Privacy Policy

This policy explains how Uandor, Inc. (“Uandor”) handles information in UANDOR SCOUT.

Information we collect

We collect account information such as name, business email, password hash, timezone, verification status, security settings, and legal acceptances. Workspace users may submit research opportunities, CVs or résumés, candidate contact information, relationship notes, proposed teams, and other content. We also collect security and operational data such as IP address, user agent, request identifier, audit events, login attempts, file metadata, billing identifiers, and service logs.

Public scholarly information

The service retrieves public scholarly metadata from OpenAlex, including researcher names, affiliations, identifiers, publications, citations, and topics. Public-source observations are kept separate from user-verified private relationship information and may not be current.

How we use information

We use information to provide and secure the service; verify identity; process subscriptions; perform research discovery and evidence scoring; store customer workspaces; communicate service, billing, and security notices; prevent abuse; troubleshoot errors; maintain audit history; fulfill support requests; and comply with law.

Legal bases and customer responsibility

Where applicable, processing is based on contract, legitimate interests in operating and securing the service, consent for optional communications, and legal obligations. Workspace customers determine which candidate and collaborator information they upload and are responsible for providing notices, obtaining permissions, and establishing a lawful basis for that processing.

Service providers and disclosures

We may share limited information with service providers that operate hosting, storage, databases, email, monitoring, identity, scholarly-data, and payment functions. Stripe receives payment and subscription information. We may disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction. We do not sell personal information for money.

Tenant separation and access

Workspace data is available only to authorized members according to role. Platform administrators may access data when necessary for security, support, legal obligations, or service operation. Customers should assign least-privilege roles and remove users who no longer require access.

Retention

Active workspace data is retained while the workspace is active and as needed to provide the service. Operational records are generally retained for up to 365 days unless a longer period is required for billing, legal, security, backup, dispute, or contractual purposes. Backup copies expire according to the backup lifecycle.

Account export and deletion

Authenticated users can download a personal-account export and request account deletion from Profile. Deletion is scheduled after a 7-day grace period, during which it may be canceled. A user who is the sole owner of a workspace must first transfer ownership. Completed deletion removes memberships and anonymizes account identifiers. Workspace-owned content remains with the workspace. Limited legal, billing, fraud-prevention, and tamper-evident audit records may be retained.

Security

Safeguards include encrypted transport, password hashing, optional or required MFA, tenant authorization, protected file delivery, audit logging, restricted secrets, malware scanning when configured, backups, and monitoring. No method of transmission or storage is completely secure.

International processing

Information may be processed in the United States and other locations where service providers operate. Customers are responsible for evaluating cross-border requirements applicable to their content.

Your choices and rights

You may update profile information, opt out of optional marketing, download personal-account data, request deletion, or contact us regarding access, correction, restriction, objection, or other rights available under applicable law. We may need to verify identity before fulfilling a request.

Children

The service is intended for business and research professionals and is not directed to children under 18.

Changes and contact

We may update this policy and identify material changes through a new version. Privacy requests may be sent to privacy@uandor.com. Support questions may be sent to support@uandor.com.