@extends('layouts.public')

@section('title', 'Privacy Policy — Boss Of AI')
@section('meta_description', 'How Boss Of AI collects, uses and stores personal data.')

@section('content')
<article class="py-14 md:py-20">
    <div class="shell max-w-[72ch]">
        <h1 class="text-4xl leading-[1.05]">Privacy Policy</h1>
        <p class="mt-4 text-graphite-500">Last updated {{ now()->format('j F Y') }}</p>

        <div class="mt-10 space-y-8 text-[17px] leading-relaxed text-graphite-700">
            <section>
                <h2 class="text-2xl text-ink">Who we are</h2>
                <p class="mt-3">Boss Of AI provides B2B prospecting software. This policy explains what personal data we handle, why, and what rights you have over it. Contact us at <a href="mailto:{{ config('bossofai.brand.support_email') }}" class="underline underline-offset-4">{{ config('bossofai.brand.support_email') }}</a>.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">Data we collect about account holders</h2>
                <p class="mt-3">When you register we collect your name, email address, password hash, company, role and industry. When you subscribe to a paid plan our payment processor handles your card details; we never see or store full card numbers.</p>
                <p class="mt-3">We record usage of the service, including searches run, credits spent and pages viewed, so we can bill accurately and improve the product.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">Business contact data in search results</h2>
                <p class="mt-3">Boss Of AI returns business contact information about people in their professional capacity, sourced from third-party data providers and public sources. This is personal data, and both we and you have obligations toward the people it describes.</p>
                <p class="mt-3">If you use Boss Of AI to contact prospects, you are the controller of that data for your own outreach. You are responsible for having a lawful basis for contacting them, for identifying yourself in your messages, and for honouring opt-out requests.</p>
                <p class="mt-3">Any individual can ask us to remove their details from our systems by writing to <a href="mailto:{{ config('bossofai.brand.support_email') }}" class="underline underline-offset-4">{{ config('bossofai.brand.support_email') }}</a>. We action removal requests and pass them upstream to the providers we source from.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">AI processing</h2>
                <p class="mt-3">Company research and outreach generation send company information to third-party AI providers for processing. We do not use your account data or your saved leads to train third-party models.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">Retention</h2>
                <p class="mt-3">Account data is retained while your account is open and for the period afterwards required by tax and accounting law. Saved leads and campaigns are deleted when you delete them or when you close your account.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">Your rights</h2>
                <p class="mt-3">Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to certain processing. Write to us and we will respond within the statutory period.</p>
            </section>

            <section>
                <h2 class="text-2xl text-ink">Cookies</h2>
                <p class="mt-3">We use cookies that are necessary to keep you signed in and to protect forms against abuse, plus privacy-respecting analytics to understand which pages are useful.</p>
            </section>
        </div>

        <p class="mt-12 rounded-lg border border-graphite-200 bg-graphite-50 p-5 text-[15px] leading-relaxed text-graphite-600">
            This page is a working draft written for the product, not legal advice. Have a qualified
            lawyer review it against your jurisdiction, your data providers' terms and your actual
            processing before you launch.
        </p>
    </div>
</article>
@endsection