Privacy Policy

Who is responsible for your data

For your ReviewChair account (your profile, sign-in and security settings) we are the data controller. For a conference or event you take part in, the organization running it decides how your submissions, reviews and registration details are used; it is the controller for that data and we process it on its behalf and under its instructions.

What we collect

• Account details — your name, email address, title, institution, ORCID iD if you add it, and a password (stored only as a one-way hash).
• Google sign-in — if you choose "Continue with Google", Google shares your name, email address and profile picture with us. We request no other Google data and cannot access your Google account, email or files.
• Conference and event activity — papers, abstracts and files you submit, co-author details you enter, reviews and comments, editorial decisions, registrations, and your role in each conference.
• Payments — when you pay a registration fee, abstract fee or publication fee, the payment is processed by our payment provider, Bachs, on behalf of the organizing institution. We receive the payment reference, amount, status and receipt details. We never see or store your full card or bank details.
• Security and usage data — sign-in times, IP address, browser and device information, and records of important actions, used to keep accounts secure and to investigate problems.
• Messages — notifications and emails we send you, and any messages you send to support.

How we use it

• To create and secure your account, sign you in, and offer two-step verification.
• To run the conference workflows you take part in: submission, review assignment, decisions, registration and publication.
• To process payments and issue receipts and invoices.
• To send notifications you need — for example a submission receipt, review invitation or decision — by email and in the app.
• To prevent fraud and abuse, keep the service reliable, and meet legal obligations.

We do not sell personal data, and we do not use it for advertising. We do not use third-party analytics or advertising trackers.

Information from Google

ReviewChair's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email address and picture only to create and sign you in to your ReviewChair account.

Who can see your data

• Conference organizers and committees see what their workflow needs — for example editors see submissions, and organizers see registrations. In double-blind review, reviewers do not see author identities and authors do not see reviewer identities.
• Service providers that host and operate the platform for us — cloud hosting and file storage, email delivery, and Bachs for payments — under contracts that limit their use of the data.
• Public visitors see only what an organizer publishes, such as a call for papers, a programme, or accepted papers in proceedings.
• Authorities, where the law requires it.

Cookies and local storage

We use one essential cookie to keep you signed in, and short-lived cookies during sign-in and two-step verification. Your browser stores your light or dark theme preference. We do not use advertising or tracking cookies.

Security and retention

Data is encrypted in transit; manuscripts are kept in private storage and are only available to people with access to the submission. Passwords are hashed and sessions can be revoked. We keep account data while your account is active, and conference records for as long as the organizing institution needs them for its academic, financial and legal records. Payment records are kept as tax and accounting law requires.

Your rights

Under the Nigeria Data Protection Act 2023 and similar laws where you live, you can ask to access, correct, export or delete your personal data, object to or restrict some processing, and withdraw consent. For data held in a conference, we will pass your request to the organizing institution or help it respond. You can also complain to the Nigeria Data Protection Commission or your local regulator.

International transfers

Our service providers may store or process data outside your country. Where they do, we use safeguards required by applicable law.

Children

ReviewChair is for academic and professional use and is not intended for anyone under 16.

Changes and contact

We will update this page when our practices change and tell account holders about significant changes. Questions or requests: support@reviewchair.com. See also our Terms of Service.