diff --git a/src/app/features/static/privacy-policy/privacy-policy.component.html b/src/app/features/static/privacy-policy/privacy-policy.component.html index ab2600e78..e8b6f717e 100644 --- a/src/app/features/static/privacy-policy/privacy-policy.component.html +++ b/src/app/features/static/privacy-policy/privacy-policy.component.html @@ -9,31 +9,38 @@

1. INTRODUCTION

Center for Open Science, Inc. (referred to as "COS", "OSF", "us" "our" and "we") is a nonprofit culture change organization that aims to align scholarly practices with scholarly values. It does so by developing and advancing - a systems strategy for changing culture and behavior toward greater rigor, transparency, and sharing of research - process, outputs, and outcomes. COS fosters an open and interactive community among open source developers, open - science researchers, and the broader scientific community through our in-person and virtual events; runs programs, - certifications, and fellowships with communities and related affiliates; conducts research on scientific practices - and provides grants for relevant projects; and improves the research workflow by connecting technologies that - researchers use of our development and maintenance of OSF. + a systems strategy to increase rigor, transparency, and sharing of research. COS fosters an open and interactive + community among open source developers, open science researchers, and the broader scientific community by + providing tools, training, and services that support transparent study planning, output and outcome sharing, and + collaboration across research communities.

- Our mission is to increase the openness, integrity, and reproducibility of scientific research and scholarly - communication by creating and operating an open-source infrastructure (referred to as "OSF") to support the entire - research lifecycle from planning, collaborating, conducting, reporting, publishing, archiving and discovery. This - Privacy Policy applies to contributors of content to, and users of, our Websites and Services. + Center for Open Science, Inc. is affiliated with Center for Open Science AISBL, an international nonprofit + association organized under Belgian law ("COS AISBL"). Unless a specific Service states otherwise, the Websites + and Services, including OSF, are provided by Center for Open Science, Inc. +

+

+ The COS mission is to increase the openness, integrity, and trustworthiness of research. To meet that objective, + COS employs a systems strategy involving technology to make open practices possible and easy, community building + to make open practices normative, and stakeholder engagement to make open practices rewarding and required. COS + built, maintains and operates the OSF, a free, open source infrastructure (referred to as "OSF"), for helping + researchers register study plans, publish preprints through community-run services, and link related data, + materials, code, and outcomes wherever they live, creating transparent, connected research records. This Privacy + Policy applies to contributors of content to, and users of, our Websites and Services.

In this document, we use "you" to refer to researchers and other Active Users of our Websites and Services. We do not collect any personally identifiable information about you when you visit our Websites unless you choose to - provide us with that information. We do not collect information from you for commercial marketing or any other - purpose unrelated to our purpose. Our goal is to provide you with a personalized online experience that provides - you with the information, resources, and services that are most relevant and helpful to you. This Privacy Policy - has been written to describe the conditions under which our Websites and Services are made available to you. Our - Privacy Policy discusses, among other things, how data obtained during your visits to our Websites may be - collected and used. Our Privacy Policy also discusses important limitations to the way you may use materials and - services you find on the site. Read the Privacy Policy carefully. By providing affirmative consent, you have - accepted the terms of this Policy. If you do not agree to accept the terms of the Privacy Policy, you are directed - to discontinue accessing or otherwise using the site or any materials obtained from it. + provide us with that information. We do not sell your personal information. +

+

+ Our goal is to provide you with a personalized online experience that provides you with the information, + resources, and services that are most relevant and helpful to you. This Privacy Policy has been written to + describe the conditions under which our Websites and Services are made available to you. Our Privacy Policy + discusses, among other things, how data obtained during your visits to our Websites may be collected and used. Our + Privacy Policy also discusses important limitations to the way you may use materials and services you find on the + site. Read the Privacy Policy carefully. If you do not want your information handled as described in this Privacy + Policy, please do not use the Websites and Services.

We protect your personal information using industry-standard safeguards. As described in this Privacy Policy, we @@ -43,30 +50,22 @@

1. INTRODUCTION

-

2. CONSENT

-

- You may not use COS Websites or Services if you do not accept the COS Terms and Conditions of Use. By using the - Website and Services, you further represent that you have all necessary authority and consents to post any content - to upload to the Websites or use in conjunction with the Services. Your use of COS Websites and Services Terms of - Use describe the conditions under which the COS allows the public to use the Websites and Services. This related - Privacy Policy is a notice to our users about how we manage your data. -

+

2. RELATIONSHIP TO TERMS OF USE

- Prior to collecting personal information of external users, a privacy policy is provided that may include the - purpose and use of the personal information, including detailed use, ability to opt-out, enhancement (enrichment), - sharing, disclosure, access, security, retention, breach notification requirements, and disposal of personal - information. More information on specific privacy settings for Projects on osf.io is provided in Section 12. + Your use of the Websites and Services is governed by the COS Terms of Use. This Privacy Policy is a notice + describing how COS collects, uses, shares, and protects personal information. Some Services, such as research + studies, may have their own privacy notice or consent form, which will apply to that Service. Information about + visibility settings for Content on OSF is in Section 12.

3. SITES COVERED BY THIS PRIVACY POLICY

- This Privacy Policy applies to the COS Websites located at cos.io and osf.io, and COS-operated Websites and URLs, - and Services provided by COS through them, including services hosted on osf.io, even if operated or moderated by - other communities or entities such as universities or scholarly societies. For OSF, our privacy practices are - based on three levels of openness and privacy, which are set by the Administrator of each Project, namely, public, - limited access, and private access. These levels of privacy are described in Section 12 of this Policy. + This Privacy Policy applies to personal information COS collects through the COS Websites at cos.io and osf.io, + other COS-operated websites and URLs, and the Services, including services hosted on osf.io that are operated or + moderated by other communities or entities, such as universities or scholarly societies, and third-party platforms + COS uses to deliver events, webinars, surveys, and recordings.

@@ -74,11 +73,11 @@

3. SITES COVERED BY THIS PRIVACY POLICY

4. CHANGES TO THIS PRIVACY POLICY

The process of maintaining a website is an evolving one, and COS may modify and amend this Privacy Policy by - posting a new Policy on our Websites. Please carefully review any posted changes to our Privacy Policy. Continued - use of our Websites and Services after we have posted a notice of changes to the Privacy Policy shall constitute - your consent to the changed terms or practices. Note that any personal data we collect about you is subject to the - privacy policy in effect at the time of its collection. And, further, you may have certain rights with respect to - that personal data, as described in this Privacy Policy. + posting a new Policy on our Websites. Please carefully review any posted changes to our Privacy Policy. If we make + material changes, we will notify you by email or by a prominent notice on the Websites before the changes take + effect. Note that any personal data we collect about you is subject to the privacy policy in effect at the time of + its collection. And, further, you may have certain rights with respect to that personal data, as described in this + Privacy Policy.

@@ -86,10 +85,10 @@

4. CHANGES TO THIS PRIVACY POLICY

5. CHILDREN'S PRIVACY

COS is committed to protecting the privacy needs of children. COS does not intentionally collect information from - children under the age of 16, and COS does not target its sites to children. Only persons who are more than 18 - years-old may use our Websites and Services. By accessing our Websites and Services, you are legally acknowledging - that you are over the age of 18 . If you are under the age of 18, you don't have the legal right to access our - Websites and Services. + children under the age of 16, and COS does not target its sites to children. Only persons who are 18 years of age + or older may use our Websites and Services. By accessing our Websites and Services, you are legally acknowledging + that you are at least 18 years of age. If you are under the age of 18, you don't have the legal right to access + our Websites and Services.

@@ -145,26 +144,25 @@

(a) OSF Account Enrollment

password. You can choose to provide other information about yourself in your account profile during the enrollment process (for example, your organizational or company affiliation, your level of education, location, your job title, professional experience, professional affiliations and memberships, etc.). This information that you - voluntarily provide may be seen by other users who view your profile. We collect this information only with your - consent. + voluntarily provide may be seen by other users who view your public profile. We collect this information only with + your consent.

We use this additional information to customize your experience on this website, and this information may be - viewable by others. You understand that, by creating or claiming an OSF account, COS and others within your - Project's level of access will be able to identify you by your profile, and you agree to allow COS to use this - information in accordance with this Privacy Policy. You must follow this link to our - Terms of Use - in order to understand the terms of your relationship with COS. On some pages of our Websites, you may be able to - request information, subscribe to mailing lists, participate in online discussions, collaborate on documents, - provide feedback, submit information into registries, register for events, apply for membership, or join - committees or working groups. The types of personal information you provide to us on these pages may include your - name, address, phone number, e-mail address, user IDs, passwords, or other information that relates to you - personally. + viewable by others. You understand that, by creating or claiming an OSF account, COS and others will be able to + identify you by your profile, and you agree to allow COS to use this information in accordance with this Privacy + Policy. You must follow this link to our + Terms of Use in order to + understand the terms of your relationship with COS. On some pages of our Websites, you may be able to request + information, subscribe to mailing lists, participate in online discussions, collaborate on documents, provide + feedback, submit information into registries, register for events, apply for service tiers, or join committees or + working groups. The types of personal information you provide to us on these pages may include your name, address, + phone number, e-mail address, user IDs, passwords, or other information that relates to you personally.

