1. Who we are
Atopos (a-topos.org) is operated by Ana Belen Gonzalez Perez, Sole Proprietor, BIN 1001624655, registered in Ontario, Canada.
Data controller contact: help@a-topos.org
2. What data we collect
Readers
No account is required to read papers. Server access logs (IP, timestamp, user agent) are retained for security purposes for 30 days, then deleted.
Submitters
For authors submitting work, we collect:
- Email address (for submission correspondence)
- Legal name (held confidentially; not published without consent)
- Authorship declaration (type, display preference, AI stewardship)
- Submitted PDF and its metadata
Registered accounts (v1+)
When account registration launches in v1, this section will be updated to cover account data, login records, and payment data. Payment data is processed by Stripe and not stored on Atopos servers.
3. Anonymous authorship
Authors who choose anonymous display have their legal identity held in the Atopos database. This identity is not published, not sold, and not disclosed voluntarily to any third party.
Anonymous identity is disclosed only in response to a court order from a jurisdiction with legal authority over Atopos operations (Ontario, Canada).
4. Legal basis and governing law
Atopos operates under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada. We collect personal information only for purposes that a reasonable person would consider appropriate given the circumstances.
5. Data retention
- Server access logs: 30 days
- Submission records (including rejected submissions): indefinitely, as part of the permanent record
- Author identity records: indefinitely, held confidentially
6. Your rights
Under PIPEDA, you may request access to personal information we hold about you, and request correction of inaccurate information. Contact: help@a-topos.org
Note: Atopos cannot remove authorship records for papers that have been archived, as the archive is intended to be permanent. You may request that your display name be changed to anonymous; your legal identity in the database is unchanged.
7. Cookies and tracking
Atopos does not use advertising or tracking cookies. WordPress may set a session cookie for logged-in users. No third-party analytics scripts are loaded on reader-facing pages.
8. Third parties
- IONOS (hosting provider, Newark NJ, US): server infrastructure
- Stripe (payment processing, v1+): payment data is processed under Stripe's own privacy policy and never stored on Atopos servers
- SendGrid (transactional email, v1+): email delivery
- Zenodo (preservation archive): paper PDFs deposited for long-term preservation
9. Changes to this policy
Changes are logged on the Transparency page with the date of change. Continued use of Atopos after a policy update constitutes acceptance.