Policy
Privacy and data protection
ORI processes personal data in accordance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018). The controller is Oxton Education, which operates ORI.
Updated outubro 12, 2026 ·
Key points
- Only what is needed: bibliographic data as published, and account data to operate the registry.
- Author email addresses and visitor IP addresses are not stored.
- Each kind of data has a purpose and a retention period.
- You can exercise your LGPD rights through the Contact page.
What we keep and why
| Data | Purpose and retention |
|---|---|
| Author names, ORCID iDs and affiliations | Recorded as published by the journal, for the bibliographic identification of publications. Kept with the record, which is permanent. Author email addresses are never stored. |
| Accounts of journal staff and the ORI team | Name, email and role, to operate the registry. Kept while the account exists. |
| Contact messages | Name, email, optional organization, subject and the messages exchanged with the ORI team, to answer the conversation and keep the history of support. The sender address is kept only in pseudonymized form, to limit abuse. On request, a conversation can be anonymized. |
| Audit logs | Actions on records, with IP addresses only in pseudonymized form, for security and accountability. |
| Billing data of organizations | Legal name, tax identification (CNPJ or CPF), billing email and address of the paying organization, to issue receipts and invoices. Card data is handled only by the payment provider. |
| Usage counts | Views and downloads are counted as daily totals; a visitor is represented by a one-way hash that is erased after two days. IP addresses are not stored. |
| Email alerts | Only the email address, confirmed by the reader; erased when the alert is cancelled or if it is not confirmed within 7 days. |
| Integrity concerns | Name and email of the person who reports a concern, used only for that case and erased 12 months after it is closed. |
Visitors
- The portal fonts are hosted on this website, so no browsing data is sent to external font services.
- No advertising or third-party tracking is used.
- Cookies are used only to keep people signed in to the dashboard.
Your rights
You may ask for confirmation of processing, access, correction, anonymization or deletion of unnecessary data, and information about sharing, as provided by the LGPD. Bibliographic data published by journals is kept as part of the scholarly record; corrections are made through the journal.
Requests
Requests concerning personal data can be sent through the channels on the Contact page. We answer within the deadlines set by the LGPD.
Sharing
- Public bibliographic metadata is shared openly by design (record pages, exports, API, OAI-PMH).
- Other personal data is not sold or shared, except with providers that operate the service under contract (hosting, email delivery, payment processing) and when required by law.
- Some providers may process data outside Brazil, with the safeguards required by the LGPD.