Privacy Policy

This policy applies to PraxiHub’s public website, forms, administrator authentication, editorial operations, and supporting technical infrastructure.

Newsletter records may include an email address, optional first name, consent timestamp, source, subscription status, and operational timestamps. This information is used to administer subscriptions. A subscriber may withdraw at any time by emailing the privacy contact below until a self-service unsubscribe mechanism is available.

Contact records may include name, email address, selected subject, message, status, internal handling notes, and timestamps. They are used to review and respond to inquiries, correction requests, privacy requests, content-removal requests, and platform issues.

Research Submission records may include corresponding-author name and email, optional affiliation and ORCID, manuscript title, abstract and public URL, selected Topics, optional co-author text, funding and conflict disclosures, confirmations, review status, internal notes, and timestamps. They are used for editorial screening, communication, provenance, and possible publication workflows.

Administrator operations use Supabase authentication. Required authentication and session data may be processed to sign in, refresh a session, reset a password, sign out, and prevent unauthorized access. Security and audit records may include administrator identity, action, time, target record, outcome, and minimized operational metadata. Passwords and session tokens are not stored in PraxiHub content records.

Public account records use Supabase authentication and may include an email address, authentication and session data, full name, country or region code, current professional role, primary research interest, and optional organization or university, LinkedIn profile URL, and ORCID iD. Profile information is private to the account holder and authorized service operations; it is used to provide the account, understand PraxiHub's research audience, protect the service, and respond to account or privacy requests. Passwords are handled by the authentication provider and are not stored in PraxiHub content records.

Authenticated users may optionally submit private Research Community applications. Records include the account identifier, research interests, motivation, preferred contact method and contact value, submission and review timestamps, and a review status. Authorized administrators use this information to assess an expression of interest. A CV is not uploaded to or stored by the application workflow; applicants who choose to share one send it separately by email to the contact address below.

Pending, under-review, verified, and not-approved statuses are private. Verification records an application review outcome only and does not create authorship, contributor, publication, editorial, administrator, employment, or professional rights.

PraxiHub records a limited set of first-party events to understand site traffic, the Research access funnel, and the Research Community application funnel. Events may include the event type, time, a restricted canonical path, random first-party visitor and session identifiers, and a canonical Research or Topic identifier where relevant. A session ends after thirty minutes of inactivity. When a user is authenticated, the server discards the anonymous visitor identifier and may associate an internal account identifier with an event so aggregate authenticated use can be measured without joining earlier anonymous activity to the account.

The random visitor and session identifiers are stored in the browser's local storage, not an analytics cookie. Clearing site storage resets anonymous uniqueness. These records do not contain exact IP addresses, browser user-agent strings, referrers, fingerprints, device identifiers, precise geolocation, query strings, profile-field copies, passwords, authentication tokens, Research bodies, CVs, private application text, or administrator notes. PraxiHub does not use third-party advertising pixels, session replay, or cross-site tracking for this workflow.

Product analytics are available only to authorized administrators, are kept separate from security and editorial audit records, and are reported in aggregate. Groups containing fewer than three authenticated users are not shown individually. The initial retention period is thirteen months, after which events are deleted unless a shorter period is adopted or limited preservation is required for a documented operational or legal reason.

User information may be processed through service providers required to operate PraxiHub, including hosting, database, authentication, security, delivery, and email infrastructure. Those providers may process ordinary request and security data such as IP address, request time, requested path, browser or device information, and error signals under their own terms and configurations.

Information is used to operate the requested workflow, protect the service, maintain editorial and audit records, respond to requests, investigate failures or abuse, and comply with applicable obligations. PraxiHub does not store honeypot values in operational form records.

Records are retained for as long as reasonably necessary for the relevant subscription, correspondence, editorial, security, archival, or compliance purpose. Retention may also depend on infrastructure-provider settings, backup cycles, dispute preservation, and applicable requirements. Data is deleted, anonymized, or restricted when it is no longer reasonably required and doing so is technically and legally appropriate.

Users may request access to, correction of, or deletion of their submitted personal information, or withdrawal from the Newsletter, by emailing praxifi.official@gmail.com. PraxiHub may request reasonable verification and may retain limited information where required for security, legal compliance, dispute handling, or publication integrity.

PraxiHub uses access controls, server-side authorization, validation, restricted client boundaries, encrypted provider connections, and minimized audit records. No system can guarantee absolute security.

PraxiHub is a general research and educational service and is not designed to solicit personal information from children. A parent or guardian may contact PraxiHub about information they believe was submitted by a child.

This policy may be updated as platform functionality, infrastructure, or applicable requirements change. Material changes will be published on this page.

Privacy, access, correction, deletion, and Newsletter withdrawal requests may be sent to praxifi.official@gmail.com.