Privacy Notice
What we collect
- Your account: full name, email address, School ID Number, institution (MCNP or ISAP), course, year level, section, and your research title. Your password is stored only in scrambled (hashed) form; nobody can read it, not even the office.
- Your group: who is in your research group, and the email addresses of teammates you invite.
- Your research files and requirements you upload, plus the reviews, notes, decisions, defense schedules, payments and control numbers recorded about them.
- Messages between your group and the office, and any Help desk requests you send.
- Sign-in records: the time of each sign-in attempt, the email used, whether it worked, your IP address and your browser type. These protect your account from people guessing passwords.
iSubmit does not use your camera, microphone or location, and does not use advertising or tracking tools.
Why we use it
- To run the research process: receive and check your requirements, schedule your defenses, process statistics and plagiarism checks, and issue clearances.
- To tell you what happened to your paper, by email and inside iSubmit.
- To keep your account secure and to help you when you cannot sign in.
- To produce summary reports for the office (counts by phase, course and institution), which do not single anyone out.
Who can see it
- Your group sees your group's papers and progress.
- RDC staff see what their role needs: Focal Persons only their assigned courses, Research Coordinators only their own institution, and the Research Director, Secretary and statisticians what their work requires.
- The system administrator manages accounts and answers Help desk requests, and cannot approve or change research decisions.
- Your information is not sold or shared for marketing. It is disclosed outside the school only when the law requires it.
Services iSubmit relies on
| Service | What it receives |
|---|---|
| Cloud server (DigitalOcean) | Hosts iSubmit and its database, which hold everything above. |
| Email delivery (Brevo) | Your email address and the message, to deliver verification codes and notifications. |
| Google Fonts, unpkg, jsDelivr | Your IP address when your browser downloads the page's fonts and icons. |
| DiceBear avatars | Your name, to draw a default picture when you have not uploaded a profile photo. |
| Microsoft Office online viewer | A Word, Excel or PowerPoint file, only when someone previews one inside iSubmit. |
Cookies and browser storage
iSubmit uses one cookie, which keeps you signed in. It cannot be read by scripts or used by other websites, and it ends when you sign out or close your browser. Your browser also remembers a few settings, such as light or dark mode and whether you have seen the opening animation. None of these track you.
How long we keep it, and how we protect it
Your account and research records are kept for as long as the RDC needs them for the research process and its records, including after you finish, and are then removed or archived under the school's records policy. Access is limited by role, passwords are hashed, every review decision is logged with who made it, and the connection to iSubmit is encrypted (HTTPS).
Your rights
Under the Data Privacy Act you have the right to be informed, to access your information, to have wrong information corrected, to object, to have information erased or blocked where the law allows, to data portability, and to file a complaint with the National Privacy Commission (privacy.gov.ph). Much of your own information can be corrected yourself in your profile; for anything else, contact us below.
Contact us
Alimannao Hills, Peñablanca, Cagayan
researchoffice@mcnp.edu.ph · Mon–Fri 8:00 AM – 5:00 PM, Sat 8:00 AM – 12:00 PM
Questions about this notice can also be sent through the Help desk, or to the school's Data Protection Officer through the research office.
iSubmit