Privacy Policy

Last updated 26 July 2026

This policy explains what a GrandSkynet Account stores about you, why, and who can see it. It is written to describe what the system actually does — not to be vague. If something here is unclear, ask us rather than guessing.

Who we are

GrandSkynet is operated by GrandAxis Corporation Ltd (“we”, “us”). Your GrandSkynet Account is the single identity you use across every GrandSkynet product.

What we collect

You give us

• Your name, and the display name you choose
• Your email address and @handle
• Your password — stored only as a one-way hash (Argon2id). We never store, and cannot read, your actual password
• Date of birth and country or region
• Optional details you choose to add: phone number, address, profile photo, recovery email, and anything you enter on your profile pages

We create

• Your UIN — a permanent identification number for your account. It is used internally to link your identity across products. It is never shown to other users
• A personal AI agent (AXON) belonging to you

We record automatically

• Sessions and devices: IP address, browser user-agent, and last-active time for each signed-in device, so you can review and sign out of them
• Security activity: sign-ins, password changes, two-factor changes and similar security events, with the IP address they came from. This exists so you can spot access you did not authorise

We do not collect

• Advertising or tracking cookies. We set only the cookies needed to keep you signed in
• Your browsing activity outside GrandSkynet
• Any payment card details — the Account itself takes no payments

Why we hold it

• To run your account — you cannot sign in without an identity to sign in to
• To keep it secure — rate limiting, two-factor authentication, session management and the security log all exist to protect your account
• To connect you to GrandSkynet products — so you use one account everywhere instead of many

We do not sell your personal information, and we do not share it for advertising.

Who can see what

Different information is visible to different people. This is deliberate and enforced in code:

• Public — your public profile shows your name and @handle, plus your photo. Nothing else appears unless you switch it on under Privacy, and you can switch anything back off or withdraw the page entirely at any time
• Other users — cannot see your email address, phone number, address or date of birth unless you have chosen to publish it. Nothing is published by default
• Never publishable, by anyone — your identification numbers, identity documents, financial information, sign-in activity and connected apps. There is no setting for these because we do not store one; they are excluded by design rather than by default
• Connected products — when you sign in to a GrandSkynet product, it receives a limited identity: your name, handle, email, role and photo. It does not receive your other profile data. You can see and revoke every connected product from Connected Apps
• Your employer — if you join an organisation, that organisation can see your membership and role there. It does not gain access to your personal account

Third parties who process data for us

We keep this list short on purpose:

• Cloudflare — routes traffic to our servers and therefore processes your IP address and request data in transit
• Have I Been Pwned — when you set a password we check whether it appears in known public data breaches. This uses k-anonymity: only the first five characters of a hash of your password are ever sent, never your password and never the full hash. The service cannot determine what was checked

Identity verification (KYC)

We intend to verify that every account belongs to a real person. When this is introduced, we will tell you what is required before you provide anything. Our approach is to store the result of a verification — whether it passed, and when — rather than retaining copies of your identity documents.

How long we keep it

Your GrandSkynet Account is designed to be permanent: one person, one identity, for as long as you use GrandSkynet. We do not currently offer self-service account deletion. Security logs and session records are kept while your account is active so that you can audit access to it.

If you want your account closed or your personal information removed, reach us using the contact section at the end of this policy and we will deal with your request. Where the law gives you a right to erasure, we will honour it.

Your choices

• View and edit your personal information at any time from your profile
• Choose exactly what appears on your public profile, field by field, from Privacy — or turn the page off completely
• Turn on two-factor authentication, and review or sign out of any device
• See your own security activity log
• Revoke any connected product's access to your identity
• Ask us for a copy of your personal information, or ask us to correct or remove it

Security

Passwords are hashed with Argon2id and checked against known breach data. Two-factor authentication is available to everyone. Traffic is encrypted in transit. Access between our products is restricted and logged. No system is perfectly secure, and we will not pretend otherwise — but we treat your identity as the most sensitive thing we hold, because it is.

Children

GrandSkynet Accounts are not intended for children under 13, and we do not knowingly create accounts for them.

Changes

If we change this policy in a way that materially affects you, we will make that clear rather than quietly editing the page. The date at the top always reflects the current version.

Contact

GrandSkynet is operated by GrandAxis Corporation Ltd. We are in early development and do not yet publish a public support address. If you have an account, the fastest route to us is through the person who invited you. A published contact address will be added here before GrandSkynet opens to the general public.