only if you tick the box to agree.
• Google LLC: provides sign-in.
• Our server provider: hosts the service in Thailand.
• Authorities: where the law requires it.

6. Sending information outside your country

Our server is in Bangkok, Thailand, so if you're in Korea, your information is sent to Thailand when you use TKET.

• Employers and platforms: sent to Thailand or Korea, or the employer's country if different, when your application is shared, so that they can consider you. They keep it under their own policies. Recipients and their countries depend on the job you choose.
• OpenAI (United States): resume text, sent over an encrypted connection when you upload a resume. OpenAI says it doesn't use API data to train its models by default and may keep it for up to 30 days to provide the service and detect abuse. You can refuse by not ticking the box and filling in your details by hand.
• Google (United States and other countries): sign-in details, when you sign in with Google.

7. How long we keep it, and how we delete it

Where a law requires us to keep something longer, we keep only what's required. We delete database records so that they can't be read again, and backups expire on schedule. Copies already shared with an employer are held by that employer, and you'd need to ask them directly to delete those.

• Account, profile, resumes and applications: until you delete your account, or automatically 2 years after your last sign-in.
• Talent pool: until you leave it or delete your account, or automatically 2 years after your last sign-in.
• Korea survey answers: 2 years after you last answered, or sooner if you ask us to delete them.
• Resume uploaded without signing in: not saved on our server. It stays in your browser for up to 24 hours or until you sign out.
• Usage records: 2 years. Scrambled IP addresses: about 2 days.
• Sign-in session: 30 days. Backups: up to 14 days after deletion.

8. Your rights

You can ask to see, get a copy of, correct, delete or restrict your information, object to its use, ask us to move it to another provider, and withdraw consent at any time. Withdrawing doesn't affect what we did before, but it may stop us processing an application. You can delete your account yourself from the menu under your name, and leave the talent pool yourself on your profile page. For anything else, email tket.official@gmail.com. We aim to reply within 10 days, and may need to confirm who you are. A parent or legal representative may act for a minor.

9. Automated matching

Software scores how well your profile fits each job and ranks the results. If you've told us where you can work, a job that needs work rights you don't have, with no visa sponsorship, ranks lower and shows a warning. You can still apply. The score doesn't reject anyone by itself: our team reviews applications. You can ask us to explain a result or have a person look at it.

10. Cookies and browser storage

We don't use advertising cookies. You can block or clear these in your browser settings, but sign-in may then stop working.

• A sign-in cookie keeps you signed in. It's essential, and is removed when you sign out.
• Browser storage holds your draft profile and matches for the current tab, a resume waiting to be attached, and a random ID for counting visits.
• Google may set its own cookies when you use its sign-in button.

11. How we protect it

We use encrypted connections, limit admin access to named accounts, store session tokens only in scrambled form, keep the server behind a firewall with key-only access, limit requests, check uploaded files, keep private backups and apply security updates. No system is perfectly secure. If a breach could put you at risk, we'll tell you and the authorities as the law requires, within 72 hours where required.

12. Children

TKET is for job-seekers aged 18 or over. We don't knowingly collect information from anyone under 14. If you're under 20 in Thailand, you may need a parent or guardian's consent. If you believe a child has given us information, contact us and we'll delete it.

13. Privacy contact and complaints

Privacy contact (Korea: person responsible for personal information): TKET Privacy Team, tket.official@gmail.com.

You can also complain to a regulator. In Thailand: the Personal Data Protection Committee (pdpc.or.th). In Korea: the Personal Information Protection Commission (pipc.go.kr) or the KISA Privacy Center (privacy.kisa.or.kr, call 118).

14. Changes and translations

We'll post changes here and update the date above, and will tell you directly about important ones. If we want to use your information in a new way that needs consent, we'll ask first. If this policy's languages differ, we apply whichever is more favourable to you.