Legal

Privacy Policy

Effective date: 19 June 2026

1. Introduction

PathPort (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our Services, and your rights under Singapore's Personal Data Protection Act 2012 (“PDPA”).

By using PathPort's Services, you consent to the collection and use of your personal data as described in this Policy.

2. Personal Data We Collect

We collect the following categories of personal data:

Identity & Contact Information

Full name, email address, mobile number, date of birth, nationality, country of residence, and profile photograph.

Passport & Immigration Documents

Passport number, passport expiry date, passport scan/copy, previous visa history, and immigration status documents. This information is required to facilitate In-Principle Approval (IPA) / Student Pass applications with Singapore's ICA.

Educational Records

Academic transcripts, certificates, school leaving certificates, language proficiency test results, and prior qualifications.

Financial Information

Bank statements, sponsorship letters, income proofs, and invoice/payment records for college tuition fees. We do not store credit card or debit card numbers — payments are processed by third-party providers.

Application Data

Course selections, application status, correspondence with colleges, offer letters, and IPA documents.

Technical Data

IP address, browser type, device identifiers, and usage logs collected automatically when you use the platform.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

Processing and managing your college applications
Facilitating IPA / Student Pass applications with ICA Singapore
Communicating with you about your application status, invoices, and documents
Generating and managing invoices for tuition fee payments
Complying with Singapore laws and regulatory requirements
Improving our platform and services
Preventing fraud, detecting abuse, and ensuring platform security
Sending transactional notifications (application updates, payment confirmations)

We do not sell your personal data to third parties for marketing purposes.

4. Disclosure of Personal Data

We may share your personal data with:

Partner Colleges: Your application documents, educational records, and contact details are shared with the Singapore private college you apply to. This is necessary to process your application.
Immigration & Checkpoints Authority (ICA) Singapore: Your passport details and immigration documents are shared as required to process your Student Pass application.
Service Providers: Cloud hosting (Supabase), email services, and payment processors who assist us in operating the platform. All service providers are bound by data processing agreements.
Legal Authorities: When required by law, court order, or to protect the rights, property, or safety of PathPort, its users, or the public.

5. Data Retention

We retain your personal data for the following periods:

Active account data: Retained for as long as your account is active
Application records, invoices, and immigration documents: Retained for 7 years after your application closes, to comply with Singapore statutory requirements and for audit purposes
Technical/usage logs: Retained for 90 days

After the applicable retention period, data is securely deleted or anonymised.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption in transit (TLS) and at rest for all stored data
Access controls — only authorised staff and the college you applied to can access your data
Row-level security policies on our database ensuring each user sees only their own records
Private, access-controlled storage for sensitive documents (passport scans, IPA letters, financial proofs)

No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

7. Cookies and Tracking

We use session cookies essential for platform functionality (authentication). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

8. Your Rights Under PDPA

Under the Singapore PDPA, you have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete personal data
Withdrawal of consent: Withdraw consent at any time (subject to legal and contractual restrictions). Note: withdrawal may prevent us from processing your application
Data portability: Receive your data in a commonly used machine-readable format

To exercise your rights, contact our Data Protection Officer at: pathpportsg@gmail.com. We will respond within 30 days.

9. International Data Transfers

Your data is stored on servers operated by Supabase, which may be located outside Singapore. Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your data consistent with PDPA requirements.

10. Children's Privacy

Our Services are not directed at children under 17. If you are under 17, you must have parental or guardian consent to use PathPort. We do not knowingly collect personal data from children under 17 without verified parental consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the platform. The updated Policy will be effective from the date indicated at the top of this page.

12. Contact Us

For privacy enquiries or to exercise your PDPA rights, contact us at:

PathPort Data Protection Officer

Email: pathpportsg@gmail.com