(b) Group Participation

We may collect information when you use our Websites, such as when you join and participate in any group, - participate in any polls or surveys, or otherwise interact with other users within the community. + participate in any polls or surveys, or otherwise interact with others within the community.

(c) Non-Personal Information

@@ -186,21 +184,22 @@

(e) Log Files and IP Addresses

that is automatically assigned to your computer whenever you access the Internet. For example, when you request a page from one of our sites, our servers log your IP address to create aggregate reports on user demographics, traffic patterns, metascience, and for purposes of system administration. Every time you request or download a - file from the site, COS may store data about these events and your IP address in a log file. We may use this - information to analyze trends, administer the site, track users' movements, and gather broad demographic - information for aggregate use or for other business purposes. When you access or leave our Websites by clicking on - a hyperlink, we receive the URL from the site from which you last visited or the one to which you're directed. We - may receive the Internet Protocol ("IP") address of your computer or proxy server used to access the site, your - operating system, the type of browser you used, and the type of device you use, the Application Programming - Interface ("API") you use, or your mobile device carrier or your ISP. We also may receive location data passed to - us from third-party services or GPS-enabled devices that you have set up in order to customize your experience - based on location information. + file from the site, COS may store data about these events and your IP address. We may use this information to + analyze trends, administer the site, track users' movements, and gather broad demographic information for + aggregate use or for other business purposes. When you access or leave our Websites by clicking on a hyperlink, we + receive the URL from the site from which you last visited or the one to which you're directed. We may receive the + Internet Protocol ("IP") address of your computer or proxy server used to access the site, your operating system, + the type of browser you used, and the type of device you use, the Application Programming Interface ("API") you + use, or your mobile device carrier or your ISP. We also may receive location data passed to us from third-party + services or GPS-enabled devices that you have set up in order to customize your experience based on location + information.

(f) Cookies

We use cookies and similar technologies, including mobile device identifiers, to help us recognize you when you - log into our Websites and Services. By accessing our Websites, you are consenting to the placement of cookies and - other similar technologies in your browser in accordance with this Privacy Policy.
+ log into our Websites and Services. We use strictly necessary cookies to operate the Websites, such as to keep you + logged in. Where required by law, including for visitors in the EU, EEA, and UK, we use non-essential cookies, + such as analytics cookies, only with your consent, which you can give or withdraw through our cookie settings.
Cookies are small packets of information that a site's computer stores on your computer. COS can then read the cookies whenever you visit our Websites. We may use cookies in a number of ways, such as to save the fact that you are logged into the system so you don't have to relogin each time you visit our Websites, to deliver content @@ -227,10 +226,15 @@

(h) New Technologies

existing Websites, for example, these changes may result in our collecting new information in order to improve your user experience.

+

(i) Research Activities

+

+ Certain Services or activities may be subject to additional privacy notices, agreements, or requirements. Where + applicable, those additional terms will govern the relevant activities or processing. +

-

9. COS ADMINISTRATORS AND MODERATORS

+

9. INFORMATION YOU PROVIDE WHEN YOU CONTACT US

If you contact COS, we collect information that helps us categorize your question or report, respond to it, and, if applicable, investigate any potential breach of this Privacy Policy. We also may use this information to track @@ -262,179 +266,61 @@

10. LINKS TO THIRD-PARTY SITES AND SERVICES

11. DEFINITIONS

- In this document, we use "you" to refer to researchers and other users of the Websites and Services, including - OSF. We also use the following defined terms: + In this document, we use "you" to refer to researchers and other users of the Websites and OSF. Refer to + Section 4 of the COS Terms of Use for the list of definitions.

-
-
Project.
-
- A "Project" is used on OSF to describe an individual or collaborative enterprise that also may have embedded - within its subproject(s) or "Project components" or "component(s)" of the Project. -
-
-
Preprint.
-
- A “Preprint” is used on OSF to describe a publicly shared document and associated metadata. Preprints cannot be - deleted, but can be withdrawn, leaving behind metadata about the resource. -
-
-
Registration.
-
- A “Registration” is used on OSF to describe a public, timestamped Object, which is referenced by a DOI and - descriptive metadata. Registrations cannot be deleted, but can be withdrawn, leaving behind basic metadata about - the resource. -
-
-
Content.
-
- As used in this Privacy Policy, "content" means, but is not limited to, any research, data, text, images, - software and software code, data sets, information, or other materials. Content can be shared on OSF, in a COS - blog post, through interacting in a COS-hosted webinar or workshop, etc. -
-
-
Collection.
-
- A “Collection” is a group of content hosted on OSF. Examples include OSF Preprints, OSF Registries, OSF - Meetings, and branded community-organized services utilizing OSF infrastructure. -
-
-
Users.
-
- All Users must accept the COS Terms of Use and Privacy Policy. A user is a registered account owner on OSF, - anyone visiting OSF, and users and visitors of COS Websites and Services and websites. For example, an attendee - of a COS-hosted webinar is a user of the COS webinar service. -
-
-
Administrator.
-
- An administrator is used on OSF to describe a role and permission level for a user account on a Project or a - component is an individual who has full rights to control all aspects of a Project, Preprint, or Registration. - An Administrator may create a Project, components of a Project, or Preprint, create and change contributor - permissions, identify the legal terms that govern the ownership of the intellectual property in Content - deposited into a Project, a Project component, or Preprint or identify the license restrictions governing the - use of the intellectual property incorporated into the Project, Project component, or Preprint, control and - modify access and privacy settings for the Project and its components, modify license terms for the use of - Content, invite other users to contribute to a Project, component of a project, or Preprint, authorize add-ons, - namely, software designed to increase the capability of OSF, remove Projects or Project Components from the - Websites and Services, create Registrations (i.e. freeze and uniquely identify) of Projects or Project - components, submit content to a third party for review or moderation, and register DOIs (share persistent - metadata with a third party). -
-
-
Proxy.
-
- A Proxy is a person to whom the Administrator has granted the authority to manage a Project or Project component - on his or her behalf, which may include setting and modifying user access, privacy settings, license terms, and - editing and depositing Content. -
-
-
Contributing User.
-
- A Contributing User is used on OSF to describe a user who may access, deposit, and edit Content to a Project, - Project component, or Preprint. -
-
-
Active User.
-
- Active User. An Active User may have select interactive use of the Websites and Services, subject to - restrictions imposed by the Administrator. -
-
-
Passive User.
-
- A passive user, including journal editors/reviewers, other scientists, and members of the general public, may - use the Websites and Services solely as an information resource without any ability to change or modify any - Project content. Still, a Passive User is bound to this Privacy Policy. -
-
-
Collection Administrator.
-
- A Collection Administrator is an individual who determines content requirements and moderation settings for a - Collection and assigns Reviewers. -
-
-
Moderator.
-
- A moderator may use the Website and Services to review content submitted to a Collection, provide comment on it, - accept or reject its submission to the Collection, and update its metadata as it relates to the Collection. -
-
-
Public API.
-
- An application program interface (API) is available to the public to facilitate computer communication with the - OSF. Parts or all of the Websites and Services are accessible via various Public APIs, including but not limited - to, GitHub, Twitter, Facebook, YouTube, Google Scholar and Google Groups, and LinkedIn. -
-
-
Account Creation.
-
- Register a user account on the OSF, creating a user account and profile. Privacy Settings define whether Project - Content may be publicly displayed, displayed with restricted access to a limited group, or private. -
-
-
OSFI/Institutional Administrator.
-
- An active user, designated by an - OSF Institutional member, who can access an insights - dashboard for their institution, as well as request access to affiliated content in order to assist with - metadata comprehensiveness. Administrators adhere to both the service agreement between COS and the - Administrator's business, organization, or institution and to the COS's Terms of Use and Privacy Policy. -
-
-
Affiliated User.
-
- An active user who has a verified affiliation with an - OSF Institutional member. -
-
-
Affiliated Content.
-
- A project, registration, or preprint with a contributor that is an affiliated user, and has chosen to include - their affiliation on this content. The user maintains ownership of this content, and can grant further rights by - applying a license to it. -
-
-

12. PRIVACY SETTINGS

+

12. VISIBILITY AND ACCESS

- Projects, Project components, Preprints, and Registrations can be created by an Administrator. The Administrator - may choose whether to designate and make Content public, limited access or private. If an Administrator wishes to - send you an invitation to participate in a Project, Project component, Preprint, or Registration, the - Administrator or COS will send you an email. Once you accept the invitation, your personal profile information may - be made available to others collaborating on the Project, Preprint, or Registration, subject to the specific - privacy access restrictions imposed by the Administrator of your Project, Preprint, or Registration. + COS provides services that enable users to create, contribute to, and share research-related content. The + visibility of Content and certain profile information depends on the applicable service, the settings selected by + an administrative user, and the nature of the Content.

