Privacy Policy

Introduction

The Society of Teen Scientists ("SoTS," "we," "us," or "our") is operated by Authentic Research Partners LLC, a company based in Princeton, New Jersey. We are committed to protecting the privacy of our members, all of whom are young scientists aged 13-22. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, mobile applications, and online services (collectively, our "Service").

We understand that privacy is especially important to young people and their parents or guardians. This policy is designed to be clear and transparent about our practices, and we are committed to maintaining your trust.

Countries and Regions We Serve

SoTS is a global organization welcoming teen scientists from around the world. We currently serve members in the following countries and regions:

North America

• United States (all 50 states)
• Canada
• Mexico

Europe

• United Kingdom
• Belgium
• Denmark
• Estonia
• Finland
• Latvia
• Malta
• Poland
• Portugal
• Sweden
• Switzerland
• Norway
• Iceland

Asia-Pacific

• Australia
• New Zealand
• Japan
• Singapore
• Hong Kong

We comply with the privacy laws and regulations applicable in each of these jurisdictions. Different regions have different requirements for parental consent, data protection, and user rights—these are detailed throughout this policy.

Our Privacy Principles

Before diving into the details, here are the core principles that guide our privacy practices:

What Information Do We Collect?

We collect several types of information to provide, maintain, and improve our Service:

1. Account and Registration Information

When you create an account, we collect:

• Email address
• Date of birth (to verify age eligibility)
• Username and password
• Country/region of residence
• Type of school/organization

2. Profile and Research Information

To help you build your research profile and participate in our community, we may collect:

• First and last name
• Research interests and areas of study
• Academic achievements and awards
• Research projects and publications
• Content you submit for publication in the Proceedings of the Society of Teen Scientists
• Biographical information for your Research Profile Page

3. Payment Information

Payment Required: A valid payment method (credit card or debit card) is required to create an account and access our Service. We do not offer a free trial period.

For paid memberships and additional services, we collect:

• Billing name and email
• Payment method information (processed securely through our payment processor, Stripe)

We do not directly store complete credit card numbers on our servers. Payment processing is handled by Stripe, a third-party payment processor who complies with PCI-DSS standards. For more information about how Stripe handles your payment information, please see Stripe's privacy policy at https://stripe.com/privacy.

4. Communication Information

We collect information when you communicate with us:

• Support tickets and help requests
• Emails and messages sent to us
• Survey responses and feedback
• Communications related to webinars and events

5. Usage and Analytics Information

To improve our Service, we automatically collect:

• Device information (type, operating system, browser)
• IP address and general location information (city/state level)
• Pages visited and features used
• Time spent on the Service
• Referring website or source

6. Webinar and Event Information

When you participate in webinars, virtual lab meetings, or SoTS Annual Meeting, we may collect:

• Registration information
• Attendance records
• Questions submitted during events
• Presentation materials you share

Age Verification and Parental Consent

To ensure our community remains safe and age-appropriate, we implement age verification and parental consent procedures:

Age Verification

At registration, you must provide your date of birth to verify you are between 13-22 years old. We rely on the accuracy of the information you provide during registration.

Parental Consent Requirements

For European users (EU, EEA, UK, Switzerland):

Under GDPR Article 8, the age of digital consent varies by country. All European countries we serve have set the age of digital consent at 13 years old, meaning:

For California users ages 13-15:

Under California law, we require parental awareness and consent for certain features. We will notify your parent or guardian when you create an account and obtain consent for:

• Making your Research Profile Page public
• Publishing research with your name in the Proceedings
• Participating in certain communication features

For Canadian users:

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the age of consent varies by province. For users under 18, we encourage parental involvement and notify parents when accounts are created by users under 16.

For users in Australia, New Zealand, Japan, Singapore, Hong Kong, and Mexico:

While not legally required, we encourage parental involvement for users ages 13-15 and provide parents with oversight rights for their teen's account.

Parental consent verification methods:

• Email verification with follow-up confirmation
• Credit card verification (small temporary charge)
• Document verification (government-issued ID)
• Video call verification

Parents can manage consent and review their teen's account by contacting us at privacy@teenscientists.org.

How Do We Use Your Information?

