diff --git a/privacy-policy.md b/privacy-policy.md
new file mode 100644
index 0000000..371ee9b
--- /dev/null
+++ b/privacy-policy.md
@@ -0,0 +1,177 @@
+# Privacy Policy
+
+**Last updated: August 2026**
+
+## Introduction
+
+At OrgExplorer, we respect your privacy.
+
+This Privacy Policy explains what data OrgExplorer handles and how — and, just as importantly, what it does **not** do.
+
+OrgExplorer's architecture is different from many applications because it operates entirely in the browser. It has **no backend server and no user accounts**.
+
+---
+
+## Information We Collect
+
+OrgExplorer does not have:
+
+- User accounts
+- Signup or waitlist systems
+- A backend server operated by us
+
+Because of this, we do not collect, receive, or store any personal information about you on any system we control.
+
+### What the App Handles
+
+#### Data fetched from GitHub
+
+When you search an organization, publicly available GitHub data is fetched directly from GitHub's API by your browser.
+
+This may include:
+
+- Repository information
+- Contributor information
+- Issues
+- Pull requests
+- Other publicly available GitHub metadata
+
+This data never passes through a server operated by OrgExplorer.
+
+#### Data stored locally on your device
+
+The following data may be stored locally in your browser:
+
+- GitHub Personal Access Token (if provided)
+- Cached GitHub API responses
+- API rate-limit status
+- Recent search history
+- Application preferences
+
+This data is stored only in your browser's:
+
+- `localStorage`
+- `IndexedDB`
+
+OrgExplorer does not transmit this data to any server operated by us.
+
+When a GitHub Personal Access Token is provided, your browser uses it to authenticate requests directly with GitHub's API. The token is sent only to GitHub for authorized API requests and is never sent to OrgExplorer servers.
+
+#### Standard Hosting Logs
+
+OrgExplorer is hosted on GitHub Pages.
+
+GitHub, as the hosting provider, may collect standard infrastructure logs such as:
+
+- IP addresses
+- Request timestamps
+- Other operational metadata
+
+OrgExplorer maintainers do not have access to these logs.
+
+For more information, see [GitHub's Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement).
+
+---
+
+## How We Use Your Information
+
+Since OrgExplorer does not collect or receive your personal data, we do not use, analyze, sell, or process your information.
+
+All locally stored data exists only to make the application function properly, including:
+
+- Reducing repeated GitHub API requests through caching
+- Preserving your preferences
+- Allowing you to avoid entering your Personal Access Token repeatedly
+
+---
+
+## Data Sharing and Disclosure
+
+We do not sell, share, or disclose your data.
+
+This is because OrgExplorer does not collect your data in the first place.
+
+The only external communication occurs directly between:
+```
+Your Browser
+|
+|
+v
+GitHub API (api.github.com)
+```
+
+
+This communication is governed by:
+
+- [GitHub Terms of Service](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service)
+- [GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement)
+
+---
+
+## Data Security
+
+Because OrgExplorer has no backend server or database, most server-side data security risks do not apply.
+
+The relevant security considerations involve data stored on your own device.
+
+### GitHub Personal Access Token
+
+If you choose to provide a GitHub Personal Access Token:
+
+- It is stored only in your browser's `localStorage`
+- It is sent only to GitHub's API
+- It is never logged by OrgExplorer
+- It is never transmitted to OrgExplorer servers
+
+### Token Safety Recommendations
+
+We recommend:
+
+- Using a token with the minimum permissions required
+- Avoiding unnecessary scopes
+- Revoking your token from GitHub settings if you suspect misuse
+
+Please note that browser `localStorage` is not encrypted.
+
+---
+
+## Your Rights
+
+Since OrgExplorer does not collect or store personal information on our systems, there is no personal data held by us that you can request to:
+
+- Access
+- Correct
+- Delete
+- Export
+
+You maintain complete control over locally stored application data.
+
+You can remove stored data by:
+
+- Clearing your browser storage
+- Removing your Personal Access Token from the Settings page
+- Resetting application data through browser settings
+
+---
+
+## Changes to This Policy
+
+We may update this Privacy Policy as OrgExplorer evolves.
+
+Any changes will be reflected on this page with an updated **"Last updated"** date.