Public.
- Content marked as "Public" will be available to the public for viewing and commercial and non-commercial use - under the terms of the license identified by the Administrator. + Content marked as "Public" may be viewed, accessed, downloaded, shared, and indexed by search engines or other + third parties, and is subject to any license applied by the content administrators. Information associated with + public Content, such as contributor names, affiliations, and profile information, may also be publicly + accessible. Once Content and information is made public, COS cannot prevent third parties who have accessed, + downloaded, copied or redistributed that Content from continuing to use it, even if the Content is later + withdrawn, removed from public view, or its visibility settings or access license was changed. +
+
+
Non-Public.
+
+ Content that is not marked as "Public" is accessible only to users with authorized access through the applicable + COS service, such as the OSF or OSF API. Access is only by the Administrator(s), a Contributing User of that + Content, or anyone with a view-only link created by an Administrator. Where a Collection includes a review, + moderation, or other community-administered process, authorized reviewers or moderators may also have access as + necessary to perform that role.

-
Private.
+
COS Access.
- Content marked as "Private" may be viewed through the OSF or Public API only by the Administrator(s), a - Contributing User of that Project or Component, anyone with a view-only link created by an Administrator, or any - designated Proxy. Private data are not shared with the public, Trusted Parties, or other members of the COS. - Only the COS employees and our authorized agents' or contractors' staff, with a "need to know" access to manage - the Websites and Services and process data for the COS are able to view Private Access Data. + Authorized COS personnel, our authorized agents' or contractors' staff with a "need to know", and service + providers may access nonpublic Content or personal information only as reasonably necessary to operate, secure, + maintain, support, investigate, or improve COS services; comply with legal obligations, or otherwise as + described in this Privacy Policy.

Embargoed.
- Content marked as “Embargoed” may be viewed through the OSF or Public API only by the Administrator(s), a - Contributing User of that Project or Component, anyone with a view-only link created by an Administrator, or any - designated Proxy ("Private"), until the Embargo date has passed, at which time the content will be made Public - automatically. + Content marked as “Embargoed” may be viewed through the OSF or OSF API only by the Administrator(s), a + Contributing User of that Content, or anyone with a view-only link created by an Administrator, until the + Embargo date has passed, at which time the content will be made Public automatically.

-
Limited Access.
+
Institutional Visibility.
- Content marked as "Limited Access" may be viewed through our Websites and Services by the Project Administrator, - a Proxy, a Contributing User, an Active or Passive User, and a Trusted Party, subject to the restrictions - imposed by the Administrator. + If you sign in through your institution’s SSO or affiliate your account with a Participating Institution, that + institution’s administrators can see your affiliated public Content, aggregate information about the existence + and storage location of your non-public Content, the email address associated with your SSO credentials, and, + for some institutions, your department, as described in Section 16 of the Terms of Use.

Under Review.
@@ -443,12 +329,6 @@

12. PRIVACY SETTINGS

service for viewing and accepting or rejecting.
-

- If an Administrator changes the privacy settings of a Project, those changes will be applied prospectively. For - example, if an Administrator changes a privacy setting from "Public" to "Private" or "Limited Access", there is no - way for COS to restrict people who have previously viewed or downloaded the previously publicly accessible Content - from using it. -

@@ -478,11 +358,17 @@

(b) Communications from COS

We use the information you provide to customize your experience on the site. We may communicate with you using email or other means available to us regarding the availability of services, service-related issues, or - announcements that we believe may be of interest to you. We may, for example, send you welcome messages and emails - regarding new features or services, and promotional information from COS. You may opt out of receiving promotional - messages from COS by following the instructions contained in the email. As long as you're a registered user, - however, you can't opt out of receiving service messages from us. COS may also use personal information in order - to customize content on the site to you, such as news relevant to you or to your industry or company. + announcements that we believe may be of interest to you. We may also contact you about COS programs and + fundraising, including requests to support COS and its affiliates. Where the law requires consent for these + messages, including in the EU, EEA, and UK, we send them only with your consent, and every message includes a way + to opt out. We may, for example, send you welcome messages and emails regarding new features or services, and + promotional information from COS. You may opt out of receiving promotional messages from COS by following the + instructions contained in the email. However, as long as you remain a registered user, you cannot opt out of + service-related messages that are necessary to provide and administer your account and services. These + communications are supported by Article 6 under the General Data Protection Regulation (“GDPR”), where a lawful + basis applies. COS may also use personal information in order to customize content on the site to you, such as + news relevant to you or to your industry or company. Marketing emails may use tracking pixels, and that for EU, + EEA, and UK recipients, individual tracking is used only with consent.

(c) Communications from Others

@@ -497,11 +383,9 @@

(d) Sharing Information with Third Parties

COS may share your personal information with our vendors, agents or contractors, such as a vendor that may host COS's servers to help us operate our Websites and Services. You can read a list of these third parties - here. Additionally, we may utilize certain - platforms for event management or automated workflows, which may collect and pass information between systems we - ultimately use for data storage and management. By providing us with your personal information during the user - registration process and by agreeing to the terms of this Privacy Policy, you expressly consent to our storing, - processing, and distributing your information for these purposes. + here. Additionally, we may use certain platforms + for event management or automated workflows, which may collect and pass information between systems we ultimately + use for data storage and management.

COS may reach out to users to conduct research - whether that is internal user research to improve services or @@ -552,8 +436,7 @@

(d) Sharing Information with Third Parties

14. THIRD PARTY SERVICE DATA

This Privacy Policy outlines how the OSF accesses, uses, stores, and shares data obtained from third party - services via OSF add-on integrations, including Google Drive, ensuring compliance with industry policies and - standards. + services to provide the Websites and Services, ensuring compliance with industry policies and standards.

(a) Access to Google User Data

@@ -599,28 +482,18 @@

(F) Compliance and Updates

15. DATA TRANSFER

- COS may store and process personal information on servers or on a cloud located outside of the country where you - originally deposited data. The data-protection laws of the country or countries where this personal information - will be stored or processed might not be as comprehensive as those in your country. If you are unsure whether this - Privacy Policy is in conflict with applicable local rules, you should not submit your information. If you are - located within the European Union, you should note that your information will be transferred to the United States, - which is deemed by the European Union to have inadequate data protection. By using our Websites and/or directly - providing personal information to us, you hereby agree to and acknowledge your understanding of the terms of this - Privacy Policy, and consent to have your personal data transferred to and processed in the United States and/or in - other jurisdictions as determined by COS, notwithstanding your country of origin, or country, state, and/or - province of residence. + COS, Inc. is a U.S. organization. OSF data may be stored in the United States and in the European Union. Where COS + transfers personal data from the EU, EEA, or UK to a vendor or affiliate in a country that has not been found to + provide adequate protection, COS uses the EU Standard Contractual Clauses (with the UK Addendum where applicable) + or another transfer mechanism recognized under applicable law.

16. GOVERNING LAW

- This Privacy Policy is governed in all respects by the laws of the Commonwealth of Virginia, excluding that - state's conflicts of laws provisions. Any action or proceeding arising out of or related to this Policy or your - use of the Websites or Services must be brought in the state or federal courts of the Commonwealth of Virginia, - and you consent to the exclusive personal jurisdiction and venue of such courts. Any cause of action you may have - with respect to this Policy or your use of the Websites or Services must be commenced within one (1) year after - the claim or cause of action arises. + This Privacy Policy is governed by the laws of the Commonwealth of Virginia, except where the mandatory laws of + the country where you live provide otherwise.

