Scope and controller
This Policy applies to Brown Virtual Lab Site visits, inquiries, member profiles, professional intakes, lab-hub intakes, curriculum participation, collaboration spaces, project-template assignments, directories, events, and owner operations. My Heart Opulence LLC dba Heart Innovation & Equity Research Institute serves as the Site operator and data steward for these Site functions, subject to project-specific agreements and institutional responsibilities.
Public inquiry information
Inquiry records may include name, email address, scholarly stage, area of inquiry, message, consent, status, and submission time. These records support response, fit review, routing, and follow-up.
Member profile information
Member profiles may include account identifier, email, display and legal names, title, institution, department, discipline, career stage, participation category and basis, prior Lab relationship, home lab, location, time zone, introduction, biography, interests, methods, goals, strengths, contribution preferences, ten learning-and-benefit statements, group preferences, availability, contact preference, languages, professional links, accessibility needs, publication permissions, meeting-recording choice, acknowledgments, signature, review status, notes, and timestamps.
Lab-hub intake information
Lab-hub intake records may include lab and institution names, department, website, lead identity and contact, location, time zone, proposed group-space name, existing relationship, estimated group size, disciplines, goals, questions, expertise, resources, mentorship capacity, template and partner preferences, start window, working rhythm, institutional authority, data stewardship, ethics and compliance pathway, accessibility and language considerations, publication permission, meeting-recording plan, acknowledgments, signature, review status, notes, and timestamps.
Curriculum learning records
Signed-in curriculum participants may create learning records that include pathway, module, selected assessment answers, scores, best scores, pass status, attempt count, guided reflections, completion time, and update time. These records support immediate feedback, learning continuity, completion review, mentoring, and authorized program administration. Reflections should exclude protected health information, identifiable clinical or research-participant information, confidential datasets, authentication secrets, and restricted third-party material.
Operational scholarly records
Restricted workspaces may contain project and manuscript metadata, contributor labels, roles, assignments, meetings, support records, readiness gates, contribution evidence, review decisions, authorship recommendations, claims, revision records, dissemination status, credential evidence, and governed references. Administrators enter only authorized operational summaries.
Meeting recording records
When a live session may be recorded or transcribed, the Site may store each participant's stated recording choice and an owner-entered operational record of advance notice, opening notice, recording status, purpose, approved audience, consent confirmation, transcript or recording repository reference, withdrawal or pause, and retention-review date. Audio, video, and transcript files follow the approved meeting platform and repository rather than general intake forms.
A meeting may proceed unrecorded. Permission for a disclosed internal meeting recording does not authorize public excerpts, testimonials, publication, training data, or research use. Those purposes require their own permission and any applicable institutional or ethics review.
Technical and audit information
Instrumented activity may create a server-side record containing server time, IP address, approximate country, pseudonymous session identifier, route, event category, component, action, outcome, consent choice, user agent, referrer, language, viewport, page visibility, and limited error or performance information. Routine audit events exclude passwords, authentication secrets, free-form contents, and sensitive field values.
Purposes
Information supports Site delivery, identity-aware features, response and review, curriculum delivery and progress, group formation, project assignment, profile permissions, directory publication, accessibility, security, consent provenance, misuse prevention, troubleshooting, legal compliance, scholarly accountability, publication stewardship, and requested communication.
Publication permissions
Introduction, biography, lab name, institution name, and other publicity fields appear only after the applicable permission and review. A member may select owner review, approved group visibility, or collaborator-directory visibility. Biography permission remains independently selectable.
Recipients and service providers
Authorized Brown Virtual Lab administrators and approved collaborators receive information according to role and permission. Hosting, security, analytics, forms, and operational service providers process limited information required for their functions. Legal disclosure, safety protection, and lawful organizational transitions follow applicable requirements.
Retention and security
Operational audit records are generally retained for twenty-four months. Other records remain for the period reasonably needed for the stated purpose, participation history, legal obligations, claims, security, correction, and record integrity. Access controls, authentication, role restrictions, logging, secure transmission, review, suspension, and deletion or de-identification support protection.
Rights and choices
Applicable law may provide access, correction, deletion, restriction, objection, portability, and consent-withdrawal rights. Identity verification protects the record. Directory and biography permissions can be revised through the profile pathway or a verified request.
International access and minors
Information may be processed in the United States and authorized service-provider locations. International projects receive project-specific review of transfers, local requirements, language, accessibility, and institutional authority. The general public Site is designed for users age thirteen and older. Structured opportunities involving minors require appropriate adult authorization and safeguards.
Contact
Privacy and permission requests may be sent to connect@drbrowncares.com.