templates/privacy.html

{% extends "base.html" %}
{% block content %}

<div class="card">
    <h2>Privacy Policy</h2>
    <p class="subtitle">Last updated: {{ datetime.utcnow().date() if datetime else "2025" }}</p>

    <p>
        This application analyzes text to classify the tone of messages
        (e.g., Aggressive, Neutral, Polite, Friendly). To provide this service,
        we process the following personal data:
    </p>

    <ul>
        <li>Your email address (for login, verification, and account management)</li>
        <li>A hashed version of your password</li>
        <li>Text you submit for tone analysis</li>
        <li>Metadata such as timestamps of your usage</li>
    </ul>

    <h3>Legal Basis (GDPR)</h3>
    <p>
        Our legal basis for processing personal data is your consent and
        our legitimate interest in providing and improving the service.
        You can withdraw your consent at any time by deleting your account.
    </p>

    <h3>Data Storage & Retention</h3>
    <p>
        Your data is stored on infrastructure operated by Hugging Face
        and associated hosting providers. We retain account data for up to
        12 months of inactivity, after which your account and data may be
        automatically deleted. You may also delete your account at any time
        using the "Delete Account" option in the application.
    </p>

    <h3>Right of Access & Portability</h3>
    <p>
        You can export your analysis history via the CSV and PDF export
        features on the History page. This satisfies your right of access
        and data portability.
    </p>

    <h3>Right to Deletion ("Right to be Forgotten")</h3>
    <p>
        You can permanently delete your account and all associated analysis
        data at any time from the "Delete Account" page. This action cannot
        be undone.
    </p>

    <h3>Cookies</h3>
    <p>
        This service uses only essential cookies required for authentication,
        session management, and security (CSRF protection). No advertising
        or tracking cookies are used.
    </p>

    <h3>Data Sharing & "Do Not Sell My Personal Information"</h3>
    <p>
        We do not sell your personal data. We do not share your data with
        third parties for advertising purposes. For more details, see the
        "Do Not Sell My Info" page.
    </p>

    <h3>Contact</h3>
    <p>
        If you have questions about how your data is processed or wish
        to exercise your rights under GDPR or CCPA, you can contact the
        project owner directly.
    </p>
</div>

{% endblock %}