Placeholder — not yet reviewed by counsel.
This page exists so the account-creation flow has a real link rather
than a broken one. It is not published, binding legal text. A real
Privacy Policy must be drafted and approved by the business's own
legal review before this account system is used with real customers.
Privacy Policy
To be written and approved. For reference, this is what the account
system technically stores today (see Cabinet/README.md for the full
picture) — a real policy needs to describe this accurately along with
retention, legal basis, and any third parties involved:
- Name, email, and a hashed (never plain-text) password.
- Optional two-factor authentication secret and backup codes, if enabled.
- Support requests submitted through this account.
- An audit log of account actions (registration, login, password reset, etc.).
- References to your purchase/license/invoice records, which are held
by the business's billing systems, not duplicated here.