Privacy policy.

1. Who we are

Neuravox Foundation is an independent public interest research organization based in Kampala, Uganda. We work on AI governance, policy research, and community innovation across Africa and the Global South. This policy explains what personal data we collect through our website (neuravox.org) and our journal (journal.neuravox.org), how we use it, and the rights you hold over it.

We process personal data in accordance with Uganda's Data Protection and Privacy Act (2019) and with internationally recognised data protection principles, including lawfulness, purpose limitation, data minimisation, and accountability.

2. What we collect

We collect only what we need to run our website and respond to you. This includes:

• Contact form submissions: your name, email address, and the content of your message, submitted through our contact form.
• Basic analytics: aggregated, privacy respecting usage data such as page views, referring pages, approximate region, and device type. We do not build individual profiles of visitors.
• Correspondence: emails you send to us directly, including any information you choose to include.

We do not collect sensitive personal data through this website, and we ask that you do not include it in messages to us.

3. How we use your data

We use the data described above to respond to enquiries, to administer partnerships and research collaborations you initiate with us, to understand how our publications are read, and to maintain the security and reliability of our services. We do not use your data for advertising, and we do not make automated decisions about you.

4. What we never do

We do not sell personal data. We do not rent, trade, or share personal data with third parties for their own marketing purposes. We do not track you across other websites.

5. Third party services

A small number of service providers process data on our behalf:

• Formspree processes contact form submissions and delivers them to our inbox. Submissions are subject to Formspree's own privacy policy.
• Our hosting and content delivery providers process standard technical logs, such as IP addresses and request metadata, needed to serve the website securely.

We choose providers that apply appropriate technical and organisational safeguards, and we share only what each service needs to perform its function.

6. Retention

We keep contact form submissions and correspondence for as long as needed to handle your enquiry and any follow up, and in any case no longer than two years after our last exchange, unless a longer period is required for an active collaboration or by law. Aggregated analytics contain no personal identifiers and may be retained for longer term trend analysis.

7. Your rights

Under Uganda's Data Protection and Privacy Act (2019), and consistent with data protection principles applied in many other jurisdictions, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where we no longer have a lawful basis to keep it.
• Object to or restrict processing of your data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Personal Data Protection Office of Uganda.

To exercise any of these rights, write to us at contact@neuravox.org. We respond to verified requests within thirty days.

8. Security

We apply proportionate technical and organisational measures to protect the data we hold, including encrypted connections, access controls, and minimal internal access. No system is perfectly secure, and we will notify affected individuals and the relevant authority of any breach as required by law.

9. Changes to this policy

We may update this policy as our services or legal obligations change. The date at the top of this page reflects the latest revision. Material changes will be noted on this page.

10. Contact

Questions or requests about this policy can be sent to contact@neuravox.org, or by post to Neuravox Foundation, Kampala, Uganda.