@@ -639,7 +512,7 @@

17. YOUR OPT-OUT OPTIONS

out of the Websites, because this information may not be in our organization's control. Your public profile may be displayed in search engine results.
From time to time COS may email you electronic newsletters, announcements, surveys, research studies (see section - 13), or other information unrelated to any Project. If you prefer not to receive any or all of these + 13), or other information unrelated to any Content. If you prefer not to receive any or all of these communications, you may opt out by following the directions provided within the electronic newsletters and announcements. COS also may conduct polls and surveys of our users, and your participation in this type of research is at your sole discretion. COS may follow up with you regarding your participation in this research. You @@ -666,11 +539,16 @@

18. DATA RETENTION

19. GENERAL DATA PROTECTION REGULATION

- If you are a resident of or are located in the European Economic Area (“EEA”), you may have certain rights under - the General Data Protection Regulation (“GDPR”). Personal data you provide is only collected with your consent, - and may be transmitted outside of the EEA to COS (or computer servers maintained for the benefit of COS) pursuant - to that consent. + If you are located in the EEA or the United Kingdom, the GDPR or UK GDPR applies to our processing of your + personal data. We rely on the following legal bases:

+
    +
  • running the Services: contract;
  • +
  • security and service improvement: legitimate interests;
  • +
  • marketing emails: consent, or legitimate interests where the law permits;
  • +
  • tracking pixels and non-essential cookies: consent;
  • +
  • legal compliance: legal obligation.
  • +

In general, under the GDPR you may:

  • request access to your personal data
  • @@ -679,44 +557,40 @@

    19. GENERAL DATA PROTECTION REGULATION

  • suspend or restrict our use of your personal data, or withdraw your consent
  • request a copy of your personal data
  • complain to a supervisory authority if you believe your rights under the GDPR are not being respected
  • +
  • object to our processing of your personal data, including at any time to processing for direct marketing
  • +
  • receive your personal data in a portable format

- Should you request a copy of your personal data, we will supply to you a copy of your personal data. The first + Should you request a copy of your personal data, we will supply you with a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. Should you request - the deletion of your personal data, COS will generally do so as soon as practicable, although your right to have + the deletion of your personal data, COS will generally do so without undue delay, and within one month of your + request (extendable by two further months where necessary, in which case we will tell you). Your right to have your personal data deleted is subject to exceptions, such as, for example, compliance with a legal obligation or - for the establishment, exercise or defense of legal claims. + for the establishment, exercise or defense of legal claims. These exceptions also include personal data forming + part of public Preprints, Registrations, and other scholarly records, which may be retained where erasure would + seriously impair research or archiving purposes, subject to appropriate safeguards.

If you consider that our processing of your personal information infringes data-protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU - member state of your habitual residence, your place of work or the place of the alleged infringement. + member state of your habitual residence, your place of work or the place of the alleged infringement or, in the + UK, with the Information Commissioner’s Office.

Contact COS at {{ supportEmail }} if you have concerns regarding your personal data, or wish to exercise any of these listed rights.

-

- Note that, if you are in the EEA, we may transfer your personal data outside of the EEA, including to the United - States. By way of example, this may happen if your personal data is transferred to our servers located in a - country outside of the EEA. These countries may not have similar data-protection laws to the EEA. By submitting - your personal data, you’re agreeing to this transfer, storing, or processing. If we transfer your information - outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the - aim of ensuring that your privacy rights continue to be protected as outlined in this policy. -

20. CONTACTING US

- Questions about this Privacy Policy can be directed to - {{ supportEmail }}. Support is provided in English only.
- This Privacy Policy was last updated on January 10, 2025. -

-

- Version history for this policy is available - here. + Center for Open Science, Inc., 6218 Georgia Avenue NW, Suite #1 Unit 3189, Washington, DC 20011, is the controller + of personal data processed through the Websites and Services. Center for Open Science AISBL, our affiliate in + Belgium, supports COS's work in Europe. If COS AISBL organizes a specific event, survey, or program in its own + name, we will tell you when we collect your information, and a separate notice will identify COS AISBL as the + controller for that activity.

+

This Privacy Policy was last updated on November 15, 2026.

diff --git a/src/app/features/static/terms-of-use/terms-of-use.component.html b/src/app/features/static/terms-of-use/terms-of-use.component.html index ccfc37295..83332590b 100644 --- a/src/app/features/static/terms-of-use/terms-of-use.component.html +++ b/src/app/features/static/terms-of-use/terms-of-use.component.html @@ -9,20 +9,32 @@

1. INTRODUCTION

Center for Open Science, Inc. (referred to as "COS", "OSF", "us" "our" and "we") is a nonprofit culture change organization that aims to align scholarly practices with scholarly values. It does so by developing and advancing - a systems strategy for changing culture and behavior toward greater rigor, transparency, and sharing of research - process, outputs, and outcomes. COS fosters an open and interactive community among open source developers, open - science researchers, and the broader scientific community through our in-person and virtual events; runs programs, - certifications, and fellowships with communities and related affiliates; conducts research on scientific practices - and provides grants for relevant projects; and improves the research workflow by connecting technologies that - researchers use through our development and maintenance of OSF. -

-

- Our mission is to increase the openness, integrity, and reproducibility of scientific research and scholarly - communication by creating and operating an open source infrastructure (referred to as "OSF") to support the entire - research lifecycle from planning, collaborating, conducting, reporting, publishing, archiving and discovery. These - Terms of Use apply to contributors of content to, and users of, our Websites and Services (defined below). COS - operates certain websites at cos.io (or centerforopenscience.org) and osf.io (or openscienceframework.org) and - other URLs operated and maintained by COS ("Websites") which provide functionality ("Services") to our users. + a systems strategy to increase rigor, transparency, and sharing of research. COS fosters an open and interactive + community among open source developers, open science researchers, and the broader scientific community by + providing tools, training, and services that support transparent study planning, output and outcome sharing, and + collaboration across research communities. +

+

+ Center for Open Science, Inc. is affiliated with Center for Open Science AISBL, an international nonprofit + association organized under Belgian law ("COS AISBL"). Unless a specific Service states otherwise, the Websites + and Services, including OSF, are provided by Center for Open Science, Inc. +

+

+ The COS mission is to increase the openness, integrity, and trustworthiness of research. To meet that objective, + COS employs a systems strategy involving technology to make open practices possible and easy, community building + to make open practices normative, and stakeholder engagement to make open practices rewarding and required. COS + builds, maintains and operates the OSF, a free, open-source infrastructure for helping researchers register study + plans, publish preprints through community-run services, and link related data, materials, code, and outcomes + wherever they are stored, creating transparent, connected research records. COS also shares education and training + materials and coordinates and conducts events through its websites to advance its mission. COS operates websites + at cos.io (or centerforopenscience.org) and osf.io (or openscienceframework.org) and other Websites operated or + maintained by or for COS which provide functionality (the "Websites"). "Services" means the Websites, OSF, the + Public API, and the other services, programs, events, webinars, workshops, surveys, and activities that COS or its + affiliates offer, including those delivered through third-party platforms such as video-conferencing, survey, and + event-registration tools. Your use of a third-party platform is also subject to that platform's own terms and + privacy policy, which COS does not control. Where a particular Service is offered under separate terms, a research + consent form, or a separate privacy notice, those terms also apply and control for that Service to the extent of + any conflict.

These Terms of Use describe the conditions under which the COS allows the public to use the Websites and Services. @@ -37,12 +49,11 @@

2. TERMS OF USE

In order to use the Websites and Services made available on the sites, whether by accessing our Websites directly or by using a public application programming interface ("Public API") to access our Websites and Services, you - must first agree to these Terms of Use. You may not use the Websites or Services if you do not accept these terms. - You can accept these terms by clicking to accept or agree to these terms where we have provided you with clickable - electronic assent option or by actually using the services offered at the Websites. You may not use the Websites - or Services if you do not accept these terms. By using the Website and Services, you further represent that you - have all necessary authority and consents to post any content to upload to the Websites or use in conjunction with - the Services. + must be at least eighteen (18) years old and you must first agree to these Terms of Use. You may not use the + Websites or Services if you do not accept these terms. You can accept these terms by clicking to accept or agree + to these terms where we have provided you with a clickable electronic assent option or by your use of the services + offered at the Websites. By using the Website and Services, you further represent that you have all necessary + authority and consents to post any content to the Websites or use in conjunction with the Services.

@@ -55,6 +66,11 @@

3. MODIFICATIONS TO THESE TERMS OF USE

If there is a conflict between these Terms of Use and the updated and/or additional Terms of Use, the updated and/or Terms of Use will control.

+

+ Furthermore, COS may modify, suspend, or discontinue all or part of the Services, including features, + functionality, availability, or access methods, at any time. Such changes may include changes to service creation + capabilities, service access settings, storage practices, or the handling of Services. +

If you have questions about our Websites and Services, please contact us by email at contact@cos.io. @@ -62,29 +78,47 @@

3. MODIFICATIONS TO THESE TERMS OF USE

-

4. DEFINITIONS

+

4. DEFINITIONS AND ACCEPTABLE USE

In this document, we use "you" to refer to researchers and other users of the Websites and Services, including - OSF. We also use the following defined terms: + OSF, and not limited to registered users of OSF or COS events. OSF users may only represent a real researcher, not + organizations, groups, or non-researchers. We also use the following defined terms to describe OSF workflows and + content, Services, user types and permission levels, activities related to using the Websites and Services, and + acceptable use. Any content that is not associated with research initiatives is subject to removal at COS’ sole + discretion.

Project.
- A "Project" is used on OSF to describe an individual or collaborative enterprise that also may have embedded - within its subproject(s) or "Project components" or "component(s)" of the Project. + A "Project" is an OSF workflow that will be disabled beginning on November 16, 2026, and is used to describe an + individual or collaborative enterprise that also may have embedded within its subproject(s) or "Project + components" or "component(s)" of the Project. On February 19, 2027, all Projects and Components will be archived + and made read-only. Projects can be used to share various research outputs, but study plans, protocols, and + preregistrations should utilize the Registrations workflow.

