Privacy Policy

1. Information We Collect

Search Activity

When you use the search engine, our servers log the search query, your approximate location (country level, derived from IP) and the timestamp. We do not retain raw IP addresses beyond seven days; aggregated counts are kept indefinitely as part of public statistics (manuscript view counts, popular search terms in aggregate).

Account Information (when applicable)

If you create an account to transcribe a manuscript or contribute corrections, we collect your name, email address, and a hashed password. If you sign in via an external identity provider, we receive your name and email from that provider only.

Transcriptions and Contributions

When you transcribe a manuscript page or submit a correction, we store the transcription text, the manuscript reference, and your contributor identity (for attribution). Transcriptions are published openly under a CC BY-SA license with attribution to you, unless you specifically opt out.

Cookies

We use a small number of functional cookies (session identification, language preference). We do not use advertising cookies, tracking pixels, or third-party analytics that profile you across sites. Full details in our Cookie Policy.

2. How We Use Your Information

• To provide and operate the search engine and the transcription workflow.
• To attribute transcription work to contributors on the public scholarly record.
• To produce aggregate, non-identifying statistics about manuscript discovery (top-viewed records, geographic spread).
• To send transactional emails (account verification, password reset, system notifications) and, where applicable, scholarly correspondence.
• To detect and prevent abuse of the service (rate limiting, anti-scraping).

3. Third-Party Services

We use the following third-party services to operate the platform. Each is contracted under their own privacy terms; we link to each.

• DigitalOcean — server hosting and object storage for uploaded manuscript images. DigitalOcean privacy policy.
• Google Cloud (Gemini API) — used for OCR processing of manuscript page images on a per-request basis. Submitted images are not retained by Google beyond the processing window. Google privacy policy.
• Postmark — transactional email delivery (verification emails, scholarly correspondence). Postmark privacy policy.
• Hostinger — domain registration, DNS, and inbound mail hosting. Hostinger privacy policy.

We do not share your information with marketing partners, data brokers, or advertising networks.

4. Manuscript Images and Source Libraries

Kairawan does not hold manuscripts; we federate catalogue records from holding institutions (BnF Paris, BSB Munich, Princeton, HMML, Bodleian, Cambridge, Vatican, and others). Every search result attributes its source institution and links to the holding library's own viewer for the manuscript image. The source library remains the rights-holder; we never claim ownership.

5. Data Retention

Search query logs with IP: 7 days. Aggregated query and view counts: indefinitely. Account profile information: until you request deletion. Transcriptions and contributions: retained indefinitely as part of the published scholarly record, with attribution.

6. Your Rights

You have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and personal information (transcriptions you contributed remain published with anonymised attribution).
• Export your data in a portable format.
• Object to processing or withdraw consent for optional processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@kairawan.org.

7. International Data Transfers

Our hosting and processing infrastructure operates from data centres in the United States and the European Union. By using Kairawan, you acknowledge that your data may be transferred to and processed in these jurisdictions, under Standard Contractual Clauses where applicable.

8. Children's Privacy

Kairawan is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a minor has provided us information, please contact us and we will delete it.

9. Changes to This Policy

We will update this policy as the service evolves. Material changes will be announced on this page and, where applicable, by email to registered users. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For privacy-related inquiries or to exercise the rights listed above:

Email: privacy@kairawan.org
Website: kairawan.org