beta

Privacy

Panscia is built so that there is nothing for us to collect. Your files stay on your machine; the network holds only what you choose to list. This page says exactly what the software does with data, in plain words. The full terms are in the Panscia Commons Policy.

The app on your computer

• The Panscia app runs on your own computer. It is not a hosted service and there is no Panscia account.
• When you connect Dropbox, the app asks for access to one folder that Dropbox creates for it, Apps/Panscia. It cannot see, read or change anything outside that folder. If another storage provider is added later, it will be on the same one-folder terms, and this page will say so.
• The app reads the files in that folder and indexes them on your computer. The index, the descriptions it writes and the search data stay on your computer. No file, and no part of one, is sent to Panscia.
• The access token the provider gives the app is stored on your computer only, in the app's data folder, and is used only to read that folder. Panscia never receives it.
• To write a listing for a text file, the app sends up to the first 12,000 characters of it to the model provider you chose and whose key you supplied, under that provider's terms. Before it does, it replaces email addresses, phone numbers, US social security numbers and Visa card numbers with markers. The same applies to the text the app indexes and to the excerpt it publishes.
• Nothing you index is used to train any model, by Panscia or by anyone on the network. Every licence on the network forbids it.
• Disconnecting a source in the app deletes its token and its index from your computer. Removing the app's folder in the provider, or revoking its access there, cuts the app off immediately.
• The companion app on your phone pairs with your computer by a code you scan in person; you can revoke a phone from the computer at any time. The phone keeps its own key and signs each request, and requests travel sealed through the network's relay, which learns that a paired device spoke to your node and nothing else. The companion page at panscia.com/app is static; neither it nor the registry stores anything about your node or your phone.
• From a phone you can watch the node and manage what it sells. A phone cannot move funds, replace the wallet, read or export keys, connect a storage account or pair another device; the node refuses those from anything but the computer it runs on.

The registry

• The registry lists what nodes offer. For each node it holds the node's id, the name its owner chose, its public address, its listings and its share of network fees. It does not hold the node's files, the owner's cloud credentials or where the files are stored.
• A listing is what the owner publishes: a title, a description, what the file is and what it can be used for, the price and an excerpt of at most 1,000 characters with the identifiers above already removed. Listings are public by design; that is how agents find them.
• People and agents who search or buy are not registered, identified or tracked. There are no accounts. A purchase is a Lightning invoice; the registry sees that an invoice was paid and its amount, and does not know who paid it.
• A search is answered by the registry and not stored. A question about a file, a preview or a licence request is passed on to the node that holds the file, where the owner's software answers it; the registry keeps no copy, and the node records the sale (the file, the route, the amount and the invoice id) but not the question.
• The registry's request log records the path requested, not who requested it. Client addresses are counted briefly in memory to limit abuse and are not written anywhere.
• Invoice descriptions name the purpose of a payment, such as “Panscia · passages question”, never the file, so payment providers and Lightning routing learn nothing about what was bought.
• A report about a listing is kept as the reporter chose to send it: the listing, the reason and any note. Reports are read by a person, kept only as long as needed to act on them, and removed thirty days after they are closed.

What is never done

• No advertising, no analytics and no third-party tracking on any Panscia page or in the app.
• No selling, sharing or renting of any data to anyone.
• No copying of your files to any cloud, including ours.
• No training on anything that passes through the network.

Changes and contact

This page describes the software as it is. When the software changes, this page changes with it, and the change is dated in the Commons Policy. Questions go to info@panscia.com. The terms every licence is granted under are at the licence page.