Preprint.
A “Preprint” is used on OSF to describe a publicly shared document and associated metadata. Preprints cannot be - deleted, but can be withdrawn, leaving behind metadata about the resource. + deleted by users, but can be withdrawn, leaving behind metadata about the resource. A preprint must represent a + research outcome, typically in a static document format.

Registration.
- A “Registration” is used on OSF to describe a public, timestamped Object, which is referenced by a DOI and - descriptive metadata. Registrations cannot be deleted, but can be withdrawn, leaving behind basic metadata about - the resource. + A “Registration” is an OSF workflow for creating a public, timestamped record of a research plan that has not + yet begun, is underway, or that has concluded with disclosure that it is retrospective. This workflow is not to + be used for papers or preprints, including those reporting research outcomes, commentaries, proofs, or other + theoretical pieces, or any other research outputs (e.g., data) that are not a part of a research plan. A + registration is referenced by a DOI and descriptive metadata. Registrations and cannot be deleted by users, but + can be withdrawn, leaving behind basic metadata about the resource. A registration may also be embargoed for up + to four years, but its metadata may be publicly available. +
+
+
Outcome Report.
+
+ An outcome report is an OSF workflow for reporting the outcomes of a registered study plan. It provides a + structured way to report against the plan, describe deviations, link related outputs, and document all outcomes.

Content.
@@ -94,141 +128,173 @@

4. DEFINITIONS

blog post, through interacting in a COS-hosted webinar or workshop, etc.
-
Collection.
-
- A “Collection” is a group of content hosted on OSF. Examples include OSF Preprints, OSF Registries, OSF - Meetings, and branded community-organized services utilizing OSF infrastructure. -
-
-
Users.
+
OSF Service.
- All Users must accept the COS Terms of Use. A user is a registered account owner on OSF, anyone visiting OSF, - and users and visitors of COS Websites and Services. For example, an attendee of a COS-hosted webinar is a user - of the COS webinar service. + An “OSF Service” is a group of content hosted on OSF. Examples include OSF Preprints, OSF Registries, OSF + Meetings, OSF Institutions, and branded community-organized services using OSF infrastructure and designated + Moderators and moderation procedures.

Administrator.
- An administrator is used on OSF to describe a role and permission level for a user account on a Project or a - component is an individual who has full rights to control all aspects of a Project, Preprint, or Registration. - An Administrator may create a Project, components of a Project, or Preprint, create and change contributor - permissions, identify the legal terms that govern the ownership of the intellectual property in Content - deposited into a Project, a Project component, or Preprint or identify the license restrictions governing the - use of the intellectual property incorporated into the Project, Project component, or Preprint, control and - modify access and privacy settings for the Project and its components, modify license terms for the use of - Content, invite other users to contribute to a Project, component of a project, or Preprint, authorize add-ons, - namely, software designed to increase the capability of OSF, remove Projects or Project Components from the - Websites and Services, create Registrations (i.e. freeze and uniquely identify) of Projects or Project - components, submit content to a third party for review or moderation, and register DOIs (share persistent - metadata with a third party). -
-
-
Proxy.
-
- A Proxy is a person to whom the Administrator has granted the authority to manage a Project or Project component - on his or her behalf, which may include setting and modifying user access, privacy settings, license terms, and - editing and depositing Content. + An administrator is used on OSF to describe a role and permission level for a user account that is an individual + who has full rights to control all aspects of a Project, Preprint, or Registration. An Administrator may create, + change contributor permissions, identify the legal terms that govern the ownership of the intellectual property + in Content deposited, identify the license restrictions governing the use of the intellectual property + incorporated within the Content, control and modify access and privacy settings, modify license terms for the + use of Content, invite other users to contribute, authorize add-ons, request withdrawal of Content from the + Websites and Services, submit content to a third party for review or moderation, and register DOIs (share + persistent metadata with a third party).

Contributing User.
-
- A Contributing User is used on OSF to describe a user who may access, deposit, and edit Content to a Project, - Project component, or Preprint. -
+
A Contributing User is used on OSF to describe a user who may access, deposit, and edit Content.

Active User.
- An Active User may have interactive use of the Websites and Services, subject to restrictions imposed by the - Administrator. + An Active User is any user that has created and confirmed their OSF account, must accept the COS Terms of Use + and Privacy Policy, and may have interactive use of the Websites and Services, subject to restrictions imposed + by the Administrator.

Passive User.
A passive user, including journal editors/reviewers, other scientists, and members of the general public, may use the Websites and Services solely as an information resource without any ability to change or modify any - Project content. Passive Users are bound to these Terms of Use. + content. Anyone visiting OSF, using the COS Websites, Services, and public APIs, or attending a COS-hosted + webinar is a passive user. Passive Users are bound to these Terms of Use.

-
Collection Administrator.
+
Moderator.
- A Collection Administrator is an individual who determines content requirements and moderation settings for a - Collection and assigns Reviewers. + A moderator may use the Website and Services to review content submitted to an OSF Service, provide comment on + it, accept or reject its submission to the Service, and update its metadata as it relates to the Service.

-
Moderator.
+
Participating Institution or Organization.
- A moderator may use the Website and Services to review content submitted to a Collection, provide comment on it, - accept or reject its submission to the Collection, and update its metadata as it relates to the Collection. + An institution or organization that has entered into an Agreement for Services with COS for access to OSF + Services.

-
Public API.
+
OSF API.
- An application program interface is available to the public to facilitate computer communication with the OSF. - Parts or all of the Websites and Services are accessible via various Public APIs, including but not limited to, - GitHub, Twitter, Facebook, YouTube, Google Scholar and Google Groups, and LinkedIn. + An application program interface (API) is available to the public and openly licensed (Apache 2.0) to facilitate + computer communication with the OSF. The data the API exposes follows OSF permissions: public content is + available to read or view without authentication, while private content and any write actions require + authentication to authorize access.

Account Creation.
-
Register a user account on the OSF, creation of a user account which maintains a public profile on OSF.
+
+ Creating an OSF account is free: users provide a name and email address, set a password, verify their email, and + can then create Content, collaborate with others, and control the access to their Content. Creation of a user + account maintains a public profile on OSF. +

-
OSFI/Institutional Administrator.
+
OSF Service Administrator.
- An active user, designated by an - OSF Institutional member, who can access an insights - dashboard for their institution, as well as request access to affiliated content in order to assist with - metadata comprehensiveness. Administrators adhere to both the service agreement between COS and the - Administrator's business, organization, or institution and to the COS's Terms of Use and Privacy Policy. + An active user, who determines content requirements and moderation settings and assigns Moderators, or is + designated by a + Participating Institution or Organization, who can + access an insights dashboard for their institution, as well as request access to affiliated content in order to + assist with metadata comprehensiveness. Service Administrators adhere to both the Agreement for Services between + COS and the Participating Institution or Organization and to the COS's Terms of Use and Privacy Policy.

Affiliated User.
- An active user who has a verified affiliation with an - OSF Institutional member. + An active user who has a verified affiliation with a + Participating Institution or Organization.

Affiliated Content.
- A project, registration, or preprint with a contributor that is an affiliated user, and has chosen to include - their affiliation on this content. The user maintains ownership of this content, and can grant further rights by - applying a license to it. + Any OSF content with a contributor that is an affiliated user, and has chosen to include their affiliation on + this content. The user maintains ownership of this content, and can grant further rights by applying a license + to it.
-

5. YOUR RIGHT TO USE OSF

+

5. YOUR RIGHT TO USE COS WEBSITES AND SERVICES, INCLUDING OSF

The Websites and Services, including OSF, contain technology that is owned by the COS or third-party licensors. - The OSF software available on an open-source basis under the Apache 2.0 license. Your use of the OSF Software is - subject to the terms of such license. In addition, the COS grants you a license to use any Content marked - "public," subject to patent, copyright and trademark law and these Terms of Use, including the limits described in - the section governing Limitations on Use below. By "use" we mean sublicense, reproduce, store, transmit, - distribute, and publicly display the Content for non-commercial and commercial uses. If a Project contains links - to full-text articles or other content (“Content”), this license does not extend to the linked Content. You may - download and modify Content, but only in a manner consistent with copyright law and that does not make the data - false or misleading. Additional restrictions may apply with respect to specific Content, and are detailed in our - service-specific content guidelines. + The OSF software is available on an open-source basis under the Apache 2.0 license. Your use of the OSF Software + is subject to the terms of such license. In addition, the COS grants you a license to use any OSF Content marked + "public," subject to administrator applied licenses on this Content as well as patent, copyright and trademark law + and these Terms of Use, including the limits described in the section governing Limitations on Use below. By "use" + we mean sublicense, reproduce, store, transmit, distribute, and publicly display the Content for non-commercial + and commercial uses. If any Content contains links to full-text articles or other content (“Linked Content”), this + license does not extend to the Linked Content. You may download and modify Content, but only in a manner + consistent with copyright law and that does not make the data false or misleading. Additional restrictions may + apply with respect to specific Content, and are detailed in our service-specific content guidelines. +

+
+ +
+

6. SERVICE AVAILABILITY AND PROJECT ACCESS

+

+ COS Websites and Services, including OSF may evolve over time. COS reserves the right to modify, suspend, or + discontinue specific features, functionality of its websites or services, including the ability to create new + Projects or modify existing Projects. COS may change access settings as part of service updates or operational + changes. +

+

+ You acknowledge that access to specific COS websites and services functionality may change over time and that COS + may establish different access models for different types of workflows or content. +

+
+ +
+

7. SUSPENSION OR DISABLEMENT OF SERVICES

+

+ COS may suspend, restrict, or disable access to any Website or Service, or portions of the Services when + reasonably necessary to protect the Website and Services, its users, or third parties. Circumstances that may + result in suspension or disabling of access include, but are not limited to: +

+ +

+ Where practicable, COS will provide notice before suspending or disabling access. COS may take immediate action + without prior notice when necessary to address an emergency, security issue, legal requirement, or risk of harm to + Website and Services, its users, or third parties. Suspension or disabling of access does not necessarily result + in deletion of content. COS will maintain content according to applicable retention practices and policies. + Third-party platforms that work with COS have their own Terms of Use, and may restrict user access based on those + terms.

