Privacy Policy

Your privacy and data protection are our top priorities

Last Updated: July 30, 2025

1. Overview

Welcome to SciLink.me Research Tools Suite ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our research tools.

SciLink.me provides comprehensive research management tools powered by the Crossref API, designed to streamline academic workflows for researchers, scientists, and academics worldwide. We understand the sensitive nature of research data and are committed to maintaining the highest standards of data protection.

Our Privacy Commitment

We are committed to transparency, data minimization, and giving you control over your personal information. This policy complies with GDPR, CCPA, and other applicable privacy regulations.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Account Information: Name, email address, institutional affiliation, research interests
  • Profile Data: Academic credentials, publications, research metrics, professional information
  • Research Data: References, citations, journal preferences, search queries
  • Communication Data: Messages, feedback, support requests

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent, click patterns, feature usage
  • Technical Data: Log files, error reports, performance metrics
  • Location Data: General geographic location based on IP address

2.3 Third-Party Information

We may receive information from:

  • Crossref API: Publication data, citation information, journal metadata
  • Academic Databases: Research metrics, publication records
  • Institutional Partners: Verification of academic affiliations
Data Type Purpose Legal Basis (GDPR) Retention Period
Account Information Service provision, authentication Contract performance Account lifetime + 3 years
Research Data Tool functionality, personalization Legitimate interest Account lifetime + 1 year
Usage Analytics Service improvement, analytics Legitimate interest 26 months
Marketing Data Communications, updates Consent Until consent withdrawn

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

  • Provide and maintain our research tools and services
  • Create and manage your academic profile
  • Process research queries and generate results
  • Enable collaboration features and sharing

3.2 Service Improvement

  • Analyze usage patterns to improve functionality
  • Develop new features and tools
  • Optimize website performance and user experience
  • Conduct research and analytics

3.3 Communication

  • Send service updates and notifications
  • Provide customer support and technical assistance
  • Share research insights and best practices
  • Send marketing communications (with consent)

3.4 Legal and Security

  • Comply with legal obligations and requests
  • Protect against fraud and security threats
  • Enforce our terms of service
  • Maintain system integrity and security

Research Data Usage

Your research data is used solely to provide our tools' functionality. We do not use your research content for training AI models or share it with third parties without explicit consent. All research queries and results remain private to your account.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following limited circumstances:

4.1 Service Providers

  • Cloud Hosting: Secure data storage and processing
  • Analytics Services: Website analytics and performance monitoring
  • Communication Tools: Email delivery and customer support
  • Security Services: Fraud prevention and system security

4.2 Academic Partners

  • Institutional Verification: Confirming academic affiliations
  • Research Collaboration: Facilitating academic partnerships
  • Data Providers: Crossref and other academic databases

4.3 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal processes and government requests
  • Protect our rights, property, or safety
  • Protect users' rights, property, or safety
  • Investigate potential violations of our terms

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction, subject to the same privacy protections.

5. Data Security

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

  • Encryption: TLS/SSL encryption for data in transit
  • Database Security: Encrypted storage and access controls
  • Authentication: Secure user authentication and session management
  • Monitoring: 24/7 security monitoring and threat detection

5.2 Administrative Safeguards

  • Access Controls: Role-based access to personal data
  • Staff Training: Regular privacy and security training
  • Data Governance: Formal data handling procedures
  • Incident Response: Established breach notification procedures

5.3 Physical Safeguards

  • Secure Facilities: Data centers with physical security controls
  • Equipment Security: Secure disposal of hardware and media
  • Environmental Controls: Climate and fire protection systems

Security Commitment

While we implement industry-standard security measures, no system is 100% secure. We continuously monitor and update our security practices to protect your information against evolving threats.

6. Cookies and Tracking Technologies

Cookie Notice

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie preferences through your browser settings.

6.1 Types of Cookies We Use

Essential Cookies

  • Authentication: Maintain user login sessions
  • Security: Prevent cross-site request forgery
  • Functionality: Remember user preferences and settings

Analytics Cookies

  • Google Analytics: Understand user behavior and improve services
  • Performance Monitoring: Track site performance and errors
  • Usage Statistics: Aggregate data on feature usage

Advertising Cookies

  • Google AdSense: Display relevant advertisements
  • Personalization: Customize ad content based on interests
  • Frequency Capping: Limit ad display frequency

6.2 Cookie Management

You can control cookies through:

  • Browser Settings: Disable or delete cookies
  • Opt-out Tools: Industry opt-out mechanisms
  • Ad Preferences: Google Ad Settings
  • Do Not Track: Browser DNT signal support

7. Advertising and Analytics

7.1 Google AdSense

We use Google AdSense to display advertisements on our website. Google may use cookies to serve ads based on your prior visits to our site or other sites. You can opt out of personalized advertising by visiting Google's Ad Settings.

7.2 Google Analytics

We use Google Analytics to analyze website usage and improve our services. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site.

7.3 Your Advertising Choices

Advertising Transparency

Advertisements help support our free research tools. We only work with reputable advertising partners and never compromise user privacy for advertising revenue. All ads are clearly labeled and distinguished from our content.

8. Your Rights and Choices

You have several rights regarding your personal information:

8.1 Access and Portability

  • Right to Access: Request a copy of your personal data
  • Data Portability: Receive your data in a structured format
  • Account Dashboard: View and manage your information online

8.2 Correction and Updates

  • Right to Rectification: Correct inaccurate or incomplete data
  • Profile Updates: Modify your academic profile information
  • Preference Changes: Update communication and privacy preferences

8.3 Deletion and Restriction

  • Right to Erasure: Request deletion of your personal data
  • Account Deletion: Permanently delete your account and associated data
  • Processing Restriction: Limit how we process your information

8.4 Objection and Withdrawal

  • Right to Object: Object to processing based on legitimate interests
  • Consent Withdrawal: Withdraw consent for marketing communications
  • Opt-out Options: Unsubscribe from emails and notifications

Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within 30 days (or as required by applicable law).

