Privacy policy

1. Information We Collect

Account Information

When you sign in to Entablature using Google, we may receive and store information necessary to create and manage your account, including:

• Name
• Email address
• Google account identifier
• Profile picture or avatar

Entablature uses Google OAuth for authentication and does not require users to create or store a separate password for the Service.

We may also store information related to your account's role and status, such as whether the account is active or suspended.

Research Information

When you create or submit Research, we collect and store information necessary to provide the research publishing workflow, including:

• Research title
• Research body
• Author information
• Research status
• Creation and update timestamps
• Submission timestamp
• Publication timestamp
• Rejection reason, where provided
• PDF attachments
• Embedded graph configurations

Blog Information

When you create or submit a Blog, we may collect and store the information necessary to create, manage, review, and publish the Blog. This may include:

• Blog title
• Blog content
• Author information
• Publication information
• Views or other essential publication counts where provided by the Service
• Information required to manage the Blog within the publishing system

Blogs are intended to remain lighter-weight than Research and are subject to a maximum length of 3,000 words.

Editorial and Review Information

For Research that enters editorial review, we may store information relating to the review process, including:

• Research identifier
• Editor identifier
• Editorial decision
• Review reason, where provided
• Date and time of the decision

This information is used to operate and maintain the editorial process.

Audit Information

Entablature maintains audit records for important actions performed within the Service. Audit records may include:

• The user who performed an action
• The action performed
• The type of affected resource
• The affected resource identifier
• Relevant metadata
• Date and time

Examples of actions that may be recorded include:

• User sign-in
• Role changes
• Account suspension or reactivation
• Research creation and editing
• Research submission
• Research approval
• Research rejection
• Research publication
• Research attachment changes
• Research graph changes

Usage Data and Cookies

We may collect standard technical and usage information when you use the Service. This may include:

• IP address
• Browser type
• Device information
• Pages or areas visited
• Basic usage information
• Information relating to authentication and sessions

We may use cookies or similar technologies where necessary to provide authentication, maintain secure sessions, operate the Service, understand basic usage, and improve the user experience.

2. How We Use Your Information

We use information we collect to:

• Create and manage your account.
• Authenticate you through Google.
• Provide access according to your role.
• Allow Researchers to create and manage Research.
• Allow eligible users to create and manage Blogs.
• Store and process submitted content.
• Facilitate editorial review.
• Publish approved content.
• Display published Research and Blogs.
• Provide public search and discovery functionality.
• Maintain research and publication records.
• Maintain audit records.
• Secure the Service.
• Detect and prevent unauthorized access or misuse.
• Validate uploaded files and structured graph data.
• Provide support and respond to requests.
• Maintain and improve the Service.
• Comply with applicable legal obligations.

We do not sell your personal information.

3. Google Authentication

Entablature uses Google OAuth as its authentication method.

When you sign in with Google, Google may provide information necessary to authenticate you and establish your account on Entablature.

We use the information received through Google for account authentication and management and other purposes described in this Privacy Policy.

Your use of Google services is also governed by Google's own terms and privacy policies.

You may manage permissions granted to applications through your Google account settings.

4. Publicly Available Content

Research and Blogs that are published on Entablature are intended to be publicly accessible. Published content may include:

• Title
• Author name
• Publication date
• Content
• Other publication metadata displayed by the Service

Published content may be discoverable through The Entablature's public search and other public discovery mechanisms.

Published Research may also be included in the public sitemap.

Draft, Pending Review, and Rejected Research is not intended to be publicly indexed or included in the public sitemap.

5. Who We Share Information With

We may share information where necessary to operate, secure, maintain, or provide the Service. This may include:

Authentication providers

• Google, as necessary to provide Google OAuth authentication.

Infrastructure and service providers

We may use third-party providers for services such as:

• Hosting
• Database infrastructure
• File and object storage
• Security
• Content delivery
• Email or transactional communications
• Application monitoring
• Other infrastructure required to operate the Service

These providers may process information on our behalf and are expected to use it only as necessary to provide their services to us.

Legal and safety requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law.
• Respond to lawful requests from authorities.
• Protect the rights, safety, and property of The Entablature, our users, or others.
• Investigate fraud, abuse, security incidents, or violations of our Terms.

6. We Do Not Sell Your Personal Information

We do not sell your personal information.

We do not share your personal information with third parties for their independent marketing purposes.

7. Data Retention

Account information

We retain account information while your account is active or for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, and resolve disputes.

Research and Blog content

Research and Blog content may be retained for as long as necessary to provide the publishing Service, maintain publication records, operate the editorial process, or comply with applicable obligations.

Review and audit records

Editorial review records and audit logs may be retained as necessary to maintain the integrity, security, accountability, and history of the Service.

Deletion

When information is no longer required for legitimate operational or legal purposes, we may delete or anonymize it.

8. Your Controls and Rights

Depending on the functionality available to you and applicable law, you may be able to:

• Access your account information.
• Correct inaccurate account information.
• Manage your Research.
• Edit Research while it is in an editable state.
• Delete eligible draft Research.
• Submit Research for review.
• Resubmit rejected Research where permitted.
• Manage your published or unpublished content where the Service provides those controls.
• Manage your Google account permissions.

You may also contact us to request access to, correction of, export of, or deletion of personal information.

Requests should be sent to:[email protected]

9. Role-Based Access

Entablature uses role-based access control to limit access to information and functionality. The Service has four roles:

• Public User
• Researcher
• Editor
• Admin

Researchers may access their own private Research according to the Service's permissions.

Editors may access Research submitted for editorial review and perform editorial actions according to their permissions.

Administrators may manage users, roles, Research, and administrative functions.

Access to protected information and actions is enforced server-side.

10. Research Attachments and Graphs

Research may contain PDF attachments and structured graph data.

PDF attachments are subject to the Service's technical requirements, including a maximum file size of 1 MB per file.

Uploaded files may be validated and inspected for security purposes.

Graph data may be validated according to its required structure.

We store these materials as necessary to provide the Research publishing and reading experience.

11. Security

We use commercially reasonable technical and organizational safeguards designed to protect information processed through Entablature.

Security measures include, where applicable:

• Google OAuth authentication.
• Secure session handling.
• Server-side role-based access control.
• Server-side input validation.
• XSS-safe rendering of Research content.
• CSRF protection where applicable.
• Rate limiting for authentication and sensitive actions.
• Audit logging for critical actions.
• Server-side validation of uploaded files.
• Validation of graph data.

No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Entablature is not intended for children, and we do not knowingly collect personal information from children.

If you believe that a child has provided personal information to us, please contact us at:[email protected]

13. Third-Party Services

Entablature may rely on third-party services necessary to operate parts of the Service, including authentication, hosting, infrastructure, storage, security, and other technical services.

Those providers may process information according to their own privacy policies and applicable agreements with Entablature.

Where a third-party service is used to authenticate your account or provide another feature, your use of that third-party service may also be governed by its own terms and privacy policies.

14. International Data Processing

Depending on where Entablature and its service providers operate, your information may be processed or stored in countries other than the country in which you live.

Where required by applicable law, we will use appropriate safeguards for such transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When material changes are made, we may communicate them through the Service or other appropriate means.

The "Last Updated" date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

16. Contact

For privacy questions, data requests, concerns, or other inquiries regarding this Privacy Policy, please contact:[email protected]