-

6. RESTRICTING ACCESS TO CONTENT

+

8. RESTRICTING ACCESS TO CONTENT

The COS supports open access to information in the research community. The COS shares with the public free of - charge any data marked as Public through its Websites and Services for viewing and use unless otherwise noted. If - you deposit Content into OSF, you still own the Content, but you grant the COS and its authorized users a license - to use it. Specifically, by depositing any Content (including data and links, but not the linked content) in an - OSF account, you grant the COS a perpetual, irrevocable, worldwide, royalty-free license to store, reproduce, - transmit, distribute, publicly perform, and publicly display such Content, subject to the Privacy Settings the - Administrator or Proxy selects. You grant its users a perpetual, irrevocable, worldwide, royalty-free license to - use, publicly display, and publicly perform such Content, subject to the Privacy Settings the Administrator or - Proxy selects. This limited license continues even after you stop using the COS database. If you or the - Administrator previously made Content publicly available through the Websites and Services, there is no way to - stop the public from continuing to use that Content. You may grant further rights if you apply a license. If you - contribute software code designed to modify and enhance the OSF, the underlying technology platform upon which all - Projects, Registrations, and Preprints are stored, you continue to own the code, but you grant the COS and its - authorized users a perpetual, irrevocable, worldwide, royalty-free license to sublicense, reproduce, store, - modify, transmit, distribute, publicly perform, and publicly display the code, subject to the terms of the + charge any Content marked as Public through its Websites and Services for viewing, subject to any license applied, + and use unless otherwise noted. If you deposit Content into OSF, you still own the Content, but you grant the COS + and its authorized users a license to use it. Specifically, by depositing any Content (including data and links, + but not the linked content) in an OSF account, you grant the COS a perpetual, irrevocable, worldwide, royalty-free + license to store, reproduce, transmit, distribute, publicly perform, and publicly display such Content, subject to + the Privacy Settings the Administrator selects. You grant its users a perpetual, irrevocable, worldwide, + royalty-free license to use, publicly display, and publicly perform such Content, subject to the Privacy Settings + and license the Administrator selects. This limited license continues even after you stop using the COS Websites + or Services. If you or the Administrator previously made Content publicly available through the Websites and + Services, there is no way to stop the public from continuing to use that Content. You may grant further rights if + you apply a license. +

+

+ If you contribute software code designed to modify and enhance the OSF, the underlying technology platform upon + which all Projects, Registrations, and Preprints are stored, you continue to own the code, but you grant the COS + and its authorized users a perpetual, irrevocable, worldwide, royalty-free license to sublicense, reproduce, + store, modify, transmit, distribute, publicly perform, and publicly display the code, subject to the terms of the open-source license the COS designates.

Our Privacy Settings for Content are summarized below.

@@ -236,69 +302,70 @@

6. RESTRICTING ACCESS TO CONTENT

Public.
Content marked as "Public" will be available to the public for viewing and commercial and non-commercial use - under the terms of the license identified by the Administrator. + under the terms of the license identified by the Administrator. If no license is applied by the administrator, + then no license is included in the metadata and it should be considered copyrighted by default.

Private.
- Content marked as "Private" may be viewed through the OSF or Public API only by the Administrator(s), a - Contributing User of that Project or Component, anyone with a view-only link created by an Administrator, or any - designated Proxy. Private data are not shared with the public, Trusted Parties, or other members of the COS. - Only the COS employees and our authorized agents' or contractors' staff with a need to access to manage the - Websites and Services and process Data for the COS are granted access rights to view such Data. + Content marked as "Private" may be viewed through the OSF or OSF API only by the Administrator(s), a + Contributing User of that Content, and anyone with a view-only link created by an Administrator. Private Content + are not shared with the public, Trusted Parties, or other users. Only the COS employees and our authorized + agents' or contractors' staff with a need to access to manage the Websites and Services and process Data for the + COS are granted access rights to view such Content.

Embargoed.
- Content marked as “Embargoed” may be viewed through the OSF or Public API only by the Administrator(s), a - Contributing User of that Project or Component, anyone with a view-only link created by an Administrator, or any - designated Proxy, until the Embargo date has passed, at which time the content will be made Public - automatically. + Content marked as “Embargoed” may be viewed through the OSF or OSF API only by the Administrator(s), a + Contributing User of that Content, or anyone with a view-only link created by an Administrator, until the + Embargo date has passed, at which time the content will be made Public automatically.

-
Limited Access.
+
View-Only Link.
- Content marked as "Limited Access" may be viewed through our Websites and Services by the Project Administrator, - a Proxy, a Contributing User, an Active or Passive User, and a Trusted Party, subject to the restrictions - imposed by the Administrator. + Content can be given a link to be viewed by Passive users by the Content Administrator. These links should be + carefully managed as they can give access to private or embargoed content without authentication. The links can + be created as anonymized to mask author names and affiliations.

Under Review.
- Content submitted to Services using OSF Reviews may be “Private,” yet available to designated Reviewers of the - service for viewing and accepting or rejecting. + Content submitted to Services using OSF Collections may be “Private,” yet available to designated reviewers of + the service for viewing and accepting or rejecting.
-

7. YOUR REPRESENTATIONS AND WARRANTIES

+

9. YOUR REPRESENTATIONS AND WARRANTIES

If you are an Active User, you may not misrepresent your identity or organizational affiliations in any manner; - must ensure that all data you deposit is true and correct at the time of deposit, and if you later discover that - any data was not true and correct at the time of deposit, you must correct the data; ensure that the license you - grant to the COS and the public to any content, data, texts, blogs, software code, data sets, links or other - materials, or other content you deposit, does not infringe on the copyright or other rights of a third party; and - that you will update and maintain the accuracy of your contact information. Your violation of any of these - representations and warranties may result in the suspension of your right to use the Website or Services, as well - as other remedies available to COS. + must ensure that all Content you deposit is true and correct at the time of deposit, and if you later discover + that any Content was not true and correct at the time of deposit, you must correct the Content; you deposit only + Content associated with research activities; ensure that the license you grant to the COS and the public to any + content, or other content you deposit, does not infringe on the copyright or other rights of a third party; your + profile represents only you as an individual and not groups or organizations and does not attempt to use the OSF + to market goods or services; and that you will update and maintain the accuracy of your contact information. Your + violation of any of these representations and warranties may result in the suspension of your right to use the + Website or Services, as well as other remedies available to COS.

-

8. AUDIT TRAILS

+

10. AUDIT TRAILS

To ensure the transparency of the COS and as a feature of the OSF, we may, but are not required to, keep an audit - trail log when and by whom Project data or information has been deposited or changed and any changes to a - Project's privacy settings. While the COS requires all data deposited be accurate, the COS takes no responsibility - for the accuracy of the data on the Websites or the Services. Each party agrees to hold the other party and its - representatives and agents, and directors, officers and employees harmless regarding any disputes regarding data - deposits and privacy settings and any claims, regardless of theory of law, arising from such disputes. + trail log when and by whom Content or information has been deposited or changed and any changes to Content privacy + settings. While the COS requires all Content deposited be accurate, the COS takes no responsibility for the + accuracy of the Content on the Websites or the Services. Each party agrees to hold the other party and its + representatives and agents, and directors, officers and employees harmless regarding any disputes regarding + Content deposits and privacy settings and any claims, regardless of theory of law, arising from such disputes.