We use the information we collect for the following purposes:

To Provide and Maintain Our Service

• Create and manage your account
• Process payments and membership fees
• Provide access to publications, tools, and resources
• Generate your Research Profile Page
• Enable you to publish in the Proceedings
• Facilitate communication with other members (where appropriate)

To Improve and Personalize Our Service

• Understand how members use the Service
• Identify areas for improvement
• Develop new features and tools
• Personalize your experience (e.g., recommending relevant research opportunities)

To Communicate With You

• Send important updates about your account or membership
• Notify you about research opportunities, webinars, and events
• Respond to your questions and support requests
• Send newsletters and announcements (with your consent)
• Request feedback through surveys

To Ensure Safety and Security

• Detect and prevent fraud, abuse, or unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations
• Protect the rights and safety of our members and organization

To Conduct Research and Analysis

• Understand trends in teen research interests
• Evaluate the effectiveness of our programs
• Generate aggregated, de-identified statistics about our community

Automated Decision-Making and AI

We use artificial intelligence and automated systems to enhance your research experience. Under GDPR Article 22, you have the right to understand how automated decision-making affects you.

AI Research Mentor

Our AI Research Mentor uses machine learning to provide personalized guidance through the research process. The AI analyzes:

• Your research interests and topic selections
• Questions you ask and challenges you encounter
• Your progress through research milestones
• Aggregated data from successful research projects

The AI uses this analysis to: recommend research resources, suggest next steps, provide feedback on your work, and connect you with relevant opportunities.

Content Recommendations

We use automated systems to recommend research opportunities, webinars, and community members with similar interests. These recommendations are based on:

• Your stated research interests
• Academic level and areas of study
• Past participation in events and programs
• General usage patterns (not personal communications)

Publication Screening

Submissions to the Proceedings undergo initial automated screening for plagiarism, formatting compliance, and basic quality standards. All final publication decisions are made by human editors.

Your Rights Regarding Automated Decision-Making

How Do We Share Your Information?

We limit sharing of your personal information and only share it in the following circumstances:

With Your Consent

• When you choose to publish research in the Proceedings, your name and work become publicly available
• When you choose to make your Research Profile Page public
• When you explicitly consent to share information in other ways

Service Providers

We share information with trusted third-party service providers who help us operate our Service, including:

• Payment processors (for membership fees and tool subscriptions)
• Email service providers (for communications)
• Cloud hosting services (for data storage and website hosting)
• Analytics providers (to understand Service usage)

These service providers are contractually required to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose information if required by law, such as:

• In response to a court order, subpoena, or other legal process
• To comply with legal or regulatory requirements
• To protect the rights, property, or safety of SoTS, our members, or others
• In connection with an investigation of fraud, abuse, or illegal activity

Business Transfers

If SoTS or Authentic Research Partners LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change and any choices you may have.

Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you, such as:

• Statistics about our membership demographics
• Trends in research topics and interests
• General usage patterns

Your Choices and Rights

You have control over your personal information:

Access and Update Your Information

You can access and update your account information at any time by logging into your account settings. If you need help, contact us at privacy@teenscientists.org.

Delete Your Account

You may delete your account at any time. To do so:

• Log into your account
• Navigate to Account Settings
• Select "Delete My Account"
• Follow the prompts to confirm deletion

When you delete your account:

• Most of your personal information will be permanently deleted
• Published research in the Proceedings may remain accessible (as it contributes to the scientific record), but can be de-identified upon request
• Some information may be retained for legal or operational purposes (e.g., transaction records)

Communication Preferences

You can control the types of emails you receive from us:

• Log into your account settings to manage email preferences
• Click "unsubscribe" in any marketing email
• Note: We will still send you important service-related emails (e.g., about your account or membership)

Cookies and Tracking

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Service.

Parental Rights and Involvement

While COPPA (Children's Online Privacy Protection Act) applies only to children under 13, and our members are ages 13-22, we recognize that parents and guardians play an important role in young people's online activities. We provide comprehensive parental rights and involvement mechanisms.

Rights for Parents of Members Ages 13-15

If your teen is ages 13-15, you have the following rights:

• Access: Review what personal information we have collected about your teen
• Correct: Request correction of inaccurate information
• Delete: Request deletion of your teen's account and personal information
• Limit: Restrict what information we collect or how we use it
• Export: Receive a copy of your teen's data in a portable format
• Withdraw consent: For EU/UK/Switzerland users, withdraw parental consent at any time (will result in account deletion)
• Review communications: See what types of communications we send
• Manage privacy settings: Adjust your teen's privacy and communication settings

Rights for Parents of Members Ages 16-17

If your teen is ages 16-17, you have the following rights:

• Access: Request access to account information (requires verification)
• Delete: Request deletion with appropriate verification
• Safety concerns: Contact us about safety or security concerns

Note: For teens ages 16-17, we balance parental rights with the teen's increasing autonomy. We may notify the teen when a parent exercises these rights unless safety concerns prevent notification.

