export const metadata = { title: 'Privacy — BuildMyMCPServer' };

const SECTIONS = [
  {
    h: 'What we collect',
    p: [
      'Account: email, organization name, the IP address of your sign-in.',
      'Workspace: the prompts you send to the generator, the generated server specifications, build logs, server names and slugs you choose.',
      'Tool-call metrics: counts, latencies, status codes — never the request or response payloads. We only know that a tool was called, how long it took, and whether it succeeded.',
      'Billing: Stripe customer id + subscription metadata for paid plans. Card details never touch our servers.',
    ],
  },
  {
    h: 'What we do NOT collect',
    p: [
      'Plaintext credentials. Every secret you save is AES-256-GCM encrypted before it hits storage. We have no ability to read them; only your container at runtime can.',
      'Tool-call payloads. The arguments your AI client sends and the responses our server returns are not stored or logged.',
      'Browsing data, cross-site tracking, advertising identifiers.',
    ],
  },
  {
    h: 'Where it lives',
    p: [
      'EU region by default (Hetzner Falkenstein, Germany).',
      'Postgres + Redis + container hosts are all in the same region.',
      'Backups encrypted at rest in Backblaze B2 EU.',
    ],
  },
  {
    h: 'Subprocessors',
    p: [
      'Anthropic (generation) — only the prompt text you send. Anthropic\'s data-retention policy applies.',
      'Hetzner (compute).',
      'Backblaze (encrypted backups).',
      'Stripe (billing).',
      'Cloudflare (DNS + DDoS).',
    ],
  },
  {
    h: 'Retention',
    p: [
      'Active account: all workspace data kept while subscribed.',
      'Cancelled account: 30-day grace period, then full deletion (servers, builds, logs, audit).',
      'Audit log: 1 year on Team+, 30 days on Pro/Hobby.',
      'Tool-call metrics: 30 days, then aggregated to daily counts.',
    ],
  },
  {
    h: 'Your rights (GDPR)',
    p: [
      'Access — export everything in JSON via the settings page (Sprint 4) or by email.',
      'Deletion — delete your organization in settings; everything goes within 30 days.',
      'Rectification — change name and email yourself; everything else is editable on request.',
      'Portability — the generated TypeScript source of every server is yours, downloadable.',
    ],
  },
];

export default function Privacy() {
  return (
    <div className="mx-auto max-w-3xl px-6 py-16">
      <header className="mb-12">
        <div className="text-[11px] uppercase tracking-[0.16em] text-[--color-fg-subtle]">
          Privacy policy
        </div>
        <h1 className="mt-2 text-[32px] font-semibold tracking-tight">Privacy</h1>
        <p className="mt-3 text-[14px] leading-relaxed text-[--color-fg-muted]">
          Plain language. What we collect, where it lives, how to get it deleted. Last updated
          2026-05-19.
        </p>
      </header>

      <div className="space-y-9">
        {SECTIONS.map((s) => (
          <section key={s.h}>
            <h2 className="text-[16px] font-semibold tracking-tight">{s.h}</h2>
            <ul className="mt-3 space-y-1.5">
              {s.p.map((p) => (
                <li
                  key={p}
                  className="relative pl-4 text-[13.5px] leading-relaxed text-[--color-fg-muted] before:absolute before:left-0 before:top-2 before:size-1 before:rounded-full before:bg-[--color-fg-subtle]"
                >
                  {p}
                </li>
              ))}
            </ul>
          </section>
        ))}

        <section>
          <h2 className="text-[16px] font-semibold tracking-tight">Contact</h2>
          <p className="mt-3 text-[13.5px] leading-relaxed text-[--color-fg-muted]">
            Data controller: BuildMyMCPServer. Email{' '}
            <a className="text-[--color-accent] underline" href="mailto:privacy@buildmymcpserver.com">
              privacy@buildmymcpserver.com
            </a>{' '}
            for any of the above.
          </p>
        </section>
      </div>
    </div>
  );
}