Privacy Statement & Personal Data Protection Policy

Purpose, Scope and Responsible Stewardship

ARCITECH: Journal of Computer Science and Artificial Intelligence is published by Institut Agama Islam Negeri (IAIN) Curup, Indonesia, and operates its online scholarly publishing workflow through Open Journal Systems (OJS). This statement describes how personal data associated with manuscript submission, peer review, journal administration, publication and website use is handled.

It applies to authors, co-authors, reviewers, editors, journal staff, registered readers, correspondents and visitors to ARCITECH services. Institutional site administrators and authorized service providers may support the technical operation of the shared journal platform, subject to their responsibilities and access permissions.

The publisher and authorized journal personnel are responsible for implementing the applicable data protection obligations. The formal allocation of data-controller and processor responsibilities is governed by the institution’s actual operating arrangements and applicable law.

Categories of Personal Data

• Account and profile information: names, usernames, email addresses, institutional affiliations, country, optional contact details, ORCID iD, roles and declared review interests where provided.
• Submission and authorship information: manuscript files, author and contributor metadata, correspondence, declarations, permissions and supporting materials.
• Editorial and peer-review information: editor assignments, reviewer invitations, confidential review reports, decisions, revisions, internal notes and integrity-related records.
• Publication information: published author names, affiliations, ORCID identifiers when supplied, article metadata, acknowledgments and any contact details intentionally made public in published content.
• Technical information: account activity, security-relevant event logs, IP addresses and site usage information to the extent recorded by the installed OJS system, web server, or configured services.

Authors should avoid placing unnecessary personal, confidential or sensitive information in manuscripts, supplementary files and metadata.

Purposes and Lawful Grounds

Personal data is handled for legitimate scholarly publishing purposes: account administration, eligibility and identity checks, manuscript handling, editorial communication, peer review, research-integrity assessments, DOI registration, scholarly dissemination, platform security, legal compliance and records management.

Processing will rely on the applicable lawful basis under Indonesian personal-data law, which may include the data subject’s consent, the need to provide a requested journal service, compliance with a legal obligation, and other lawful grounds provided by law. The correct basis depends on the processing activity; agreeing to this statement does not convert every use of data into consent-based processing.

Optional publication announcements or similar communications should be distinguished from messages necessary to manage a journal account, submission or reviewer assignment.

Confidential Manuscripts and Double-Blind Review

Unpublished manuscripts, peer-review reports, reviewer identities, private editorial communications and confidential research materials are restricted to persons who need access for their assigned journal responsibilities or for a justified investigation. ARCITECH operates a double-blind peer-review policy; editorial staff must protect information consistent with that model.

Reviewer identities and confidential comments are not routinely disclosed publicly. Disclosure may be required in limited circumstances, such as a lawful demand, authorized research-integrity inquiry, or a documented process permitted by the journal’s editorial policies.

Editors and reviewers must not upload confidential manuscripts, files or personal data to public generative-AI services without authorization consistent with the journal’s AI Policy and applicable safeguards.

Published Article Metadata and Open Scholarship

Publishing a scholarly article entails making relevant bibliographic and contributor information publicly accessible. Names of published authors, affiliations, ORCID iDs when provided, article titles, abstracts, references, acknowledgments and associated published materials may appear on ARCITECH article pages and be distributed through scholarly metadata services.

Public metadata may be indexed, replicated or retained by scholarly discovery services and repositories beyond the direct control of ARCITECH. A request to remove public scholarly records will be evaluated in light of accuracy, publication integrity, legal duties, copyright and the rights of affected individuals.

Private reviewer contact information, personal account credentials and unpublished editorial records are not part of routine public article metadata.

Authorized Access and Third-Party Recipients

ARCITECH does not sell personal data. Necessary processing and limited disclosure may involve authorized editors, reviewers, institutional administrators, technical operators, hosting or email providers, approved service providers, and—where relevant—scholarly identifier, indexing and archiving services.

• Scientific record: publication metadata may be sent to DOI-registration and indexing providers such as Crossref or other services actually used by the publisher.
• Infrastructure: hosting, security monitoring, email, backup, payment administration or technical support services may process data needed for their work, subject to suitable confidentiality and security controls.
• Research-integrity and legal requests: limited information may be disclosed when lawfully required or reasonably necessary for an authorized investigation.

The particular recipients depend on the services required for a given journal activity. Individuals may ask the editorial office for further information about the handling of their data in a specific service.

International Data Transfers

Where personal data must be accessed, hosted or transmitted outside Indonesia, ARCITECH and the publisher will assess the transfer under applicable Indonesian data-protection requirements, including the conditions for international transfers. Cross-border transfers are not automatically authorized merely because a journal operates internationally.

Public scholarly metadata may circulate internationally through readers, repositories, DOI and indexing services. Confidential unpublished materials require stronger access control and a justified processing purpose.

Cookies, Sessions, Analytics and Server Logs

OJS and the supporting website infrastructure may use cookies or equivalent technologies to maintain authenticated sessions, support account functions and protect the service. Server logs and any enabled analytics may process device, browser, timestamp, IP address and access-event information.

