Privacy Policy

Mojza is a student-led platform that makes academic resources, opportunities, and guidance more accessible. This Privacy Policy applies specifically to the Mojza Contributor Platform, including contribute.mojza.org and the project, profile, submission, credit, certificate, reporting, and administration features available through it.

This policy supplements any privacy information published on the main Mojza website. If a feature sends you to another website or service, that service's privacy terms may also apply.

Depending on how you use the platform, we may collect:

• Account information: username, email address, authentication status, and account identifiers. Passwords are handled by our authentication provider and are not stored by Mojza in readable form.
• Contributor profile information: full name, public-name preference, country, educational board, school, graduation year, subjects, grades or grade status, skills, preferred contribution areas, bio, and optional portfolio links.
• Project activity: applications, application answers, invitations, project roles, memberships, proposals, milestones, deadlines, withdrawal or removal requests, and project history.
• Submissions and reviews: notes, external file or document links, revision history, reviewer decisions, quality or reliability records, and approved credits.
• Recognition information: contributor rank, badges, certificates, contribution categories, verification IDs, and certificate status.
• Safety and administration information: reports, evidence links, warnings, internal notes, account actions, and audit records showing who performed administrative actions.
• Technical information: authentication cookies, security logs, browser or device information, IP address, and basic request information that may be processed by our hosting, authentication, and security providers.

We use information to:

• Create, authenticate, secure, and support contributor accounts.
• Determine project eligibility and simplify applications.
• Coordinate projects, roles, milestones, submissions, and reviews.
• Award and audit credits, ranks, badges, and certificates.
• Send in-platform notifications and essential account or project emails.
• Review quality, originality, plagiarism concerns, and compliance with project instructions.
• Investigate reports, prevent abuse, and enforce the Contribution Terms.
• Maintain accurate operational records and improve the platform.

We do not sell contributor personal information. We do not use private academic or contact information for public advertising profiles.

The platform is designed to make approved contribution records visible. Public contributor profiles and leaderboards may display:

• Username, or your full name only when your public-name preference explicitly includes it.
• Contributor rank and badges.
• Approved credit total and leaderboard position.
• Contribution categories and completed public projects.
• Public certificate details and verification status.

Full names are private by default. Email addresses, school, country, grades, academic records, reports, internal notes, rejected work, and disciplinary history are not displayed on public profiles.

Information may be available to the following people where necessary:

• Assigned project members: team members may receive the email addresses of other assigned members so they can coordinate work.
• Project Leads: leads can view relevant application, role, and project information for projects they manage, but do not receive unrestricted access to private platform data.
• Authorized Mojza staff: Project Managers, Publications Heads, and Administrators may access information needed to review work, manage users, resolve reports, award credits, and protect the platform.
• Service providers: limited information is processed by providers used for authentication, database hosting, deployment, email delivery, and security.
• Legal and safety disclosures: we may preserve or disclose information where reasonably necessary to comply with law, protect users, investigate fraud or abuse, or defend Mojza's rights.

The platform currently uses Supabase for authentication and database services and may use separate hosting and email-delivery providers. These providers process limited data on Mojza's behalf under their own security and privacy terms.

Project submissions may contain links to Google Drive, Google Docs, Canva, WordPress, video platforms, or other services. Mojza does not control those services. Contributors should use appropriate sharing permissions and avoid including unnecessary personal information in linked files.

Authentication cookies are necessary to keep users signed in and protect account sessions. Disabling them may prevent the platform from working correctly.

We retain account and project information for as long as an account is active and for a reasonable period afterwards where needed to operate the platform, resolve disputes, prevent abuse, and maintain an accurate contribution record.

Some records may remain after account deletion, including approved project attribution, credit transactions, audit logs, certificate verification records, and enforcement records. Where practical, these records may be minimized or separated from private profile data. External submission files remain subject to the retention settings of the service where they were uploaded.

Mojza uses reasonable technical and organizational safeguards, including encrypted connections, managed authentication, restricted role-based access, database access policies, and administrative audit logs. Access is limited according to a person's platform and project responsibilities.

No online service can guarantee absolute security. Contributors should use a unique password, protect their login session, avoid sharing confidential links publicly, and promptly report suspected account misuse.

Mojza serves school and university students, including users who may be under 18. Young contributors should only provide information needed for their account and projects and should involve a parent or guardian where required by applicable law or where they need help understanding these policies.

Do not submit home addresses, identity documents, financial information, or other highly sensitive information through profiles, project notes, reports, or linked files unless Mojza has specifically requested it through a secure process.

Contributors may request to:

• Access or correct their personal information.
• Update their profile and portfolio information.
• Ask for a copy of information associated with their account.
• Request account deletion or restriction of a public profile.
• Challenge an inaccurate credit, certificate, or account record.
• Withdraw a pending application or request withdrawal from an active project.

Some requests may be limited where information must be retained for security, audit, certificate verification, project attribution, or legal reasons. Requests can be sent to info@mojza.org. We may need to verify the requester's identity before acting.

We may update this Privacy Policy when the platform, our providers, or applicable requirements change. The current version will be posted here with its effective date. Material changes may also be announced through the platform.