# Privacy Policy & Data Sovereignty Covenant - Commune9

> Canonical URL: https://commune9.org/privacy
> Effective Date: March 2026
> Standards: GDPR, CCPA, RFC 9110
> Compliance Officer: contact@commune9.org

---

## What is the Commune9 Data Sovereignty Covenant?

The Commune9 Data Sovereignty Covenant is a legally binding Zero Unauthorized AI Training commitment guaranteeing zero unauthorized foundation model training on user code, prompts, technical diagrams, or API submissions. Commune9 affirms that developer intellectual property belongs exclusively to the author and is never ingested into foundation model training datasets.

---

## What data does Commune9 collect and how is it used?

Commune9 collects only the minimal technical data required to maintain platform reliability: voluntary contact form submissions, developer API authentication telemetry for rate limiting and abuse prevention, and anonymized server logs to diagnose 404 broken links. Commune9 never collects behavioral tracking data or sells user analytics to commercial advertisers.

- **Voluntary Submissions**: Contact name, corporate email address, and project scope submitted via /contact forms.
- **API Telemetry**: Request latency, HTTP status codes, and IP rate-limiting buckets solely to prevent denial-of-service abuse.
- **Routing Diagnostics**: Anonymized HTTP referrer headers to detect and repair 404 broken links across documentation pages.

---

## How does Commune9 comply with GDPR and CCPA privacy standards?

Commune9 complies with global GDPR and CCPA privacy frameworks by providing users full rights of data access, portability, and permanent erasure. Any developer or community member can request complete deletion of their account records, API keys, and correspondence by submitting a formal request to contact@commune9.org.

| Data Classification | Storage Duration | Third-Party Sharing | Erasure Method |
| :--- | :--- | :--- | :--- |
| **Contact Submissions** | Duration of Active Engagement | Zero Third Parties | Immediate on Email Request |
| **API Telemetry Logs** | 30 Days Rolling Purge | Zero Advertising Networks | Automated TTL Pruning |
| **Model Benchmarking Data** | Public Open Benchmark | Anonymized Community Commons | Permanent Open License |
| **Session Preferences** | Local Storage Only | Never Transmitted Off Client | Browser Cache Clear |

---

*Commune9 - The Premier AI Community & Engineering Collective.*
*Canonical URL: https://commune9.org/privacy*