9. GDPR Compliance

GDPR Compliance Statement

We are committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of EU residents. This section outlines our specific GDPR compliance measures.

9.1 Legal Bases for Processing

  • Contract Performance: Processing necessary for service provision
  • Legitimate Interest: Improving services and preventing fraud
  • Consent: Marketing communications and optional features
  • Legal Obligation: Compliance with applicable laws

9.2 Data Subject Rights

Under GDPR, EU residents have the right to:

  • Be informed about data processing (this Privacy Policy)
  • Access their personal data
  • Rectify inaccurate data
  • Erase personal data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Rights related to automated decision-making

9.3 Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee GDPR compliance:

DPO: privacy@scilink.me
Phone: +31 (0) 20 123 4567

9.4 International Transfers

When we transfer personal data outside the EU, we ensure adequate protection through:

  • Adequacy Decisions: Transfers to countries with adequate protection
  • Standard Contractual Clauses: EU-approved data transfer agreements
  • Binding Corporate Rules: Internal privacy standards for group companies
  • Certification Schemes: Industry-recognized privacy certifications

10. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

10.1 Account Data

  • Active Accounts: Retained while account remains active
  • Inactive Accounts: Deleted after 3 years of inactivity
  • Deleted Accounts: Data permanently deleted within 30 days

10.2 Usage Data

  • Analytics Data: Aggregated data retained for 26 months
  • Log Files: Technical logs retained for 12 months
  • Security Logs: Security-related logs retained for 24 months

10.3 Communication Data

  • Support Tickets: Retained for 3 years after resolution
  • Marketing Communications: Until unsubscribe or consent withdrawal
  • Legal Communications: Retained as required by law

10.4 Research Data

  • References and Citations: Retained while account is active + 1 year
  • Search History: 18 months or until deletion requested
  • Profile Information: Retained while account is active

Automated Deletion

We have implemented automated systems to ensure data is deleted according to our retention schedules. You can also request immediate deletion of your data at any time.

11. International Data Transfers

SciLink.me operates globally and may transfer personal data across international borders to provide our services effectively.

11.1 Transfer Locations

We may transfer personal data to:

  • European Union: Primary data processing location
  • United States: Cloud services and analytics providers
  • Other Countries: As necessary for service provision

11.2 Transfer Safeguards

All international transfers are protected by appropriate safeguards:

  • EU Standard Contractual Clauses: Legal framework for transfers
  • Privacy Shield Successors: Framework replacements and adequacy decisions
  • Processor Agreements: Contractual privacy obligations
  • Technical Measures: Encryption and access controls

11.3 Your Rights Regarding Transfers

You have the right to:

  • Be informed about international transfers
  • Object to transfers in certain circumstances
  • Request information about safeguards in place
  • Lodge complaints with supervisory authorities

12. Children's Privacy

SciLink.me is designed for use by researchers, academics, and professionals. We do not knowingly collect personal information from children under 13 (or under 16 in the EU).

12.1 Age Restrictions

  • Minimum Age: Users must be at least 13 years old (16 in EU)
  • Academic Focus: Services designed for university-level research
  • Verification: We may verify age through institutional affiliation

12.2 Parental Rights

If we become aware that we have collected information from a child:

  • We will delete the information immediately
  • We will not use the information for any purpose
  • Parents may contact us to request deletion
  • We will implement additional safeguards if necessary

12.3 Educational Institutions

For educational institutions with student users:

  • Institutional Consent: Schools may provide consent for students
  • FERPA Compliance: We comply with educational privacy laws
  • Limited Collection: Minimal data collection for educational purposes

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

13.1 Notification of Changes

  • Website Notice: Updates posted on our website
  • Email Notification: Significant changes communicated via email
  • Version Control: Previous versions available upon request
  • Effective Date: Changes effective from the date specified

13.2 Types of Changes

  • Minor Updates: Clarifications and technical corrections
  • Material Changes: Significant policy modifications with notice
  • Legal Updates: Changes required by law or regulation
  • Service Changes: New features or service modifications

13.3 Your Options

When we make changes:

  • Review Period: 30 days to review significant changes
  • Continued Use: Acceptance through continued service use
  • Objection Rights: Right to object to material changes
  • Account Deletion: Option to delete account if you disagree

Stay Informed

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information. You can also subscribe to our privacy updates to receive notifications of important changes.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SciLink.me Privacy Team

Email: privacy@scilink.me
Phone: +31 (0) 20 123 4567
Address: Science Park 123, 1098 XG Amsterdam, Netherlands
Response Time: Within 72 hours

14.1 Data Protection Officer

DPO Email: dpo@scilink.me
GDPR Compliance Inquiries

14.2 Supervisory Authorities

If you are located in the EU and have concerns about our data practices, you may contact your local supervisory authority or the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (AP)
Website: autoriteitpersoonsgegevens.nl

14.3 Response Commitments

  • Initial Response: Within 72 hours of receiving your inquiry
  • Data Subject Requests: Completed within 30 days (extendable to 90 days for complex requests)
  • Complaint Resolution: Fair and timely investigation of all concerns
  • Regular Updates: Progress updates for complex inquiries

Our Commitment to You

We are committed to addressing your privacy concerns promptly and transparently. Your trust is essential to our mission of supporting the global research community, and we take our privacy responsibilities seriously.

Important Notice

This Privacy Policy is effective as of July 30, 2025. By using SciLink.me services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service.

Document Version: 2.1 | Language: English (authoritative version)