Privacy Policy

Last updated: 16 September 2026

This policy explains how GenerativeAI Community handles personal information when you visit genaicommunity.ai, apply for membership, or contact our team. Some features described here, including LinkedIn applications and AI assessment, are being introduced. Those sections apply when you use the relevant feature.

Information you share with us

You can browse public community resources without creating an account. When you apply or use an interactive service, we collect the information needed to provide it:

• LinkedIn sign-in: your LinkedIn account identifier, name, profile photo where available, email address, and whether LinkedIn reports the email as verified. LinkedIn asks you to authorize the requested access.
• Bug reports: optional plain-text reports submitted by your agent, associated with your application for administrator review. Do not include credentials or sensitive personal information.
• Membership applications: your contact email, current or recent role, AI project or use case, your contribution, and reason for joining. Your role and project information are supplied by you; basic LinkedIn sign-in does not provide them.
• Application administration: consent records, submission and status timestamps, assessment evidence, decision reasons, administrator actions, and email acceptance or failure records.
• Support and other services: information you send when contacting us. If you submit a job listing, we collect the listing and contact details you provide; published listing fields are visible to visitors. Where payment is offered, the payment provider processes payment details and we receive transaction records.

Please avoid including confidential employer information, unnecessary sensitive information, or personal information about other people in an application.

Technical information and cookies

Our hosting and security providers process connection information, such as IP addresses and request metadata, to deliver the website and protect it from abuse. The application uses a hashed IP address for login rate limits. Necessary cookies support sign-in, sessions, and security checks. Blocking these cookies may prevent sign-in.

The membership application does not need advertising cookies. Following a link to another platform may expose you to that platform’s cookies and tracking practices.

How we use information

• Authenticate applicants using LinkedIn-provided identity and email, and prevent duplicate or abusive applications.
• Assess membership applications and support administrator review.
• Send submitted application copies, application updates, and approved membership invitations.
• Operate community services, respond to requests, and investigate technical or security problems.
• Meet applicable legal obligations and handle disputes.

We request consent before an application is submitted or agent access is issued. Membership consent is not consent to unrelated marketing. Our basis for processing depends on the service and applicable law, including your consent, providing a service you request, and legal obligations.

AI-assisted membership assessment

When enabled, an AI assessment hosted on Cloudflare reviews the application you submit for evidence of building, researching, or practically using AI. Exceptional student projects can qualify. Clear matches can be approved automatically; unclear applications and failed assessments go to a community administrator. Students without exceptional evidence can be declined automatically; approved company affiliations remain an exception.

We retain relevant evidence and reasons with the application decision. An administrator can approve or decline an application with a reason. Rejected applicants whose original submission used an agent can appeal with work evidence, a project explanation, or a community reference. Appeals receive human review. We record the evidence, original rejection, appeal decisions, and administrator actions. Named references are not treated as verified endorsements. You can contact us to correct inaccurate personal information. Self-reported background is not independently verified through LinkedIn sign-in.

Applying through Codex or another agent

After signing in and giving consent in your browser, you can choose to generate a token for an HTTP-capable agent. Anyone you give that token to can read your application information, submit your application once, and check its status until the token expires or is revoked. Tokens expire after 24 hours; generating a replacement invalidates the previous token. We store the token’s hash, not the token itself.

We do not share your LinkedIn password or OAuth tokens with your agent. Information you give your chosen agent is also governed by that provider’s policies. Revoking our application token does not delete copies already held by that provider.

Who receives information

Authorized community administrators access applications to operate admissions and respond to requests. Cloudflare provides hosting, application storage, AI assessment, and transactional email services. LinkedIn provides sign-in. These services process information needed for their respective functions.

If approved, we email a WhatsApp invitation from [email protected]. Joining is your choice. WhatsApp and other members may see your phone number, profile information, and messages according to the group type and your settings. WhatsApp’s own terms and privacy policy apply. Email acceptance does not mean that you have joined the community.

Our existing community rules warn that group messages may be made public or used to train a bot, and that other members may download chat history. Do not treat group conversations as confidential. This community-message notice is separate from the application assessment described above.

External registration, event, job-application, or payment links lead to services with their own privacy policies. We do not sell membership application information or provide it to third parties for their own marketing. We may disclose information where required by law or necessary to address fraud, security incidents, or legal claims.

Retention and security

We keep application and decision records for as long as needed to administer your application or membership, resolve support requests, and meet legal or security obligations. We do not currently apply a fixed automatic deletion period to all application records. You can request deletion using the contact below; limited records may need to remain for a valid legal or security reason.

Expiring sessions, application tokens, and login-state records have time limits and are cleaned up separately. We use HTTPS, access restrictions, limited-scope tokens, and hashed session and application-token storage. No online service can guarantee absolute security. Our providers may process data outside your country; their service locations and applicable legal requirements govern that processing.

Your choices and requests

Contact us to request access, correction, deletion, a usable copy of your information, withdrawal of consent, or information about how an application decision was made. Depending on applicable law, you may also have rights to object to or restrict processing. We may need to verify your identity before acting. Removing required application information can prevent us from processing the application. Withdrawal does not undo processing already carried out lawfully.

If you believe a child has submitted information without appropriate authorization, contact us so we can review and address it. Please do not submit information on a child’s behalf through the membership application.

Updates and contact

We will update this page when our practices change and revise the date above. Material changes to application consent will be presented in the relevant application flow where appropriate.

For privacy questions and requests, contact Nirant Kasliwal, community administrator, at [email protected]. Our noreply sender is outbound-only; please use this contact address for replies and privacy requests.