Privacy & Data Policy
Last updated: 7 September 2026 · This policy describes what this site actually does, not what a template says it should do. The ecosystem-wide policy lives at aifirstnation.org/privacy-policy; this page covers community.aifirstnation.org specifically.
Who is responsible
This community is run by Laurence Liew, sole operator, from Singapore. I am also the PDPA data protection contact. Reach me via the contact page for anything in this policy — access, correction, deletion, or questions.
What this site collects
Your account
When you join: your name, the username you choose, your email address, and a password (stored only as a one-way hash — I cannot read it). Optionally: a short bio, avatar, and social links for your profile. Your email address is never shown publicly.
What you post
Posts, comments, reactions, and badges. This is a public community by default: your display name, avatar, and posts are visible to anyone, including visitors who are not signed in. Post and comment history is kept until you delete it or ask me to.
Login security records
To protect accounts, the site records each sign-in — IP address, browser type, and timestamp. These records are automatically deleted after 30 days. Sign-in works by password or an emailed link/code, so the site sends you emails when you (or anyone) attempts to sign in as you.
Email delivery and spam screening
Emails (sign-in links, codes, and notifications) are delivered through SMTP2GO, which processes delivery data as a service provider. Form submissions and sign-ups are screened by CleanTalk, which receives your email, name, IP address, and browser type for spam checking.
What this site does not do
No analytics, no advertising, no tracking pixels, no profiling, no selling of data. The newsletter of the wider AI-First Nation ecosystem is separate and strictly opt-in via the main site.
Children and young people
The community is aimed at ages 16 and above. Under 16 requires a parent or guardian to enrol and consent on your behalf; under 13 is not accepted.
Where your data is processed
Providers involved: Cloudflare (site delivery and security; US-based, EU–US Data Privacy Framework participant), SMTP2GO (email delivery), CleanTalk (spam screening), and Google only if you play a YouTube video embedded in a post. Everything else runs on the site’s own hosting.
Your rights
Full PDPA and GDPR rights: access, correction, deletion, a copy of your data, withdrawal of consent, objection, and restriction. Deleting your account removes your profile and login; your posts can be deleted or anonymised on request — your choice. I respond within 7 business days, normally much sooner.
Changes
The date at the top updates with any revision; the live page governs. Related documents: Terms of Use and the Cookie Statement.