How to Exercise Parental Rights

Step 1: Contact us

Email us at privacy@teenscientists.org with:

• Your name and relationship to the teen
• Teen's name and email address used for the account
• Specific request (access, delete, correct, etc.)

Step 2: Verify your identity

We will verify your parental relationship through one of these methods:

• Matching contact information from account registration
• Government-issued ID showing same last name and address
• Birth certificate or legal guardianship documents
• Video verification call

Step 3: Receive response

We will respond to your request:

• Within 10 business days: Acknowledge receipt and confirm identity verification method
• Within 30 days: Complete your request or explain any limitations
• Extension if needed: For complex requests, we may extend up to 60 days total with notification

No fee: We do not charge for exercising parental rights unless the request is manifestly unfounded or excessive.

For Teen Members

We encourage you to discuss your use of SoTS with your parents or guardians. If you're under 18, consider having a conversation with them about:

• What you're sharing on the Service
• Your research interests and activities
• Your privacy settings and preferences
• Any concerns you have about privacy or safety

Important: If you are ages 13-15 from the EU, UK, or Switzerland, your parent or guardian must provide consent for you to use our Service. We take this requirement seriously to protect your privacy.

How Do We Protect Your Information?

We take security seriously and implement multiple safeguards to protect your personal information:

Technical Safeguards

• Encryption: We encrypt personal information both in transit (using TLS/SSL) and at rest
• Secure servers: Our servers are hosted with reputable providers who maintain high security standards
• Access controls: We limit access to personal information to authorized personnel only
• Authentication: We use secure authentication methods, including password requirements

Organizational Safeguards

• Employee training: All employees receive security and privacy training
• Least privilege: Employees only have access to the information they need to perform their jobs
• Incident response: We have procedures in place to respond to security incidents

Monitoring and Testing

• Regular audits: We regularly review our security practices
• Vulnerability testing: We test our systems for vulnerabilities
• Updates and patches: We keep our systems updated with the latest security patches

No system is 100% secure: While we work hard to protect your information, please understand that no security measures are perfect. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our Service
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account:

• Most personal information is deleted within 30 days
• Some information may be retained longer for legal reasons (e.g., payment records for tax purposes)
• Published research may remain in the Proceedings but can be de-identified upon request

Aggregated or de-identified information may be retained indefinitely.

Third-Party Websites and Services

Our Service may contain links to third-party websites, services, or content that we do not control. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you use.

Examples of third-party services you might encounter:

• External research databases or journals
• Social media platforms (if you choose to share content)
• Universities or research institutions linked in our resources
• Video conferencing platforms used for webinars

We are not responsible for the privacy practices of these third parties.

International Users

SoTS is based in the United States, and our servers are located in the United States. If you are accessing our Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

The United States may not have the same data protection laws as your country. By using our Service, you consent to the transfer of your information to the United States.

For Users in the European Economic Area (EEA), UK, or Switzerland

If you are located in the EEA, UK, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at privacy@teenscientists.org.

We rely on the following legal bases for processing your information:

• Consent: When you agree to our processing activities
• Contract: To fulfill our obligations under our Terms of Service
• Legitimate interests: To improve our Service and ensure security
• Legal obligations: To comply with applicable laws

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Age-Appropriate Design Code (AB 2273):

CCPA Rights for All California Residents

Right to Know:

You can request information about the personal information we have collected about you in the past 12 months, including:

• Categories and specific pieces of information collected
• Sources of information
• Purposes for collecting information
• Categories of third parties with whom we share information

Right to Delete:

You can request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out:

We do not sell or share personal information for cross-context behavioral advertising, so there is no need to opt-out of sales or sharing.

Right to Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights.

