Privacy Policy
1. Introduction
MDOI Foundation ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the MDOI Registry platform ("Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.
2. Information We Collect
We collect the following categories of information:
- Account information: name, email address, organisation name, account type, and profile details you provide during registration or in your account settings.
- Billing information: subscription tier, payment amounts, transaction references, and invoices. We do not store raw card numbers — payment processing is handled by Paystack.
- Registry data: identifiers, metadata, titles, abstracts, authors, resource URLs, and other information you register via the Service.
- Usage data: pages visited, actions taken, timestamps, IP address, browser type, and device information collected automatically when you use the Service.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service
- Process payments and manage your subscription
- Generate and deliver invoices
- Communicate with you about your account, service updates, and support requests
- Monitor and analyse usage to improve the Service
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal data on the following legal bases: (a) performance of a contract — to provide the Service you have subscribed to; (b) legitimate interests — to improve the Service and prevent fraud; (c) legal obligation — to comply with applicable laws; and (d) consent — where you have explicitly given consent for a specific purpose.
5. Sharing of Information
We do not sell your personal data. We may share your information with:
- Service providers: Supabase (database and authentication infrastructure), Paystack (payment processing), and other trusted third-party providers necessary to operate the Service — all subject to appropriate data-processing agreements.
- Legal authorities: where required by law, court order, or governmental regulation.
- Business transfers: in connection with a merger, acquisition, or sale of assets, provided the acquiring entity agrees to honour this Privacy Policy.
6. Data Retention
We retain your account and billing data for as long as your account is active and for a minimum of five years thereafter to comply with financial and legal obligations. Registry data (identifiers and metadata) may be retained indefinitely to preserve the integrity of the identifier resolution infrastructure. You may request deletion of your account data by contacting us.
7. Your Rights
Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing; and receive a portable copy of your data. To exercise any of these rights, please contact us at privacy@mdoi.org.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. Cookies
The Service uses session cookies necessary for authentication and functionality. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but doing so may affect your ability to use certain features of the Service.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the dashboard. The date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@mdoi.org or write to us at MDOI Foundation, Accra, Ghana.