Privacy Policy
Last updated: 8 August 2026.
What we collect
- Account details you provide directly: name, email, password (stored as a salted hash, never in plain text).
- Application/response data you submit through a workshop's own application or expression-of-interest form -- this can include contact details, affiliation, and, depending on the form, free-text answers.
- Payment intent data (amount, currency, which processor) for donations, sponsorship pledges, registration fees, and marketplace transactions -- actual card/bank details are handled directly by the third-party processor, never stored here.
- Basic session data (a signed authentication cookie) needed to keep you signed in.
How we use it
To operate the features you use directly -- processing your application, running workshop notifications, issuing certificates, resolving marketplace matches, and recording payments. Some features (curated-event discovery, survey analysis, AI-written taglines) use AI models to process text you or an admin provides; see the relevant feature for details.
Your controls
From My Account, you can update your details, deactivate your account (reversible), or request that your personal account data be scrubbed (a Platform-Admin-reviewed request). Institutional records tied to your account -- certificates already issued, manuscript authorship credit, past applications -- are retained as part of an organization's own record-keeping even after a deletion request is approved.
Third parties
Payment processors (Stripe, Paystack, Flutterwave, OPay, M-Pesa) as needed for a transaction you initiate. We also use: Resend, to deliver transactional email (password resets, application notifications, organization-request decisions); Fly.io, to host the API; Vercel, to host this web app; and Neon, for the underlying database. None of these sub-processors receive your payment card/bank details directly -- those go straight to the payment processor you choose.
Contact
Questions or requests about your data? Reach us at support@example.com.