Privacy Policy
Last updated: 19 October 2026
This policy explains what personal data SympoDesk (operated by Judong Lee) handles, why, and your choices.
1. What we collect
Account: name, email address, affiliation and a password (stored only as a one-way hash).
Conference work: submissions (title, abstract, keywords, author names, emails and affiliations, manuscript files), reviews and scores, decisions, reviewer interests, invitations and the program.
Technical: a sign-in cookie, a language cookie, and server logs (IP address, time, page) kept for a short time for security and troubleshooting. We do not use advertising or tracking cookies.
2. Why we use it
To run the service you or your conference asked for: accounts, submission and review, notifications, reference screening, program and exports; and to keep the service secure.
3. Who can see what
Chairs of a conference see its submissions, reviews and committee. Reviewers see the papers assigned to them, without author names. Authors see their own submissions and the comments meant for them, without reviewer names.
Manuscripts are kept in private storage and opened only through links that expire after one minute.
4. Service providers
Hosting: Vercel (application) and Supabase (database and file storage), in the United States.
Email: an email delivery provider sends notifications on the conference's behalf.
Reference screening sends the text of individual references (not the manuscript) to public scholarly databases: Crossref, OpenAlex, Semantic Scholar, PubMed, arXiv, Open Library and Google Books.
We do not sell personal data.
5. Retention
Conference data is kept while the conference is active and for as long as its chairs need it, then deleted on request. Account data is kept until you ask for deletion. Backups are overwritten within 30 days.
6. Your rights
You can ask to see, correct, export or delete your personal data, and object to its use. Requests about a conference's records may be passed to its chairs, who decide on their conference's content. Residents of the EU/UK (GDPR) and Korea (PIPA) have these rights by law.
7. International transfer
Data is stored in the United States. By using the service from other countries you understand that your data is processed there.
8. Children
The service is not intended for anyone under 16.
9. Changes and contact
We will post changes to this policy here. Contact: imjudonglee@gmail.com