Privacy Policy

Who is responsible

Citeveriq Research Metrics, India decides how personal data on Citeveriq is used (the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). For questions or requests write to info@citeveriq.com.

Personal data we collect

Account details: your email address, name, organisation, role, and optionally phone number and country.
Sign-in data: one-time codes (stored only in scrambled form), sign-in times, IP address and browser type, kept for security.
If you use Google sign-in: your Google account’s email, name and a Google account identifier. We do not receive your Google password.
Journal details you submit, including names of editors and editorial board members published on the journal’s own website.
Orders: the service bought, price, coupon and payment status. Card, UPI and bank details are handled by the payment provider, not by us.
Messages: reports, appeals and emails you send us.
Editorial contact emails published on a journal’s website, used for the invitation emails described in the communications policy.

Why we use it

To create and secure your account and sign you in.
To list and evaluate journals and to publish results and certificates.
To process payments, send receipts and keep accounting records.
To answer questions, reports, appeals and grievances.
To send service emails you need, such as sign-in codes, status updates and receipts.
To invite editors of journals in our directory to claim their free listing, with an unsubscribe link in every message.
To prevent fraud and abuse and to meet legal obligations.

We use your data on the basis of your consent (which you give by creating an account or submitting information), to perform the service you asked for, or for legitimate uses permitted by law. We do not sell personal data and we do not use it for advertising.

Automated processing and AI

When you enter a journal website address, an AI service (Claude, provided by Anthropic) reads the public pages of that website to suggest journal details. Evaluations may also be drafted with AI assistance. Every result is reviewed by a person before it is published, and no decision about you is made by automated means alone. Data sent to the AI provider is limited to the journal’s public website content and is processed under that provider’s commercial terms.

Service providers who help us run Citeveriq: hosting, email delivery, website security (Cloudflare), the payment provider, Google (only if you use Google sign-in) and the AI provider. They may process data only on our instructions.
The public: journal details, evaluation results, certificates and awards are published by design. Your personal account details are not published.
Authorities, where the law requires it.

Some providers store data outside India. Where they do, we rely on transfers permitted under Indian law and choose providers with appropriate safeguards.

How long we keep it

Account details: while your account is open, then deleted within 90 days of closure, unless needed for the purposes below.
Sign-in and security logs: at least one year, as required by Indian data protection rules.
Orders, invoices and payment records: for as long as tax and accounting laws require.
Evaluation records and certificates: kept for as long as the certificate can be verified, so that verification stays reliable. These records concern journals, not your personal life.
Unsubscribe list: indefinitely, so that we never email you again.

Where the law requires it, we will notify you at least 48 hours before deleting data for inactivity.

Your rights

You can ask to access a summary of your personal data, correct or update it, erase it, withdraw consent, and nominate someone to exercise your rights if you die or become incapacitated. Write to info@citeveriq.com. We answer within the time required by law and will tell you if a legal reason prevents us from deleting something. Withdrawing consent does not affect processing already done.

If you are not satisfied with our answer, you can complain to our grievance officer and, after that, to the Data Protection Board of India.

Security

We use encrypted connections, scrambled sign-in codes, access controls for staff, audit logs and regular backups. If a personal data breach affects you, we will tell you and the authorities as the law requires.

Children

Citeveriq is for researchers, editors and publishers. It is not meant for anyone under 18, and we do not knowingly collect their data.

Cookies

We use only the cookies needed to run and protect the website. See the cookie policy.

Changes

We will post any update here with a new date and, for material changes, tell account holders by email.