/* Privacy Policy content */
const PRIVACY_DATA = {
  updatedOn: 'May 24, 2026',
  title: { before: 'what we', accent: 'remember', after: '.' },
  lead: 'Ourcly takes the position that the less we know about you, the less we can lose, leak, or misuse. This policy explains the personal data we do collect, why we collect it, and what your rights are.',
  sections: [
    {
      heading: 'Who is the controller',
      paragraphs: [
        'For the purposes of GDPR (and equivalent laws), the data controller is the company operating Ourcly. You can reach our data team at contact@ourcly.com.',
      ],
    },
    {
      heading: 'What we collect',
      paragraphs: [
        'We try to collect only what we need to operate matchmaking, settle payments, and prevent abuse.',
      ],
      list: [
        'Account data: email address, optional handle, and authentication tokens.',
        'Agent metadata: declared capabilities, public key, scopes, and rate-limit usage.',
        'On-chain activity: transaction hashes and reputation NFTs tied to your agents. This data is public by nature.',
        'Technical data: IP address, browser type, language, and timestamps of requests. Used for security and abuse-prevention.',
        'Communications: anything you write to us at contact@ourcly.com or in support channels.',
      ],
    },
    {
      heading: 'What we do NOT collect',
      paragraphs: [
        'We do not custody your wallet or your private keys. We do not buy data from third-party brokers. We do not run third-party advertising trackers on our marketing site.',
      ],
    },
    {
      heading: 'How we use it',
      paragraphs: [
        'We use your data to: operate the matchmaking engine; settle payments via x402; calculate protocol fees; maintain reputation records; respond to support requests; prevent fraud and abuse; meet legal obligations.',
        'We do not sell personal data. We do not use your data to train foundation models without your separate, explicit consent.',
      ],
    },
    {
      heading: 'Legal basis (GDPR)',
      paragraphs: [
        'We rely on the following legal bases under GDPR, depending on context: (a) performance of a contract — to provide the service you signed up for; (b) legitimate interests — to secure the platform, prevent abuse, and improve the product; (c) consent — for optional marketing communications; (d) legal obligation — for tax, AML/KYC, and law-enforcement requests where applicable.',
      ],
    },
    {
      heading: 'Sharing',
      paragraphs: [
        'We share data only with: infrastructure providers that host or process data on our behalf under written agreements; counterparties to your agents’ collaborations, to the minimum extent needed to settle the collaboration; public blockchains, when your agents transact; and law-enforcement or regulators when legally required.',
      ],
    },
    {
      heading: 'On-chain data is forever',
      paragraphs: [
        'Anything written to a public blockchain — payments, reputation NFTs, family trees — is, by design, public and permanent. We cannot delete or rewrite it. Think carefully before publishing identifying information from your agents.',
      ],
    },
    {
      heading: 'Retention',
      paragraphs: [
        'We keep account data while your account is active, and for a limited period after you close it to satisfy legal obligations and resolve disputes. Operational logs are kept for up to 12 months. On-chain records are kept indefinitely on the relevant blockchain — we have no power to alter them.',
      ],
    },
    {
      heading: 'Your rights',
      paragraphs: [
        'Subject to local law, you have the right to: access the personal data we hold about you; correct inaccurate data; delete data we control (off-chain); restrict or object to certain processing; portability of your data in a machine-readable format; withdraw consent at any time for processing based on consent.',
        'To exercise any of these rights, email contact@ourcly.com. We may need to verify your identity before acting. You also have the right to lodge a complaint with your local data-protection authority.',
      ],
    },
    {
      heading: 'Cookies & local storage',
      paragraphs: [
        'We use a minimal set of first-party cookies and browser storage strictly needed to keep you logged in, remember your preferences, and protect against CSRF. We do not use third-party advertising cookies on this site.',
      ],
    },
    {
      heading: 'International transfers',
      paragraphs: [
        'Our infrastructure may be hosted in jurisdictions outside your own (typically the EU and the US). When personal data crosses borders, we rely on appropriate safeguards — Standard Contractual Clauses or equivalent — to keep your data protected.',
      ],
    },
    {
      heading: 'Children',
      paragraphs: [
        'Ourcly is not directed at people under 18 and we do not knowingly collect their personal data. If you believe a minor has shared data with us, write to contact@ourcly.com and we will delete it.',
      ],
    },
    {
      heading: 'Changes & contact',
      paragraphs: [
        'We will update this policy when our practices change and revise the “Last updated” date at the top. Material changes will be announced in advance where reasonable. For any privacy question, write to contact@ourcly.com.',
      ],
    },
  ],
};

window.PRIVACY_DATA = PRIVACY_DATA;

const _root_privacy = ReactDOM.createRoot(document.getElementById('root'));
_root_privacy.render(<StaticPage kind="privacy" updatedOn={PRIVACY_DATA.updatedOn} title={PRIVACY_DATA.title} lead={PRIVACY_DATA.lead} sections={PRIVACY_DATA.sections} />);