Privacy Policy — International Journal of Medical Research

This Privacy Policy explains what personal data the International Journal of Medical Research (“IJOMR”, “we”) collects through ijomr.com, why we collect it, who we share it with, and what choices you have. By using the site you accept this policy. It should be read with our Terms of Service.

1. Data we collect

Account data: your name, email address, institution, and a password that we store only as a secure hash. If you sign in with Google, we receive your name and email address from Google. We never see your Google password.
Submission data: manuscript files, title, abstract, article type, word count, co-author names, cover letter, and any other detail you enter.
Payment data: the amount, currency, date and payment reference. Your card or bank details go straight to Razorpay and are not seen or stored by us.
Messages: emails and messages you send us, and the notes the editors keep about your manuscript.
Technical data: a login cookie that keeps you signed in, and security logs such as sign-in time and IP address, used to protect accounts and stop abuse.

We do not use advertising or tracking cookies.

2. Why we use your data

To create and run your account, and to sign you in.
To screen manuscripts, run peer review, publish articles and issue letters and certificates.
To take payments and keep accounting records.
To send you emails about your account, your submission and your payments. These are service emails, not advertising.
To keep the site secure, prevent fraud and misuse, and fix problems.
To meet legal duties and to defend our rights.

We use your data because you asked for these services, because the journal needs it to operate, because the law requires it, or because you gave your consent.

3. What becomes public

When an article is published, its title, author names, abstract, keywords, DOI and PDF are public, and are sent to indexing services and to Zenodo. This is how scholarly publishing works and a published article cannot be made private again. Your email address, your manuscript while under review, your payment details and the editors' notes are not made public.

4. Who we share data with

We do not sell your personal data. We share it only with:

Service providers that work for us: Cloudflare (hosting, storage and database), Brevo (email), Razorpay (payments), Google (optional sign-in), and Zenodo (DOIs for published articles). They may only use the data to provide their service.
Editors and reviewers who need the manuscript to assess it. Reviewers are bound to keep it confidential.
Automated tools. Editors may use automated tools to help read manuscript text and fill in article details. An editor reviews the result before anything is published.
Authorities, where the law requires, or to protect our rights, other users or the public.

5. Transfers to other countries

Our providers run servers in several countries, so your data may be processed outside the country where you live. We use providers that apply appropriate safeguards.

6. How long we keep data

Account data: while your account is open, and for a reasonable time afterwards.
Submission and payment records: as long as needed for the journal's records, accounting and legal duties.
Published articles and their author details: permanently, as part of the scholarly record.
Security logs: for a limited period.

7. Security

We protect data with measures such as encrypted connections (HTTPS), hashed passwords, access controls on the admin area, and limits on login attempts. No system is perfectly secure, so we cannot promise absolute security. If a breach that affects you occurs, we will tell you and the authorities as the law requires.

8. Your rights

Depending on where you live, and under laws such as India's Digital Personal Data Protection Act, 2023, and the GDPR where it applies, you may have the right to: see the data we hold about you; correct it; ask us to delete it; withdraw consent; object to or restrict some uses; and complain to a data protection authority. To use a right, write to [email protected] from the email address on your account. We may need to confirm who you are first. We may keep records that we must keep by law, and we cannot remove a published article.

9. Children

The site is for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us data, write to us and we will delete it.

10. Changes and contact

We may update this policy, and the date at the top shows the latest version. For questions or complaints about your data, write to [email protected].