Privacy Policy

This Privacy Policy explains how personal data is collected, used, shared and protected on the IL.uz platform (the “Platform”). It applies to applicants, employers' representatives, partner agencies' staff and visitors of the Platform.

We comply with the Law of the Republic of Uzbekistan “On Personal Data” (ЗРУ-547) and the Personal Information Protection Act of the Republic of Korea (PIPA).

The controller of your personal data is SMA SYSTEM Co., Ltd (1220, 110 Eutteum-ro, Deogyang-gu, Goyang-si, Gyeonggi-do 10543, Republic of Korea). It operates the Platform, receives and checks applications, prepares the document package and works with employers and the competent authorities of the Republic of Korea.

One address for all personal-data requests: info@smasystema.com (subject: “Personal data”).

You may withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

• Document reading: the uploaded passport, ID card, diploma, labour book and certificates are read with artificial intelligence and the fields are filled in. The fields read are marked — you check and confirm them.
• Translation: names, institutions, positions and other fields are translated into English and Korean.
• Face comparison: the 3×4 photo is compared with the photo on the passport and ID card on our own server. Only the similarity score and the conclusion (“same”, “likely”, “different”) are stored; no separate biometric template is kept and nothing is passed to third parties.
• Completeness score: how complete the application is — it helps staff plan the review queue.

We do not sell personal data and do not share it for advertising. Data is passed only to the following recipients and only to the extent necessary:

• Approved employers — the profile (without contact details, passport and ID card numbers or documents); the name and photo with separate consent. Once an employer selects you, the documents required for the visa are passed on in the official procedure.
• Korean certified administrative agents (행정사), intermediary organisations and the immigration authorities of the Ministry of Justice — for the visa.
• Partner agencies — only for the applicants they registered.
• Public authorities — when the law requires, on an official request.

Technical service providers (sub-processors) process data only on our instructions, under contract:

Platform data is stored in the Republic of Korea (Seoul). Data you enter from Uzbekistan is transferred to the Operator in the Republic of Korea and stored there, on the basis of your consent and the service agreement; for document reading and translation, data is sent temporarily to an AI service in the USA. Confidentiality and security obligations are fixed by contract with every recipient; data is transmitted over encrypted channels.

You can delete your account yourself in the cabinet (Profile → Delete account): the application, documents and sign-in account are erased at once — employers, agencies and other users can no longer see them. An archive copy of the deleted data is kept for 90 days in restricted mode (the Operator's authorised staff only, for restoration and claims), then erased for good. Where the law requires records to be kept (an agreement, an invoice, a payment), a closure request is carried out within 30 days: the personal data is erased and such records are stored in restricted (anonymised) mode until the period ends, then deleted. A request to withdraw consent is also carried out within 30 days.

• Data is encrypted in transit (TLS) and at rest; documents are kept in private storage and opened only through time-limited links.
• Every user sees only their own data; staff access only the data their role requires; access is logged.
• The staff panel signs out automatically after 30 minutes of inactivity; passwords are stored only as hashes.
• Data is backed up regularly. In the event of a security incident we notify you and the competent authorities within the period set by law.

• Access your data and obtain a copy (the personal card and resume in your dashboard, as PDF).
• Correct inaccurate data — in your dashboard or by request.
• Erasure, restriction of processing and withdrawal of consent; the “Profile for employers” consent can be withdrawn by you in the dashboard.
• Contest an automated result and ask for a human review.
• Lodge a complaint: in Uzbekistan — with the competent state body for personal data (the State Personalisation Centre under the Cabinet of Ministers); in the Republic of Korea — with the Personal Information Protection Commission (PIPC, privacy.go.kr, tel. 118).

Send requests to info@smasystema.com from the e-mail address of your account. We may ask you to confirm your identity. We reply within 10 business days.

The Platform is for persons aged 18 or over. Information about family members (including children) is entered by the applicant, who confirms being entitled to provide it; it is used only for the personal card and visa forms.

When the Policy is updated, the date and version at the top of the page change; we announce material changes on the Platform and via Telegram. Processing for a new purpose requires separate consent.

• Personal data officer: SMA SYSTEM Co., Ltd · info@smasystema.com
• SMA SYSTEM Co., Ltd — 1220, 110 Eutteum-ro, Deogyang-gu, Goyang-si, Gyeonggi-do 10543, Republic of Korea · Tel.: +82 2-2138-3780