Privacy Policy

Effective date: 31 August 2026

This policy describes how Rex Autistikon Research Foundation, Inc. handles information when you use rexautistikonlabs.org. It is written in plain language. It is not a clinic privacy notice, because this organization is not a clinic.

Who controls this site

The data controller is:

Rex Autistikon Research Foundation, Inc.
1485 Fouraker Rd #2402
Jacksonville, FL 32221
United States
info@rexautistikonlabs.org

Rex Autistikōn Labs is the research initiative operated by the Foundation. This site is operated for the Foundation’s research, publication, collaboration, and nonprofit operations.

What we collect

Server logs and security records. Our host (Azure Static Web Apps and related Microsoft Azure services) may record IP address, date and time, requested path, referrer, and browser or device type. These records are used to operate, secure, and debug the site.
Contact form fields. If you use the Foundation contact form, we receive name, institutional email, role, topic, and message. Submissions are delivered by email to info@rexautistikonlabs.org. A form-delivery processor may transmit that message on our behalf.
Collaborator access-request fields. If you request platform access, we receive investigator name, institutional email, organization, role, optional department, intended use, IRB/ethics status, preferred start date, and the compliance acknowledgements you check.
Microsoft sign-in for approved collaborators. The collaborator portal (including Data Intake, Results, and admin tools) requires Microsoft Entra ID sign-in. Microsoft authenticates the account. We receive the identity needed to authorize access for approved collaborators only. Submitting a request does not itself provision access.
Collaborator research data. Approved collaborators may submit coded measurement data through the secure intake tools. Those data are stored in a secure Azure environment controlled by the Foundation. They are not shared outside approved collaborators without written agreement.
Donation processor data. Gifts are processed on Zeffy’s domain, not on this site. Zeffy collects payment and donor information needed to complete the transaction. The Foundation does not store full card numbers. We may receive donor name, contact details, gift amount, and receipt information from Zeffy.
Optional measurement tags. If Google Analytics 4 (and, if linked, Google Ads conversion tags) are configured for this site, those tools may collect page views and named events described in our internal tracking notes. This is optional measurement for nonprofit operations and advertising accountability. If a measurement ID is not configured, those tags are not loaded.

Cookies and analytics

Essential cookies or similar storage may be used for security and for Microsoft sign-in on protected collaborator routes. If Google Analytics 4 or Google Ads conversion tags are enabled, Google may set cookies or use similar storage to count visits and advertising outcomes. We do not use those tags to measure time on page, scroll depth, or use of the interactive model. We do not run Google AdSense.

Microsoft Entra / collaborator portal

Access to /intake, /results, and administrative collaborator tools is restricted to authenticated, approved accounts. Sign-in is handled by Microsoft Entra ID. The Foundation assigns access after review. Portal use is for legitimate scientific research consistent with the Labs’ programme. See How to Collaborate and Collaboration Governance.

Collaborator research data

Research data submitted by approved collaborators are stored in a secure Azure environment controlled by Rex Autistikon Research Foundation, Inc. They are not sold. They are not shared outside approved collaborators without explicit written agreement. Direct identifiers of research participants are not required by the platform; collaborators remain responsible for their own ethics/IRB obligations. Further detail is on the IRB & Ethics FAQ.

Donations

The donate button on this site sends you to Zeffy on a third-party domain. Payment details are handled by Zeffy. The Foundation does not store full card numbers. Zeffy’s own privacy terms apply to that checkout. Return to this domain after a gift, if configured, does not by itself prove that a payment completed.

We do not sell personal data

The Foundation does not sell personal information. We do not share personal information for cross-context behavioral advertising. Optional measurement, when enabled, is used to understand whether public information and nonprofit advertising on this domain are reaching the intended audiences.

Retention

Server logs are kept as needed for security and operations. Contact correspondence is kept as organizational records for as long as needed to respond and to maintain a record of the inquiry. Collaborator access records and research data are retained according to the written collaboration arrangements and applicable research record requirements. Donor records received from Zeffy are retained as needed for tax, accounting, and acknowledgment.

Access and correction

To request access to personal information we hold about you, or to ask for a correction, email info@rexautistikonlabs.org. We may need to verify that the request comes from the right person.

Children

This site is not directed at children. Collaborator intake is institutional: we expect requests from researchers and other adults acting for universities, laboratories, or similar organizations. We do not knowingly collect personal information from children through this website.

Where we are based

The Foundation is a United States organization. The site is hosted in Microsoft Azure regions used for our operations. Visitors from outside the United States may use the public pages. If you are such a visitor and have questions about international transfer or our handling of your information, contact info@rexautistikonlabs.org.

Changes

We may update this policy. The effective date above will change when we do. The current version will be posted at this URL.