Privacy & GDPR Compliance Policy

The Data Controller responsible for processing personal data on the Research Expedite platform is IJSRP Inc., a corporation registered in the United States. IJSRP Inc. acts through its operational division, Research Expedite, for all platform-related data processing activities.

Registered address: IJSRP Inc., c/o Research Expedite Legal Department, Sector 4, Gurgaon, INDIA.

Data Protection Officer (DPO): connect@researchexpedite.com

Research Expedite collects and processes personal data through the following channels:

• Account Registration: Name, email address, institutional affiliation, and authentication credentials provided during sign-up.
• Expert Profiles: For approved Subject Matter Experts, we collect full name, country of residence, academic qualifications, years of experience, LinkedIn URL, ORCID ID, biography, publication metadata, and self-selected domain categories.
• ORCID Public API Syncing: With explicit expert consent, Research Expedite automatically syncs publicly available publication and affiliation data from the ORCID Public API. This is limited to data the expert has already chosen to make public on ORCID. No private ORCID data is accessed.
• Platform Interactions: Query submissions, chat messages with the AI Innovation Agent, consulting thread content, and navigation behavior.
• Payment Data: Processed exclusively by our PCI-DSS compliant payment processors. Research Expedite does not store raw payment card numbers.
• Technical Logs: IP addresses, browser type, device identifiers, and access timestamps for security and fraud prevention.

Research Expedite uses cookies and similar tracking technologies to maintain user sessions, remember preferences, analyze platform usage, and deliver personalized experiences.

Essential Cookies: Required for core platform functionality, including authentication state and security tokens. These cannot be disabled.

Analytics Cookies: Help us understand how users interact with the platform so we can improve features and performance. These are anonymized where possible.

Functional Cookies: Remember your preferences, such as language settings and display modes, to provide a smoother experience on return visits.

You can manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may impair platform functionality.

Research Expedite operates globally, and your data may be transferred to and processed in countries outside your jurisdiction, including the United States. All cross-border transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.

Our infrastructure providers are vetted for compliance with international data protection standards, and we maintain Data Processing Agreements (DPAs) with all subprocessors handling personal data.

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights:

• Right to Access: You may request a copy of all personal data we hold about you, free of charge, within one calendar month.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data at any time through your profile settings or by contacting our DPO.
• Right to Restriction: You may request that we restrict processing of your data in specific circumstances, such as when you contest its accuracy.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data. For registered experts, immediate profile withdrawal is available via the "Withdraw Application" feature in your expert dashboard. Upon withdrawal, your personal data is flagged for deletion and permanently purged from active systems within 30 days, subject to any legal retention obligations.

To exercise any of these rights, email connect@researchexpedite.com with the subject line "GDPR Data Rights Request." We will respond within 30 days.