Data Privacy & Protection

Overview

At Aevum Encyclopedia, we are committed to protecting your privacy and ensuring the security of your personal information. This Data Privacy & Protection Policy outlines how we collect, use, store, and safeguard your data when you access our platform, contribute to articles, or interact with our services.

By using Aevum Encyclopedia, you agree to the practices described in this policy. We encourage you to read this document carefully and reach out to our Data Protection Officer if you have questions.

Information We Collect

We collect information to provide, improve, and secure our services. Data collection is strictly limited to what is necessary for legitimate operational, analytical, and safety purposes.

1. Information You Provide

• Account credentials (email, username, password hash)
• Profile details (display name, institutional affiliation, expertise areas)
• Contributions, edits, comments, and multimedia uploads
• Communications sent to support or editorial teams

2. Automatically Collected Data

• Device identifiers, IP address, and browser type
• Usage analytics (page views, search queries, session duration)
• Log data for security, debugging, and performance monitoring
• Location data (approximate, based on IP, used only for localization)

3. Third-Party & Public Sources

We may integrate publicly available academic identifiers (e.g., ORCID, ResearcherID) or verification signals from trusted institutions to authenticate contributor expertise. This data is never used for marketing.

How We Use Your Data

Your information is processed exclusively for the following purposes:

• Service Delivery: Account management, content publishing, and platform functionality
• Quality Assurance: Peer-review workflows, moderation, and fact-verification systems
• Improvement: Aggregated analytics to enhance search algorithms and user experience
• Security: Fraud prevention, abuse detection, and system integrity monitoring
• Communication: Transactional alerts, policy updates, and opt-in community newsletters

We do not sell, rent, or license your personal data to advertisers, data brokers, or third parties for commercial purposes.

Data Sharing & Disclosure

We share your information only when necessary and under strict contractual safeguards:

• Service Providers: Hosting, CDN, analytics, and email delivery partners bound by DPA agreements
• Legal Obligations: Compliance with court orders, regulatory investigations, or imminent safety threats
• Academic Partners: Anonymized, aggregated datasets for research initiatives (never identifiable)
• Business Transfers: In the event of merger or acquisition, data transfers comply with applicable privacy laws

Security & Protection

Aevum Encyclopedia employs industry-leading security measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

• End-to-end TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication (MFA) enforcement for editorial accounts
• Regular penetration testing, vulnerability scanning, and SOC 2 Type II compliance
• Role-based access controls and principle of least privilege for internal teams
• Automated incident response protocols with 72-hour breach notification windows

While we strive to protect your information, no system is entirely immune to threats. Users are encouraged to maintain strong passwords and enable security features.

Your Rights & Choices

Depending on your jurisdiction (including GDPR, CCPA, LGPD, etc.), you may exercise the following rights:

• Access & Portability: Request a copy of your personal data in a machine-readable format
• Rectification: Update or correct inaccurate profile or account information
• Erasure: Request deletion of your account and associated data (subject to legal retention obligations)
• Restriction & Objection: Limit processing or opt out of non-essential analytics
• Withdraw Consent: Manage newsletter subscriptions and marketing preferences at any time

To exercise these rights, submit a request via our secure portal or email dpo@aevumencyclopedia.org. We will respond within 30 days.

Cookies & Tracking Technologies

We use essential cookies to maintain session integrity and security. Analytics cookies are strictly anonymized and may be disabled in your browser settings. We do not use third-party advertising trackers or fingerprinting technologies.

Preference controls are available in your account dashboard under Settings → Privacy & Cookies.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Anonymous contribution history and public articles remain accessible indefinitely as part of the encyclopedia archive, but are permanently dissociated from identifiable account data upon deletion requests.

International Data Transfers

Aevum Encyclopedia operates globally. Your data may be processed in countries other than your own. We ensure adequate protection through Standard Contractual Clauses (SCCs), Data Privacy Framework certifications, and local compliance mechanisms. You can request details about cross-border transfer destinations upon request.

Contact Us

If you have questions, concerns, or requests regarding this policy or our data practices, please contact:

• Data Protection Officer: dpo@aevumencyclopedia.org
• Privacy Requests Portal: privacy.aevumencyclopedia.org
• Postal Address: Aevum Encyclopedia Foundation, 104 Knowledge Lane, Suite 200, San Francisco, CA 94105, USA

For regulatory inquiries, you may also contact your local data protection authority.