-

9. PERMITTED AND PROHIBITED USES

+

11. PERMITTED AND PROHIBITED USES

The COS operates open services developed by and for the research community. We encourage you to consider community norms and expectations in your use of the Websites and Services. @@ -321,12 +388,12 @@

9. PERMITTED AND PROHIBITED USES

any applicable local, state, national, or international law. You are further prohibited from harvesting addresses, email addresses, or other personal data for commercial purposes and from sending unsolicited or unauthorized advertising, promotional materials, or other unsolicited communications to other users of the Websites or - Services. You may not use the Websites or Services in a way that harms the COS or the COS's members, affiliates or - vendors, or other users. You may not deposit, edit, modify, or otherwise use any data in a manner that makes it - false, incomplete or misleading, except to anonymize or protect identifying information as required by ethical or - legal prescriptions for sharing data. You may not manipulate identifiers to disguise the origin of any data. You - may not use COS or the COS marks in any way to suggest an affiliation with or endorsement by the COS of any - individual, organization, product, service, or research. + Services. You may not use the Websites or Services in a way that harms the COS or the COS's affiliates, vendors, + or other users. You may not deposit, edit, modify, or otherwise use any Content in a manner that makes it false, + incomplete or misleading, except to anonymize or protect identifying information as required by ethical or legal + prescriptions for sharing data. You may not manipulate identifiers to disguise the origin of any data. You may not + use COS or the COS marks in any way to suggest an affiliation with or endorsement by the COS of any individual, + organization, product, service, or research.

You acknowledge that your unauthorized use or misuse of the Websites and Services could cause the COS irreparable @@ -338,31 +405,30 @@

9. PERMITTED AND PROHIBITED USES

-

10. LIMITATION OF ACCESS AND REMOVAL OF CONTENT

+

12. LIMITATION OF ACCESS AND REMOVAL OF CONTENT

The COS makes commercially reasonable efforts to maintain and provide access to its Websites and Services and will endeavor to provide you with advance warning of restrictions to access due to routine website maintenance. The COS, at its sole discretion, however, reserves the right at any time and from time to time to modify, suspend, - discontinue, or terminate the Websites or Services or portions thereof with or without notice. You agree that we + discontinue, or terminate the Websites or Services or portions thereof with or without notice. You agree that COS will not be liable to you or to any third party for any modification, suspension, discontinuation, or termination - of the Websites or Services. While the COS will endeavor to continue to host all Projects, as a non-profit entity, + of the Websites or Services. While the COS will endeavor to continue to host all Services, as a non-profit entity, it cannot guarantee that it will have the resources to do so over time, and it reserves the right to designate a substitute host of its choosing for Project content if the COS does not have the financial means to do so itself in the future.

-

The COS is not responsible for screening or reviewing content submitted to the Websites or Services. The COS may temporarily or permanently remove any content on the Websites or Services at any time where the COS, in its sole - discretion believes the content is in violation of these Terms of Use or where the COS is acting in compliance + discretion, believes the content is in violation of these Terms of Use or where the COS is acting in compliance with the Digital Millennium Copyright Act. You are advised not to use the Websites or Services as the exclusive - storage repository for your data and content. The COS recommends that you separately store all data and content - submitted to the Websites and Services on other secure servers or with reputable third-party hosting services. + storage repository for your content. The COS recommends that you separately store all content submitted to the + Websites and Services on other secure servers or with reputable third-party hosting services.

-

11. SECURITY

+

13. SECURITY

The COS uses commercially reasonable, industry-standard measures to protect the security of the COS's Websites and Services. Despite these measures, we cannot guarantee that unauthorized persons will not be able to defeat our @@ -372,12 +438,24 @@

11. SECURITY

them to anyone. You will be solely responsible for any action, activities, and access to our Websites and Services that are taken using your username and password and that occurred before you notified us of their loss. If you become aware of any security breach of your password or of the security of the Websites or Services, you must - contact COS as soon as possible. + contact COS as soon as possible at + security@osf.io. +

+
+ +
+

14. RESEARCH ACTIVITIES

+

+ Certain Services or activities may be subject to additional terms, agreements, policies, or requirements. Where + you enter into a separate agreement with COS, including a research agreement, your use of the Services and + activities conducted pursuant to that agreement may be subject to the additional terms and requirements set forth + in that agreement. In the event of a conflict between these Terms and a separate agreement, the terms of the + separate agreement will govern to the extent specified in that agreement.

-

12. LINKS AND ADD-ONS

+

15. LINKS AND ADD-ONS

The Websites and Services may contain links or allow you to make use of Add-ons that connect to sites owned or operated by independent third parties. These links are provided for your convenience and reference only. The COS's @@ -390,16 +468,16 @@

12. LINKS AND ADD-ONS

automated search results or otherwise link you to sites containing information that may be deemed inappropriate or offensive, the COS cannot be held responsible for the accuracy, copyright compliance, legality, or decency of material contained in third-party sites or any results that may be obtained from using them. You hereby - irrevocably waive any claim against us with respect to such sites. + irrevocably waive any claim against COS with respect to such sites.

-

13. OSF SINGLE SIGN-ON AUTHENTICATION

+

16. OSF SINGLE SIGN-ON AUTHENTICATION

- The following terms apply to affiliated users who sign into or register for an account on the OSF by using Single - Sign-On (SSO) authentication and their credentials associated with an OSF Institutional member. These terms in no - way counter or replace any other terms in the COS Terms of Use. + The following terms apply to affiliated users who sign in to or register for an account on the OSF by using Single + Sign-On (SSO) authentication and their credentials associated with a Participating Institution or Organization. + These terms in no way counter or replace any other terms in the COS Terms of Use.

Single Sign-On (SSO). Refers to an authentication process that allows users to access multiple applications with @@ -416,7 +494,8 @@

13. OSF SINGLE SIGN-ON AUTHENTICATION

User Access. Access to the OSF through SSO is contingent upon the validity of the user’s credentials as verified by the institution’s IdP. If access is denied or suspended by the institution, the user may access the OSF via - another login method. No user data is lost or locked due to losing access to their institutional credentials. + another login method. Losing access to your institutional credentials does not by itself result in the loss of + your OSF account or data.

Data Transmission. The OSF does not receive or store your institution’s authentication credentials. We only @@ -428,16 +507,16 @@

13. OSF SINGLE SIGN-ON AUTHENTICATION

Data Visibility. Your content maintains the same access and permission options as described in the COS Terms of - Use, Section 6 “Privacy Settings Restricting Access to Content”. Administrators from your institution will see + Use, Section 8 “Privacy Settings Restricting Access to Content”. Administrators from your institution will see your affiliated public content in an insights dashboard, as well as the existence of and storage location of your private content in the aggregate. They will also see the email address associated with your SSO credentials. Some institutions will also share your department, which is only visible to institutional administrators.

Institutional Access Request. An administrator from your institution may contact you through OSF and may request - permission to be added as a contributor on your content. You will be notified of the request by the OSF via email, - and requests are visible on your content contributor page. Institutional administrators cannot make any - modifications to your content without your express approval of these requests. + permission to be added as a contributor on your content. You will be notified of the request by the OSF via the + email associated with your OSF account, and requests are visible on your content contributor page. Institutional + administrators cannot make any modifications to your content without your express approval of these requests.

Institutional Responsibilities. Your institution is responsible for managing user accounts on their IdP. Any @@ -445,9 +524,12 @@

13. OSF SINGLE SIGN-ON AUTHENTICATION

Service Responsibilities. The OSF will ensure that any data transmitted through SSO is handled in accordance with - our Terms of Use, as well as the SSO Addendum. User Responsibilities. Users must comply with both their - institution's policies and the COS Terms of Use. Unauthorized access or use of the OSF is prohibited. You should - refer to your institution for any relevant policies that they maintain. + our Terms of Use, as well as the SSO Addendum. +

+

+ User Responsibilities. Users must comply with both their institution's policies and the COS Terms of Use. + Unauthorized access or use of the OSF is prohibited. You should refer to your institution for any relevant + policies that they maintain.

Access via SSO Termination. If your institution’s agreement with COS is terminated, or if your institutional @@ -472,7 +554,7 @@

13. OSF SINGLE SIGN-ON AUTHENTICATION

-

14. INDEMNIFICATION

+

17. INDEMNIFICATION

To the extent authorized by law, you agree to defend, indemnify, and hold harmless COS, its employees, directors, officers, affiliated companies, agents, vendors, or suppliers from and against any and all claims, damages, costs, @@ -487,7 +569,7 @@

14. INDEMNIFICATION

-

15. TERMINATION

+

18. TERMINATION

These Terms of Use are effective until terminated by either party. If you no longer agree to be bound by these Terms, you must cease use of the Websites and Services. If you're dissatisfied with the Websites, their content, @@ -503,7 +585,7 @@

15. TERMINATION

-

16. WARRANTY DISCLAIMER

+

19. WARRANTY DISCLAIMER

NOTWITHSTANDING ANY OTHER PROVISION HEREIN TO THE CONTRARY TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW: (1) THE WEBSITES AND SERVICES ARE PROVIDED ON AN "AS IS" AND @@ -538,7 +620,7 @@

16. WARRANTY DISCLAIMER

-

17. LIABILITY LIMITATION

+

20. LIABILITY LIMITATION

NOTWITHSTANDING ANY OTHER PROVISION HEREIN TO THE CONTRARY AND TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW: UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL OR EQUITABLE THEORY, WHETHER IN TORT, CONTRACT, NEGLIGENCE, STRICT @@ -560,19 +642,19 @@

17. LIABILITY LIMITATION

-

18. USE OF SOFTWARE

+

21. USE OF SOFTWARE

If you download code or software tools (the "Software") from the Websites or Services, the use of the Software is subject to the license terms in the Software License Agreement that accompanies or is provided with the Software. If a Software License Agreement does not accompany or is not provided with the Software and/or the Software is - sample or beta code or is provided for evaluation purposes, then you must contact the Project Administrator for + sample or beta code or is provided for evaluation purposes, then you must contact the Content Administrator for the applicable Software License Agreement. You may not download or install the Software until you have read and accepted the terms of the applicable Software License Agreement.