Cookies, analytics and related technologies vary according to the journal website configuration. Where non-essential tracking is used, ARCITECH will provide applicable information and obtain consent where required by law. Users may ask the editorial office about the technologies used by this website.

Data Minimization, Confidentiality and Security

The journal and publisher are committed to reasonable technical and organizational safeguards appropriate to the sensitivity of the information processed, including least-privilege access, confidentiality responsibilities, secured accounts, software maintenance and controlled backup and recovery procedures.

No internet-based system can guarantee absolute security. Suspected compromise should be reported promptly to authorized institutional technical and privacy personnel for assessment and appropriate action.

Retention, Archiving and Disposal

Personal information and confidential editorial records will be retained only for as long as reasonably necessary for legitimate publishing purposes, auditability, integrity investigations, legal and institutional obligations and service continuity. An institutional retention schedule should distinguish registered accounts, rejected and accepted submissions, confidential review records, financial records, security logs and published scholarly metadata.

Requests for deletion or account closure will be reviewed against those obligations. Published bibliographic records and notices of correction or retraction may need to remain available to protect the scholarly record. Retention does not mean that every category of personal data is preserved indefinitely.

The period applicable to a particular record depends on its type, purpose and applicable legal and institutional obligations. Inquiries about a specific record may be sent to the editorial office.

Rights of Data Subjects and How to Request Them

Subject to applicable law and its exceptions, individuals may request information about their personal-data processing, access to relevant personal data, correction of inaccuracies, withdrawal of consent where consent is the applicable basis, and deletion, restriction or other applicable action relating to their personal information.

Send privacy inquiries to arcitech.journal@iaincurup.ac.id with the subject Personal Data / Privacy Request. Please describe the account, submission or record concerned and the requested action. To protect privacy, the journal may request appropriate identity verification before disclosing or changing private information.

Requests will be handled under applicable law and institutional procedures. Rights may be limited when disclosure would reveal another person’s confidential review information or when retention is required to meet lawful obligations and maintain the integrity of the scholarly record.

Notifications and Optional Communications

Service messages concerning account security, submission processing, reviewer invitations, editorial decisions, correction notices or necessary journal administration may be sent as part of providing the requested publishing service.

Optional announcements and new-issue notifications should be subject to user preferences or other applicable lawful grounds. Where a subscription or opt-in mechanism is offered, users should be able to revise their preferences through their account or by contacting the journal.

Sensitive Research Data and Supplementary Materials

Authors are responsible for lawful collection and ethical disclosure of personal data included in their research. Human participant information, health information, children’s data, biometric identifiers, personal financial details, and confidential institutional or cybersecurity telemetry require heightened scrutiny.

Personal information and operational security details should be anonymized, aggregated, minimized or withheld from public article files where necessary. A Data Availability Statement may explain legitimate legal, privacy, intellectual-property or security restrictions without publishing the protected material.

Relevant requirements are further addressed in Research Data Availability & Reproducibility Policy.

Data Incidents and Breach Response

Suspected unauthorized access, accidental disclosure, loss or other personal-data incidents should be reported promptly to the journal and designated institutional security or privacy personnel. The responsible institution will assess the nature, scope, risk, containment, remediation and any applicable reporting or data-subject notification requirements.

Required notifications, where applicable, will be assessed and coordinated under Indonesian personal-data protection law and other relevant obligations.

Journal Users, Children and Third-Party Websites

ARCITECH is intended primarily for scholarly users. Where personal data relating to children or vulnerable participants appears in research materials, the relevant legal basis, ethical approvals and safeguards must be established before processing or publication.

External links to repositories, reference services, author websites and other organizations may have separate privacy policies. ARCITECH is not responsible for processing independently undertaken by external website operators, although the journal should exercise appropriate care when selecting service providers.

Updates, Policy Consistency and Effective Use

ARCITECH may revise this policy to reflect changes in law, OJS technology, security practices, institutional governance or journal services. Material changes should be identified by an updated revision date and communicated where legally necessary.

The complete policy should be linked from the built-in OJS Privacy Statement, registration and submission interfaces, and remain consistent with Publication Ethics, Peer Review Policy, AI & Generative AI Policy, and Copyright & Licensing Policy.

Privacy Contact and References

ARCITECH Editorial Office
Institut Agama Islam Negeri (IAIN) Curup
Jl. Dr. AK Gani No. 01, Curup, Rejang Lebong, Bengkulu, Indonesia
Email: arcitech.journal@iaincurup.ac.id

For journal privacy inquiries, use the official contact above. Requests involving institutional systems, cross-journal accounts, legal matters or suspected breaches may need to be referred to authorized publisher or institutional personnel.

• Republic of Indonesia — Law No. 27 of 2022 on Personal Data Protection
• PKP — OJS documentation and privacy settings
• COPE / DOAJ / OASPA / WAME — Principles of Transparency and Best Practice

This policy should be read together with ARCITECH’s other editorial policies. Applicable legal requirements govern in the event of a conflict.