{% extends "base.html" %}

{% block title %}Privacy Policy — {{ config.APP_NAME }}{% endblock %}

{% block content %}
<main class="container-page py-12">
  <div class="max-w-3xl mx-auto">
    <div class="page-header">
      <h1>Privacy Policy</h1>
      <p class="text-sm text-stone">Last updated: January 2024</p>
    </div>

    <div class="card">
      <section class="mb-8">
        <h2 class="text-xl mb-3">1. Information We Collect</h2>
        <p class="text-stone mb-2">We collect information you provide directly:</p>
        <ul class="list-disc pl-5 space-y-1 text-sm text-stone mb-3">
          <li>Email address (required for account creation)</li>
          <li>Name (optional)</li>
          <li>Payment information (processed by Paddle)</li>
        </ul>
        <p class="text-stone mb-2">We automatically collect:</p>
        <ul class="list-disc pl-5 space-y-1 text-sm text-stone">
          <li>IP address</li>
          <li>Browser type</li>
          <li>Usage data</li>
        </ul>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">2. How We Use Information</h2>
        <p class="text-stone mb-2">We use your information to:</p>
        <ul class="list-disc pl-5 space-y-1 text-sm text-stone">
          <li>Provide and maintain the service</li>
          <li>Process payments</li>
          <li>Send transactional emails</li>
          <li>Improve the service</li>
          <li>Respond to support requests</li>
        </ul>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">3. Information Sharing</h2>
        <p class="text-stone mb-2">We do not sell your personal information. We may share information with:</p>
        <ul class="list-disc pl-5 space-y-1 text-sm text-stone">
          <li>Service providers (Paddle for payments, Resend for email)</li>
          <li>Law enforcement when required by law</li>
        </ul>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">4. Data Retention</h2>
        <p class="text-stone">We retain your data as long as your account is active. Upon deletion, we remove your data within 30 days.</p>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">5. Security</h2>
        <p class="text-stone">We implement industry-standard security measures including encryption, secure sessions, and regular backups.</p>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">6. Cookies</h2>
        <p class="text-stone">We use essential cookies for session management. We do not use tracking or advertising cookies.</p>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">7. Your Rights</h2>
        <p class="text-stone mb-2">You have the right to:</p>
        <ul class="list-disc pl-5 space-y-1 text-sm text-stone">
          <li>Access your data</li>
          <li>Correct inaccurate data</li>
          <li>Delete your account and data</li>
          <li>Export your data</li>
        </ul>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">8. GDPR Compliance</h2>
        <p class="text-stone">For EU users: We process data based on consent and legitimate interest. You may contact us to exercise your GDPR rights.</p>
      </section>

      <section class="mb-8">
        <h2 class="text-xl mb-3">9. Changes</h2>
        <p class="text-stone">We may update this policy. We will notify you of significant changes via email.</p>
      </section>

      <section>
        <h2 class="text-xl mb-3">10. Contact</h2>
        <p class="text-stone">For privacy inquiries: {{ config.EMAIL_FROM }}</p>
      </section>
    </div>
  </div>
</main>
{% endblock %}
