This platform is designed to minimize personal data. Anonymous page feedback stores only the page path and whether it was helpful. Search analytics retain a broad, fixed service category—not the citizen’s verbatim question—and a result count. Raw network addresses are not stored in product analytics.
When grounded AI is available, the server sends only a fixed service category, a task type classified inside the portal, and selected published DOST excerpts to the configured AI processor—not the original question. Questions containing contact details, identifiers, or other sensitive information stay in deterministic search.
A submitted question appears in the search-page address and may remain in browser history and ordinary infrastructure logs. Do not enter passwords, identification numbers, application or case records, addresses, health information, or confidential personal information in search.
Voice input is optional. When used, the browser or operating system’s speech-recognition service may process audio under its vendor’s terms and place a transcript in the search field. You can review or change the text before submitting.
The portal uses first-party functional cookies to remember the selected language and low-data mode for up to one year. Text-size and contrast choices stay only in the browser’s local storage. These preferences are not used for advertising or cross-site tracking. They can be changed through the language and display controls or cleared in the browser’s site-data settings.
The retention rule is 30 days for search events and answer feedback; 90 days for anonymous page feedback, connector run logs, and withdrawn feed items; seven days for unreviewed uploads; and 30 days for rejected uploads. Some expired search records are pruned opportunistically. Public launch remains blocked until the dedicated daily maintenance job enforcing the full policy is provisioned and verified.
Administrative access is authenticated and material changes are recorded. DOST’s Data Protection Officer must approve the production data flow, processor terms, retention policy, and official privacy contact before public release. Administrative audit records are not automatically deleted by this policy; they follow the separately approved government records schedule.