+
+We encourage users to review this policy periodically.
+
+---
+
+## Contact Us
+
+If you have questions about this Privacy Policy, contact us:
+
+**Email:** [aossie.oss@gmail.com](mailto:aossie.oss@gmail.com)
+
+Or open an issue on [the project's GitHub repository](https://github.com/AOSSIE-Org/OrgExplorer).
+
+---
+
+*This policy describes OrgExplorer's actual technical behavior as of the date above. It is provided for transparency and is not a substitute for professional legal advice.*
diff --git a/src/components/layout/Footer.jsx b/src/components/layout/Footer.jsx
index 4b69ed1..ddb2200 100644
--- a/src/components/layout/Footer.jsx
+++ b/src/components/layout/Footer.jsx
@@ -19,11 +19,11 @@ const footerLinks = [
   },
   {
     label: "Terms of Service",
-    href: "/terms",
+    href: "https://github.com/AOSSIE-Org/OrgExplorer/blob/main/terms-of-service.md",
   },
   {
     label: "Privacy Policy",
-    href: "/privacy",
+    href: "https://github.com/AOSSIE-Org/OrgExplorer/blob/main/privacy-policy.md",
   },
   {
     label: "API Status",
@@ -110,6 +110,8 @@ export default function Footer() {
                 <Link
                   key={item.label}
                   to={item.href}
+                  target={item.href.startsWith("http") ? "_blank" : "_self"}
+                  rel={item.href.startsWith("http") ? "noopener noreferrer" : undefined}
                   style={{
                     color: "var(--text2)",
                     transition: "color 0.2s ease",
diff --git a/terms-of-service.md b/terms-of-service.md
new file mode 100644
index 0000000..af0d4b6
--- /dev/null
+++ b/terms-of-service.md
@@ -0,0 +1,212 @@
+# Terms of Service
+
+**Last updated: August 2026**
+
+## 1. Introduction
+
+Welcome to OrgExplorer, an open-source, browser-only tool for analyzing publicly available GitHub organization data — repositories, contributors, governance signals, and activity trends.
+
+This Terms of Service Agreement ("Agreement") governs your use of OrgExplorer, including its software, documentation, and hosted deployment (collectively, the "Project").
+
+By accessing or using the Project, you agree to be bound by these terms. If you do not agree, do not use the Project.
+
+---
+
+## 2. Grant of License
+
+OrgExplorer is open-source software. Its source code, license terms, and contribution guidelines are available at [the project's GitHub repository](https://github.com/AOSSIE-Org/OrgExplorer).
+
+Your rights to use, modify, and redistribute the underlying code are governed by that repository's license. This Agreement additionally governs your use of the *deployed, hosted instance* of the Project available at [Live Demo](https://orgexplorer.aossie.org/).
+
+### Permitted Uses
+
+You may use OrgExplorer for:
+
+- Analyzing publicly available GitHub organization data
+- Research and evaluation purposes
+- Governance auditing
+- General exploration and learning
+
+### Restrictions
+
+You agree not to use the Project in a manner that:
+
+- Violates applicable laws
+- Violates GitHub's Terms of Service
+- Attempts to bypass GitHub API rate limits through unauthorized methods
+- Misuses Personal Access Tokens or other authentication mechanisms
+
+---
+
+## 3. Intellectual Property Rights
+
+All right, title, and interest in OrgExplorer's own source code remains with its maintainers and contributors, subject to the open-source license available in the repository.
+
+Data displayed within the Project, including:
+
+- Repository names
+- Contributor information
+- Issue and pull request content
+- Other GitHub metadata
+
+is publicly available data retrieved from GitHub and remains the property of its respective owners, subject to GitHub's own terms.
+
+### Third-Party Components
+
+The Project uses third-party open-source libraries, including React, D3.js, and others.
+
+Your use of these components is subject to their respective license terms, which are available in the repository.
