Privacy Policy

Last updated: pending counsel review (pre-launch).

This is a placeholder. The final Privacy Policy will be reviewed by counsel before public launch and will cover the commitments in docs/08-security.md: GDPR + CCPA compliance, DSAR within 30 days, data export, account deletion (soft + 30-day purge), EU data residency, and processing of operational data (IP, user-agent) under legitimate interest.