Privacy Policy
Last updated: to be filled in
This page exists because payment providers check that it resolves during onboarding. The content is not a legal document and is not legal advice — requirements vary widely between jurisdictions (GDPR / CCPA / PIPL and others), so the final text is yours (or your lawyer's) to determine.
Replace it in src/app/[locale]/(marketing)/terms/page.tsx and src/app/[locale]/(marketing)/privacy/page.tsx.
1. What we collect
To be filled in. Write this section against the actual implementation — don't list things you assume. The template handles these by default:
Account data: email, name (optional), password hash (irreversible)
Social login: the account identifier and avatar URL returned by OAuth
Sessions: IP and User-Agent (for session management and security triage)
Billing: orders and subscription records (handled by the payment provider — we never see card numbers)
Content: the comments and articles you publish
2. How we use it
To be filled in: providing the service, billing, security, product improvement.
3. Who we share it with
To be filled in: payment provider, email provider, hosting provider. Adding a third party means updating this section.
4. Your rights
To be filled in: access, correction, deletion, export. Also state how to actually delete an account — if the product can't do that yet, don't claim it.
5. Contact
To be filled in: the data-protection contact email.