Effective date: August 6, 2026
The Institute for Computer-Aided Reasoning in Mathematics (“ICARM”) is an NSF Mathematical Sciences Research Institute at Carnegie Mellon University (“CMU”). This policy describes practices specific to ICARM’s website and online services and supplements the Carnegie Mellon University Privacy Notice.
What information we collect and why
Accounts, applications, and participation
ICARM uses ORCID for sign-in. We receive your ORCID identifier and name, but not your ORCID password. We separately collect your email address and researcher-profile information, including your country, state if applicable, institution, department, education, employment type, fields of expertise, and an optional professional website.
When you apply for or participate in an ICARM program, we may also collect:
- a statement of interest;
- a request for funding or travel support;
- dietary or accessibility needs;
- invitation and application status;
- program role; and
- dates of participation.
We use this information to administer accounts, review applications, select and communicate with participants, provide participant resources, organize programs, evaluate ICARM’s activities, and meet National Science Foundation reporting requirements.
Applications and participation information may be reviewed by ICARM personnel, program organizers, reviewers, and members of ICARM’s advisory boards who are involved in program selection, oversight, evaluation, or administration.
Where configured for a program, limited information about applications and participation status may be sent to a private organizer communication channel.
Email list
When you join the ICARM email list, we collect your name, email address, optional affiliation, subscription preferences, and a record of your consent.
We use this information to send ICARM announcements, including information about programs, applications, events, calls for proposals, and employment opportunities. ICARM uses Mailchimp to manage subscriptions and distribute email.
You may unsubscribe through the link included in any mailing or by contacting ICARM. We may retain limited suppression information after you unsubscribe so that we can honor your request.
Website operation
The ICARM website uses cookies necessary for sign-in, account sessions, security, and operation of the service.
ICARM and its service providers may collect and retain technical information such as IP addresses, request details, timestamps, device or browser information, error reports, and security logs. We use this information to operate, maintain, troubleshoot, and protect the website and its users.
Social-media publishing
ICARM operates an internal tool that publishes approved ICARM news and announcements to ICARM’s official accounts on services including LinkedIn, Facebook, X, Bluesky, and Mastodon.
The tool may store or process:
- access credentials or tokens;
- ICARM account, organization, or Page identifiers;
- approved post text and links;
- public post identifiers and URLs;
- publication status and timestamps; and
- error, diagnostic, and security logs.
The tool is used only for ICARM’s own institutional accounts. ICARM does not use it to collect followers, contacts, private messages, comments, connections, or individual social-media profiles.
Information published to a social-media platform is public and is also governed by that platform’s privacy policy and terms.
ICARM uses LinkedIn’s Community Management API to publish approved content to ICARM’s official LinkedIn organization Page.
An authorized administrator of the ICARM LinkedIn Page grants access through LinkedIn. Authentication takes place through LinkedIn, and ICARM does not collect or store the administrator’s LinkedIn password.
To operate the integration, ICARM may store:
- an access token issued by LinkedIn;
- the ICARM LinkedIn organization identifier;
- limited authorization information needed to confirm access to the Page;
- content selected for publication;
- the resulting LinkedIn post identifier and public URL; and
- publication and error logs.
ICARM uses this information only to authenticate the integration, publish approved ICARM content, record the result, prevent duplicate publication, diagnose errors, and protect the integration against unauthorized use.
ICARM does not use LinkedIn-derived information for advertising, individual profiling, sale, rental, or data brokerage.
An authorized administrator may revoke the integration through LinkedIn or request that ICARM disconnect it. Upon revocation, a valid deletion request, or discontinuation of the integration, ICARM will delete the LinkedIn access token and LinkedIn-derived identifiers that are no longer required, except where retention is required for legal, security, or audit purposes.
Content already published to LinkedIn may remain public until it is deleted from the ICARM LinkedIn Page. Deleting ICARM’s local publication record does not itself delete the public LinkedIn post.
How we share information
ICARM may share personal information with:
- ICARM and CMU personnel who need it to administer the institute or its programs;
- program organizers and reviewers involved in application review, participant selection, or program administration;
- members of ICARM’s advisory boards involved in program selection, oversight, evaluation, or administration;
- the National Science Foundation and other program funders for required reporting, evaluation, audit, or award administration;
- service providers used for authentication, website hosting, data storage, email, communications, security, and social-media publishing; and
- parties to whom disclosure is required by law or reasonably necessary to protect ICARM, CMU, the service, or its users.
ICARM does not sell or rent personal information.
Retention
ICARM retains information for as long as reasonably necessary for the purposes described in this policy.
Account information is generally retained while an account remains active. Application records are retained as needed for program administration, evaluation, institutional records, and reporting. Participation records may be retained indefinitely as part of ICARM’s institutional history and NSF reporting record.
Mailing-list information is retained while you remain subscribed, with limited suppression information retained after unsubscribing.
Social-media credentials are retained while the relevant integration remains authorized and in use. Publication records and technical or security logs are retained as reasonably necessary for operation, troubleshooting, security, and audit purposes.
Information may remain temporarily in protected backups after deletion from active systems.
Security
ICARM and CMU use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No online service or storage system can guarantee absolute security.
Your choices and rights
You may update your ICARM profile and unsubscribe from ICARM announcements.
You may request access to, correction of, export of, or deletion of personal information associated with your ICARM account. Some information may be retained where necessary for program administration, NSF reporting, institutional records, legal compliance, security, audit, or archival purposes.
Requests concerning social-media credentials or integrations may also be submitted to ICARM.
Third-party services
ICARM uses third-party services including ORCID, Mailchimp, hosting and infrastructure providers, communication services, and social-media platforms. Information processed by those services is also subject to their respective privacy policies and terms.
Links from the ICARM website to other websites do not imply that ICARM controls or is responsible for those websites’ privacy practices.
Changes to this policy
ICARM may update this policy as its programs, services, technologies, or legal obligations change. The current version will be posted on the ICARM website with its effective date.
Contact
Questions or requests concerning this policy or ICARM’s privacy practices may be sent to:
Institute for Computer-Aided Reasoning in Mathematics
Robert Mehrabian Collaborative Innovation Center
4720 Forbes Avenue
Pittsburgh, PA 15213
Email: info@icarm.io
Questions concerning Carnegie Mellon University’s privacy practices may be directed to:
Carnegie Mellon University Data Protection Officer
Email: privacy@andrew.cmu.edu