PTT.ai is a decentralized software using P2P protocol. Taiwan AI Labs (“we”, “us” or “our”) do not store users’ data on any centralized storage. To put it simply, all received/viewed data by user (“you,” “your”, “yours”, “user”, “users” and “yourself”) is stored a copy on one’s p.me. Viewing is saving. When an user choose to share data with other users (friends/group members), it is given that the receiver/viewer will save such data on their p.me.
In regard to data self-determination, PTT.ai aims to provide a GDPR-compliant tool/framework for user to freely control their data. We design the software without centralize process. We are not in the role of data controller. User is a data subject and controller, including their own data or data from others’ p.me.
We will not collect/process/use (Personal Information Protection Act term) or use (GDPR term) “any data” on p.me with your consent, nor will we automatically send anonymous system data. The input/process/output of data is operated by user, with the corresponding responsibility. We can not intervene with your decision, nor can we take the responsibility for you.
A fraction of significant rules and principles of GDPR that PTT.ai devoted to follow are listed as below. Any questions regarding unlisted or incomplete legal matters, do not hesitate to contact us.
GDPR Article 5
Principles relating to processing of personal data
- Lawfulness, fairness and transparency: PTT.ai is open-source and its source code can be found on Github
- Purpose limitation: we do not actively collect data
- Data minimisation: we do not actively collect data
- Accuracy: user can rectify one’s data freely without us being intermediary
- Storage limitation: we do not actively store data
- Integrity and confidentiality: PTT.ai is equipped with basic data protection and encryption framework
GDPR Article 15 to 22
Right of data subject
- Right to access: user data is stored on one’s own p.me and of on the choose-to-shared-with p.me, i.e. friends and group members
- Right to rectification: user is free to rectify one’s data, e.g. correct personal information, edit a post
- Right to erasure: user can erase data, e.g. delete post, delete group
- Right to restriction of processing: user can choose whom to share one’s data with, e.g. delete friend, revoke group member
- Right to data portability: data os stored directly on user’s device (p.me) and export tool can be expected
- Right to object and automated individual decision-making: user can choose whom to share one’s data with, and PTT.ai do not implement any personalise decision-making mechanism
Because of the decentralized mechanism, we can not censor whether uploaded data is legal, nor can we take responsibility for that. To avoid legal trouble, be aware of what you share and to whom before publish.
Because of the decentralized mechanism, we can not be responsible for your data loss. Data published by users is only stored on their p.me and who they choose to share with. We are not able to restore any content conflict, e.g. share or delete, caused by unstable internet connection. It is recommended that user make sure both publisher and receiver is online while using p.me (desktop) with stable internet connection to prevent data loss. You may also leverage third party hosting service in the future.
The internet is borderless. Receiver and publisher may not be in the same region. Regulations, including but not limited to criminal law, personal information protection law, General Data Protection Regulation (“GDPR”), intellectual property law, between regions may vary. If you live in a country with strict censorship, despite adjustment on published content itself, please choose what to receive with caution, e.g. which group to join and who to chat with. Decentralized mechanism indicates that once you receive the data, there will be a copy of the data on your p.me. Since user behaviors are out of our hands, you can only rely on your filtering with care.
PTT.ai is under constant developing (currently in beta version). We can not guarantee all functions of PTT.ai working for all the time, nor can we be liable for the software’s unexpected behaviors. You feedback and suggestion is appreciated. We will continue to improve PTT.ai.
Beta version of PTT.ai implements basic data protection and encryption framework. We will continue on the path to state-of-the-art standard.
Taiwan AI Labs firstname.lastname@example.org