<%- include('../partials/head', {title: t.legal.privacy_title}) %>
<%- include('../partials/nav') %>
<div style="max-width:740px;margin:0 auto;padding:120px 24px 80px">
  <h1 style="font-size:36px;font-weight:800;margin-bottom:8px"><%= t.legal.privacy_title %></h1>
  <p style="font-size:12px;letter-spacing:2px;text-transform:uppercase;color:var(--dim);margin-bottom:48px"><%= t.legal.updated %></p>
  <style>h2{font-size:18px;font-weight:700;margin:40px 0 12px;color:var(--accent)}p,li{font-size:15px;color:#aaa;margin-bottom:12px;line-height:1.8}ul{padding-left:20px}a{color:var(--accent)}</style>

  <p>Vianexu ("we", "our") operates the social media management platform available at vianexu.com. This policy describes how we collect, use and protect your data.</p>

  <h2>1. Data We Collect</h2>
  <ul>
    <li><strong>Registration data:</strong> name, email address and password (stored as bcrypt hash).</li>
    <li><strong>Instagram data:</strong> when connecting your account, we store the access token, user ID and username provided via Meta's official OAuth.</li>
    <li><strong>Published content:</strong> images and captions sent for publication are temporarily stored on our server and deleted immediately after successful publication.</li>
    <li><strong>Usage data:</strong> standard access logs (IP, browser, timestamp) for security purposes.</li>
  </ul>

  <h2>2. How We Use Your Data</h2>
  <ul>
    <li>To authenticate your session on the platform.</li>
    <li>To publish content on Instagram on your behalf, with your explicit authorization.</li>
    <li>To ensure the security and operation of the platform.</li>
    <li><strong>We do not sell, rent or share your data with third parties</strong>, except when necessary for integration with the official Meta/Instagram API.</li>
  </ul>

  <h2>3. Meta / Instagram Integration</h2>
  <p>Our platform uses the Instagram Graph API (Meta). By connecting your Instagram account, you authorize our application to publish content on your behalf. Access can be revoked at any time in Instagram's privacy settings at <a href="https://www.instagram.com/accounts/privacy_and_security/" target="_blank">instagram.com/accounts/privacy_and_security</a>.</p>
  <p>We only request access strictly necessary for publishing (<code>instagram_business_basic</code>, <code>instagram_business_content_publish</code>).</p>

  <h2>4. Data Retention</h2>
  <ul>
    <li>Temporary images: deleted immediately after publication.</li>
    <li>Instagram tokens: stored while you maintain an active account.</li>
    <li>Account data: kept until deletion request.</li>
  </ul>

  <h2>5. Your Rights</h2>
  <p>You can request at any time: access, correction, deletion, or portability of your personal data.</p>
  <p>Contact: <a href="mailto:privacy@vianexu.com">privacy@vianexu.com</a></p>

  <h2>6. Security</h2>
  <p>We use HTTPS for all communications, bcrypt password hashing and securely stored tokens.</p>

  <h2>7. Cookies</h2>
  <p>We only use strictly necessary session cookies to maintain your login. No tracking or advertising cookies.</p>

  <h2>8. Contact</h2>
  <p><a href="mailto:privacy@vianexu.com">privacy@vianexu.com</a> · vianexu.com</p>
</div>
<%- include('../partials/footer') %>
</body></html>