+
+---
+
+## 4. Disclaimer of Warranties
+
+The Project is provided **"as is"** without warranty of any kind, either expressed or implied, including but not limited to warranties of:
+
+- Merchantability
+- Fitness for a particular purpose
+- Non-infringement
+
+### No Guarantee
+
+Neither the maintainers nor contributors guarantee that the Project will:
+
+- Be error-free
+- Always remain secure
+- Be available without interruption
+- Produce perfectly accurate analytics
+
+All analytics, scores, and metrics shown, including health scores, bus factor analysis, activity classification, and other derived insights, are computed estimates based on publicly available GitHub data at the time of analysis.
+
+These metrics are provided for informational purposes only.
+
+### Risk Acknowledgment
+
+You assume all risks associated with:
+
+- Using the Project
+- Relying on generated metrics or analysis
+- Using your own GitHub Personal Access Token with the application
+
+---
+
+## 5. Limitation of Liability
+
+To the maximum extent permitted by applicable law, OrgExplorer maintainers, contributors, and affiliates shall not be liable for any:
+
+- Indirect damages
+- Incidental damages
+- Special damages
+- Consequential damages
+- Punitive damages
+
+arising from your use of, or inability to use, the Project.
+
+This includes loss of locally cached data, as OrgExplorer does not store user data on any system operated by the maintainers.
+
+---
+
+## 6. Contributions and Community Conduct
+
+### Contributor License
+
+By contributing code, documentation, or other materials to the Project, you grant the maintainers a perpetual, worldwide, non-exclusive license to use, modify, distribute, and include your contributions as part of OrgExplorer under the project's open-source license.
+
+You retain ownership of your contributions.
+
+### Code of Conduct
+
+Contributors and users are expected to maintain respectful, constructive, and professional interactions within project and community channels, consistent with AOSSIE's community guidelines.
+
+---
+
+## 7. Third-Party Services and Integrations
+
+OrgExplorer integrates with GitHub's public REST API.
+
+Your use of this integration is subject to:
+
+- [GitHub Terms of Service](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service)
+- [GitHub REST API Rate Limit Policies](https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api)
+
+### No Endorsement
+
+Reference to GitHub does not imply endorsement by OrgExplorer, nor does GitHub endorse OrgExplorer.
+
+### User Responsibility
+
+You are responsible for:
+
+- Following GitHub's terms
+- Proper usage of Personal Access Tokens
+- Ensuring your API usage complies with GitHub policies
+
+OrgExplorer is not responsible for GitHub service availability, API changes, or restrictions imposed by GitHub.
+
+---
+
+## 8. Data Privacy and Use
+
+OrgExplorer has **no backend server and no user accounts**.
+
+The Project does not collect, store, or process your personal data on any system operated by us.
+
+Data fetched from GitHub is retrieved directly by your browser.
+
+Data stored locally for performance purposes, including:
+
+- Repository data
+- Contributor data
+- Personal Access Tokens
+- Recent searches
+
+is stored only within your browser's local storage or browser databases.
+
+For complete details, see our [Privacy Policy](https://github.com/AOSSIE-Org/OrgExplorer/blob/main/privacy-policy.md).
+
+### Compliance
+
+You remain responsible for your use of any data retrieved through the Project, including compliance with GitHub's policies regarding API data usage.
+
+---
+
+## 9. Modification and Termination
+
+### Amendments
+
+We may update this Agreement from time to time.
+
+Continued use of the Project after changes are posted constitutes acceptance of the updated terms.
+
+### Termination
+
+Since OrgExplorer does not maintain user accounts, termination applies only to:
+
+- Your decision to stop using the application
+- Clearing locally stored application data
+
+We reserve the right to modify or discontinue the hosted deployment at any time.
+
+The underlying open-source code remains available according to its license.
+
+---
+
+## 10. Governing Law and Dispute Resolution
+
+This Agreement is governed by applicable law in the jurisdiction where the maintaining organization, AOSSIE, primarily operates.
+
+In case of disputes, the parties agree to first attempt resolution through informal communication before pursuing other remedies.
+
+---
+
+## 11. Contact Information
+
+If you have questions regarding these Terms of Service, contact us:
+
+**Email:** [aossie.oss@gmail.com](mailto:aossie.oss@gmail.com)
+
+Or open an issue on [the project's GitHub repository](https://github.com/AOSSIE-Org/OrgExplorer).
+
+---
+
+*These Terms are provided for transparency around an open-source project and are not a substitute for professional legal advice.*
\ No newline at end of file