eNusuk Bridge System Privacy Policy

Effective date: July 27, 2026

eNusuk Bridge System works exclusively with enusuk.safarhub.id. Its single purpose is to securely connect eNusuk with Nusuk for user-initiated muktamer data uploads.

Data we process

• The identity, email address, and account mode of the signed-in eNusuk user.
• Nusuk credentials for the eNBS Visa Service and an email OTP only when the user explicitly starts that connection flow.
• The Nusuk session token, entity ID, entity type ID, contract ID, and the minimum Nusuk request headers needed to obtain those values.
• The eNusuk and Nusuk page URLs involved in the active connection flow, temporary extension status, and contract configuration.

How we use and store data

Credentials and OTP values are used only to complete the Nusuk login flow initiated from eNusuk. Login email, password, and short-lived authorization tickets are held only in Chrome extension session storage, removed when the login popup closes, and are not synchronized to the user's Chrome account. The authorization ticket expires after 15 minutes.

The Nusuk session token and contract identifiers are transmitted over HTTPS to the eNusuk server and associated with the eNusuk account that initiated the connection. They are retained until replaced by a newer session, cleared by logout, or deleted with the related account data.

Data sharing and sale

We do not sell user data, use it for advertising, determine creditworthiness, or use it for any purpose unrelated to the extension's single purpose. Data is shared with Nusuk when necessary to perform an action requested by the user. When an authorized server-to-server integration partner explicitly requests a Nusuk session, the four required session variables may be delivered only to that partner's registered HTTPS callback with a signed webhook. Data may also be disclosed when required by law.

User control and security

The extension is restricted to enusuk.safarhub.id and masar.nusuk.sa. Credential assistance runs only inside a dedicated Nusuk window opened from eNusuk. Data is transmitted through HTTPS and protected by a short-lived authorization ticket. Users can remove local extension data by uninstalling the extension and can request deletion of account data through the support contact below.

Contact

Privacy questions and data deletion requests can be sent to [email protected] .

The use of information received by eNusuk Bridge System complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.