Skip to content

Privacy Policy

Project NANDA is committed to respecting your privacy. As an open initiative steward under the Foundation for Agentic Networks (FAN), our core mission is advancing open, decentralized, and federated infrastructure. We adhere to principles of minimal data collection, transparency, and user sovereignty.

Last updated: September 2026

1. Scope & Overview

This Privacy Policy explains how Project NANDA and the Foundation for Agentic Networks (FAN) ("we", "us", or "our") collect, use, and protect information when you visit projectnanda.org and associated documentation portals, open-source resources, or communicate with us directly.

Decentralization-First Principle: Project NANDA builds protocols and specifications designed to operate with minimal centralized metadata. We do not sell, rent, monetize, or broker personal data.

2. Information We Collect

We only collect information that is strictly necessary to operate our public documentation, process community requests, and maintain the security and reliability of our open resources.

A. Information You Provide Directly

  • Direct Communications: When you contact us via email at contact@projectnanda.org (for chapter registration, research inquiries, paper reviews, or fellowship applications), we receive your email address and any information you choose to include in your correspondence.
  • Community Forms & Applications: If you voluntarily submit Google Forms or surveys linked from our site (such as paper review submissions, speaker registrations, or hackathon applications), we collect the information submitted in those specific forms according to the stated purpose.

B. Automatically Collected Technical Data

When you access our static documentation and website, standard technical information may be temporarily recorded by our hosting infrastructure and Content Delivery Networks (CDNs) for diagnostics, performance, and security:

  • Browser type and version
  • Operating system
  • Referring URL
  • Date and timestamp of requests
  • Generalized, anonymized IP addresses used solely for DDoS protection, rate-limiting, and error diagnosis

We do not perform user fingerprinting, cross-site tracking, or behavioral profiling.

3. Cookies & Local Storage

  • No Advertising Cookies: We do not deploy third-party advertising cookies or commercial tracking pixels.
  • Functional Preferences: We may utilize lightweight browser local storage or session cookies solely for functional site preferences (such as remembering UI theme preferences, sidebar navigation states, or dismissible notices).

4. How We Use Information

Information collected is used exclusively for:

  1. Operating the Website: Ensuring our documentation, research papers, specifications, and portal assets load fast and reliably.
  2. Community Engagement: Responding to your questions, coordinating chapter formations, managing hackathons, and stewarding collaborative paper reviews.
  3. Security & Integrity: Detecting and mitigating automated attacks, abuse, spam, or malicious activity against our web endpoints.
  4. Open-Source Archival: Preserving open-source contributions, pull requests, and peer reviews that you voluntarily publish under open licenses.

5. Third-Party Services & Open Source

Our website and community hubs interact with reputable external platforms:

  • GitHub: All source code, specifications, and issue discussions are hosted publicly on GitHub in accordance with GitHub’s Privacy Statement and the MIT License.
  • Community Platforms: External links to community discussion channels (e.g., Discord, WhatsApp, Luma, LinkedIn) are governed by the privacy policies of those respective services. We encourage reviewing their individual privacy practices.
  • Hosting & CDN: Our public documentation is served over global, privacy-conscious Content Delivery Networks that enforce TLS encryption in transit.

6. Information Sharing & Disclosure

We do not sell, trade, or transfer your personal information to third parties. We may only disclose information under the following limited circumstances:

  • Explicit Consent: When you have granted explicit permission (e.g., publishing your name and affiliation on an Innovation Council or author roster upon your request).
  • Legal Requirements: If required by applicable law, regulation, or valid legal process.
  • Protection of Rights: When necessary to enforce our site policies, protect against fraud, or defend the rights, property, or safety of Project NANDA, FAN, or our community.

7. Data Retention & Security

  • Security: We implement industry-standard administrative, technical, and physical safeguards—including ubiquitous HTTPS/TLS encryption—to protect information from unauthorized access, loss, or disclosure.
  • Retention: Personal correspondence and application records are retained only for as long as needed to fulfill the inquiry or community program, after which they are securely archived or deleted.

8. Your Rights & Choices

Depending on your jurisdiction, you may hold rights regarding your personal information, including:

  • Access & Portability: The right to request copies of personal information we hold about you.
  • Correction: The right to request corrections to inaccurate or incomplete information.
  • Deletion: The right to request deletion of personal information you have provided to us, subject to legitimate archival or legal obligations.

To exercise any of these rights, please contact us at contact@projectnanda.org.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect technological developments, legal requirements, or community governance updates. When changes occur, the "Last updated" date at the top of this page will be revised accordingly.

10. Contact Us

If you have questions or feedback regarding this Privacy Policy or our data practices, please reach out to: