{% extends 'base.html' %}

{% block title %}Privacy Policy — AgentForms{% endblock %}

{% block head_extra %}
<meta name="description" content="Privacy policy for AgentForms — how we collect, use, and protect your data.">
<link rel="canonical" href="https://agentforms.io/privacy">
<style nonce="{{ csp_nonce }}">
    main { padding: 60px 0 80px; }
    main h1 {
        font-size: 32px;
        font-weight: 700;
        margin-bottom: 8px;
        letter-spacing: -0.02em;
        color: var(--text);
    }
    .updated {
        color: var(--text-dim);
        font-size: 14px;
        margin-bottom: 32px;
    }
    main h2 {
        font-size: 20px;
        font-weight: 600;
        margin-top: 32px;
        margin-bottom: 12px;
        color: var(--text);
    }
    main p {
        margin-bottom: 16px;
        color: var(--text-muted);
    }
    main ul {
        margin: 0 0 16px 20px;
        color: var(--text-muted);
    }
    main li { margin-bottom: 4px; }
    main .container { max-width: 720px; }
    @media (max-width: 768px) {
        main { padding: 40px 0; }
        main h1 { font-size: 24px; }
    }
</style>
{% endblock %}

{% block content %}
<main>
    <div class="container">
        <h1>Privacy Policy</h1>
        <p class="updated">Last updated: June 2026</p>

        <h2>1. Information We Collect</h2>
        <p>We collect information you provide directly when using AgentForms:</p>
        <ul>
            <li><strong>Account information:</strong> Email address and password when you create an account.</li>
            <li><strong>Form data:</strong> Submissions received through your form endpoints, including any personal data form fillers provide.</li>
            <li><strong>Usage data:</strong> Analytics about how you use the platform — form views, submission counts, endpoint activity.</li>
            <li><strong>Payment information:</strong> If you subscribe to a paid plan, we process payments via our payment provider. We do not store full card details.</li>
        </ul>

        <h2>2. How We Use Your Information</h2>
        <ul>
            <li>Provide, maintain, and improve the AgentForms service.</li>
            <li>Process your form submissions and deliver them via webhooks, email, or other configured destinations.</li>
            <li>Send service communications, including billing receipts and security notifications.</li>
            <li>Respond to your support requests.</li>
        </ul>

        <h2>3. Data Sharing</h2>
        <p>We do not sell your personal information. We may share data with:</p>
        <ul>
            <li><strong>Service providers:</strong> Infrastructure hosting (cloud providers), email delivery, and payment processing.</li>
            <li><strong>Webhook destinations:</strong> Form submission data is forwarded to endpoints you configure. You are responsible for ensuring those destinations handle data appropriately.</li>
            <li><strong>Legal compliance:</strong> When required by law, subpoena, or to protect the rights and safety of our users.</li>
        </ul>

        <h2>4. Data Retention</h2>
        <p>We retain your account data and form submissions as long as your account is active. When you delete your account, we delete associated data within 30 days, except where required by law or for legitimate business purposes (fraud prevention, dispute resolution).</p>

        <h2>5. Your Rights (GDPR / CCPA)</h2>
        <p>Depending on your location, you may have the right to:</p>
        <ul>
            <li>Access, correct, or delete your personal data.</li>
            <li>Export your data in a portable format.</li>
            <li>Opt out of marketing communications.</li>
            <li>Request restriction of processing.</li>
        </ul>
        <p>To exercise these rights, contact us at <a href="mailto:hello@agentforms.io">hello@agentforms.io</a>.</p>

        <h2>6. Security</h2>
        <p>We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted storage for passwords (bcrypt), and access controls. No system is perfectly secure, but we continuously work to improve our security posture.</p>

        <h2>7. Cookies</h2>
        <p>We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics on the platform.</p>

        <h2>8. Children's Privacy</h2>
        <p>AgentForms is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.</p>

        <h2>9. Changes to This Policy</h2>
        <p>We may update this policy periodically. Material changes will be communicated via email or a notice on the platform. Continued use after changes constitutes acceptance.</p>

        <h2>10. Contact</h2>
        <p>For privacy-related inquiries, contact us at <a href="mailto:hello@agentforms.io">hello@agentforms.io</a>.</p>
    </div>
</main>
{% endblock %}