-

19. TRADEMARKS

+

22. TRADEMARKS

Center for Open Science, COS, Open Science Framework, OSF, OSF Preprints, OSF Registries, OSF Meetings, OSF Institutions, OSF Reviews, OSF Collections, Thesis Commons, and their associated logos (collectively, "COS Marks") @@ -590,91 +672,83 @@

19. TRADEMARKS

-

20. ASSIGNMENT

+

23. ASSIGNMENT

Users may not assign or otherwise transfer the rights or obligations hereunder without the prior written consent of the COS, which assignment will not be unreasonably refused. Any purported transfer without the COS's written authorization shall be void. The COS reserves the right to transfer all of its rights and obligations under these - Terms of Use, including ownership and/or operation of the COS to another non-profit entity continuing the COS's - purpose, in the event of a merger, joint venture, dissolution, or other organizational change. In no event shall - the COS's merger with or assignment of rights and obligations to a successor entity that carries on the COS's - purpose constitute a material breach or cessation of operations under these Terms. + Terms of Use, including ownership and/or operation of the COS or OSF to COS AISBL or another non-profit entity + continuing the COS's purpose, in the event of a merger, joint venture, dissolution, or other organizational + change. In no event shall the COS's merger with or assignment of rights and obligations to a successor entity that + carries on the COS's purpose constitute a material breach or cessation of operations under these Terms.

-

21. PROCEDURE FOR MAKING CLAIMS OF COPYRIGHT INFRINGEMENT

+

24. PROCEDURE FOR MAKING CLAIMS OF COPYRIGHT INFRINGEMENT

In accordance with the Digital Millennium Copyright Act (17 USC § 512), any notifications of claimed copyright infringement must be sent to our Designated Agent:

- Nici Pfeiffer, Chief Product Officer, Center for Open Science P.O. Box 5, Earlysville, Virginia 22936 or sent via - e-mail to - copyright@cos.io + Nici Pfeiffer, Chief Product Officer, Center for Open Science, 6218 Georgia Avenue NW, Suite #1 Unit 3189, + Washington, DC 20011 or sent via e-mail to + copyright@cos.io, +1(434) 214-0523

-

22. GENERAL

-

- The COS is based in the United States. The COS makes no claims that the data or content on its Websites or - Services is appropriate or may be downloaded outside of the United States. Access to the Websites and Services may - not be legal by certain persons or in certain countries. If you access the Websites from outside the United - States, you do so at your own risk and are responsible for compliance with the laws of your jurisdiction. These - Terms are governed in all respects by the laws of the Commonwealth of Virginia, excluding that state's conflicts - of laws provisions. Any action or proceeding arising out of or related to these Terms or your use of the Websites - or Services must be brought in the state or federal courts of the Commonwealth of Virginia, and you consent to the - exclusive personal jurisdiction and venue of such courts. Any cause of action you may have with respect to your - use of the Websites or Services must be commenced within one (1) year after the claim or cause of action arises. - Without limiting the foregoing provision, the parties agree that the Virginia Uniform Computer Information - Transactions Act, Virginia Code §§ 59.1-501.1 et seq ("UCITA"), is expressly excluded from these Terms and that - any and all terms contained in UCITA will have no force and effect on any portion of these Terms, the Websites, or - the Services. The provisions of the UN Convention on Contracts for the International Sale of Goods will not apply - to these Terms, and you expressly waive all rights of application or appeal, if any, to non-U.S. courts in - connection with any question of law. A party may give notice to the other party only in writing at that party's - principal place of business, attention of that party's principal legal officer, or at such other address or by - such other method as the party shall specify in writing. Notice shall be deemed given upon personal delivery or - facsimile with proof of receipt of transmission, or, if sent by certified mail with postage prepaid, five business - days after the date of mailing, or, if sent by international overnight courier with postage prepaid, seven - business days after the date of mailing. If any provision herein is held to be unenforceable, the remaining - provisions will continue in full force without being affected in any way. Further, the parties agree to replace - such unenforceable provision with an enforceable provision that most closely approximates the intent and economic - effect of the unenforceable provision. Section headings are for reference purposes only and do not define, limit, - construe, or describe the scope or extent of such section. The failure of the COS to act with respect to a breach - of these Terms by you or others does not constitute a waiver and shall not limit the COS's rights with respect to - such breach or any subsequent breaches. These Terms set forth the entire understanding and agreement of the - parties, and supersede any and all oral or written agreements or understandings between the parties, as to their - subject matter. -

-

- If you are a resident of or are located in the European Union or European Economic Area (“EEA”), you may also have - certain rights under the General Data Protection Regulation (“GDPR”). Personal information (“Personal Data”) you - provide is only collected with your consent, and is subject to the terms of the COS Privacy Policy, which may be - found - here. -

-

- Contact COS at {{ supportEmail }}, if you have concerns regarding your Personal Data, or wish to exercise any of your rights under the GDPR. +

25. GENERAL

+

+ The COS is based in the United States, and the Services are operated from the United States and the European + Union. These Terms are governed in all respects by the laws of the Commonwealth of Virginia, excluding that + state's conflicts of laws provisions. Any action or proceeding arising out of or related to these Terms or your + use of the Websites or Services must be brought in the state or federal courts of the Commonwealth of Virginia, + and you consent to the exclusive personal jurisdiction and venue of such courts. Any cause of action you may have + with respect to your use of the Websites or Services must be commenced within one (1) year after the claim or + cause of action arises. Without limiting the foregoing provision, the parties agree that the Virginia Uniform + Computer Information Transactions Act, Virginia Code §§ 59.1-501.1 et seq ("UCITA"), is expressly excluded from + these Terms and that any and all terms contained in UCITA will have no force and effect on any portion of these + Terms, the Websites, or the Services. The provisions of the UN Convention on Contracts for the International Sale + of Goods will not apply to these Terms. COS may give you notice by email to the address associated with your + account or by posting on the Websites. You may give notice to COS by email to + contact@cos.io or by mail to the address in Section 24. Notice shall be + deemed given upon personal delivery or email with proof of receipt of transmission, or, if sent by certified mail + with postage prepaid, five business days after the date of mailing, or, if sent by international overnight courier + with postage prepaid, seven business days after the date of mailing. If any provision herein is held to be + unenforceable, the remaining provisions will continue in full force without being affected in any way. Further, + the parties agree to replace such unenforceable provision with an enforceable provision that most closely + approximates the intent and economic effect of the unenforceable provision. Section headings are for reference + purposes only and do not define, limit, construe, or describe the scope or extent of such section. The failure of + the COS to act with respect to a breach of these Terms by you or others does not constitute a waiver and shall not + limit the COS's rights with respect to such breach or any subsequent breaches. Except for any separate terms, + agreements, consent forms, or notices described in Sections 1 and 14, these Terms set forth the entire + understanding and agreement of the parties, and supersede any and all oral or written agreements or understandings + between the parties, as to their subject matter. Nothing in these Terms of Use limits any rights you have as a + consumer under the mandatory laws of the country where you live, including the right to bring proceedings in the + courts of that country. If you are a consumer located in the European Union, the European Economic Area, or the + United Kingdom, the choice of law, choice of forum, and one-year limitation period in this Section, and Sections + 3, 15, 17, 18, 19, and 20, apply only to the extent permitted by those mandatory laws. +

+

+ If you are located in the European Union, European Economic Area, or United Kingdom, you have rights regarding + your personal data, described in the + COS Privacy Policy. + Contact {{ supportEmail }} to exercise those rights.

-

23. RESERVATIONS OF RIGHTS

+

26. RESERVATIONS OF RIGHTS

All rights not explicitly granted herein are reserved.

-

24. QUESTIONS

+

27. QUESTIONS

If you have questions or comments concerning these Terms of Use, you may email us at contact@cos.io. Support is provided in English only.
These Terms of - Use were last updated on January 10, 2025. -

-

- Version history for this policy is available - here. + Use were last updated on November 15, 2026.