Additional Rights for California Minors (Under 18)

Right to Remove Posted Content (Business & Professions Code § 22581):

If you are a California resident under 18, you have the right to request removal of content or information you posted publicly. To exercise this right:

• Email privacy@teenscientists.org with the subject "California Minor Content Removal Request"
• Specify the content you want removed (URL or description)
• We will remove or de-identify the content within 10 business days

Important: This right applies to content you posted, not content posted by others. Some content may not be able to be completely removed if:

• Federal or state law requires us to maintain the content
• The content was anonymized so we cannot identify it
• You were compensated for the content and provided consent

For research published in the Proceedings, we offer two options: (1) complete removal of your submission, or (2) de-identification (removing your name but keeping the research contribution).

No Sale of Minor Data:

We do not sell or share personal information of California residents under 18. We never have and never will.

California Age-Appropriate Design Code (AB 2273) Compliance

For California users under 18, we comply with AB 2273 requirements:

1. Default Privacy Settings:

• Your privacy settings default to the highest level
• Research Profile Pages default to private (not public)
• Location sharing is disabled by default
• Contact from other members is restricted by default

2. Opt-In for Profiling and Personalization:

• Personalized recommendations are opt-in only (you must explicitly enable them)
• AI Research Mentor can be disabled at any time in settings
• We do not use your data to profile you without your explicit consent

3. Data Protection Impact Assessment:

We have conducted a Data Protection Impact Assessment (DPIA) for features that could impact minors' privacy, including our AI Research Mentor, public profiles, and communication features. Our DPIA findings inform our design decisions to prioritize your safety and privacy.

4. No Dark Patterns:

We do not use design features that manipulate or pressure you into weakening your privacy protections, sharing more data, or making purchases. All privacy choices are presented clearly and neutrally.

5. Age Estimation:

We do not estimate your age to be older than you are to avoid applying these protections.

How to Exercise Your California Rights

To submit a request:

• Email us at privacy@teenscientists.org
• Use the "Delete Account" or "Download My Data" functions in account settings
• For minors under 18: Include "California Minor" in your subject line for expedited processing

We may need to verify your identity before processing your request. We will respond within 45 days (may extend to 90 days for complex requests with notification).

Canada Privacy Rights (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws:

Your Rights Under PIPEDA

• Right to Access: Request access to your personal information we hold
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Complain: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

Parental Rights: Parents of users under 18 have the right to access and manage their teen's account information. For users under 16, we encourage parental involvement and notify parents at account creation.

To exercise your rights, contact us at privacy@teenscientists.org.

Australia and New Zealand Privacy Rights

If you are a resident of Australia or New Zealand, you have rights under the applicable privacy laws:

Australia (Privacy Act 1988)

• Right to Access: Request access to your personal information
• Right to Correction: Request correction of inaccurate or out-of-date information
• Right to Complain: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
• Parental Rights: Parents and guardians of users under 18 may access and manage their teen's account information

New Zealand (Privacy Act 2020)

• Right to Access: Request access to your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Complain: Lodge a complaint with the Office of the Privacy Commissioner
• Right to Delete: Request deletion of personal information in certain circumstances

To exercise your rights, contact us at privacy@teenscientists.org.

Japan and Asia-Pacific Privacy Rights

If you are a resident of Japan, Singapore, or Hong Kong, you have rights under applicable privacy laws:

Japan (Act on the Protection of Personal Information - APPI)

• Right to Disclosure: Request disclosure of your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of personal information obtained unlawfully
• Right to Suspension: Request suspension of use or deletion of data used beyond original purpose

Singapore (Personal Data Protection Act - PDPA)

• Right to Access: Request access to your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Withdraw Consent: Withdraw consent for data processing

Hong Kong (Personal Data (Privacy) Ordinance - PDPO)

• Right to Access: Request access to your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Object: Object to use of data for direct marketing

Parental Involvement: While not legally required, we encourage parental involvement for users ages 13-15 and provide parents with oversight rights.

To exercise your rights, contact us at privacy@teenscientists.org.

Mexico Privacy Rights

If you are a Mexican resident, you have rights under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP):

Your ARCO Rights

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate or incomplete data
• Cancellation: Request deletion of your personal data
• Opposition: Object to processing of your personal data for specific purposes

Parental Rights: Parents of users under 18 may exercise ARCO rights on behalf of their teen.

To exercise your rights, contact us at privacy@teenscientists.org. We will respond within 20 business days.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you by email or through a prominent notice on our Service
• Your continued use of the Service after changes become effective constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.