• Account details: name, ASM ID number, email, professional title, institution, department, country, phone number, and ORCID if provided.
• Submission content: abstract title, subtheme, keywords, full abstract text, co-author details, and the uploaded abstract document.
• Payment information: the currency you paid in and a receipt or screenshot of your bank transfer, uploaded for verification.
• Review activity: scores, recommendations, and comments, for reviewer accounts.
• Contact form messages: the name, email, subject, and message you provide, and the IP address your message was sent from (used only to prevent spam and abuse of the form).
• Conference registration: name, email, phone and institution if provided, participant category, a passport photograph (used to produce your participation pack and badge), your payment receipt or screenshot, and your ASM membership certificate if you register at the member rate. Registration does not require creating an account.

To route your abstract to the right reviewers, communicate submission and decision status, verify payment, compile the Book of Abstracts, respond to enquiries submitted through the contact form (including an automatic acknowledgement email), confirm conference registrations, and keep an audit record of conference decisions. We don't use your information for anything beyond running this conference.

Access is limited by role, not open by default:

• Reviewers see your abstract's content and subtheme only — never your name, institution, or contact details, to keep review double-blind.
• Committee members see full submission details, including author identity, to make a final decision.
• Payment and registration receipts are visible only to you and the administrator who verifies them — never to reviewers or the committee.
• Administrators have full access, needed to run the conference and support authors and reviewers directly, including contact form messages and conference registrations.

Data is stored with Supabase (database and file storage) and the application is hosted on Vercel. Uploaded files, including payment receipts, are kept in private storage that isn't publicly accessible. Emails are sent through a standard transactional email service and used only for conference-related notifications — never marketing.

Submission and account data is retained for 1 to 2 years after the conference concludes, for record-keeping and to support future editions of the conference, after which it may be deleted or anonymized on request.

You can review and correct most of your own details from your Profile page at any time. To request a copy of your data, a correction we can't make ourselves, or deletion of your account, contact asmnigeriaonehealth@gmail.com.

We process your data on the basis of your consent at registration and our legitimate interest in running the conference's review process, consistent with the Nigeria Data Protection Act 2023.

We don't sell or share your data with unrelated third parties. Supabase and our hosting/email providers act only as infrastructure for us and don't use your data independently.

If this policy changes materially, we'll update the date above and, where appropriate, notify registered users by email.