Privacy notice — local MVP draft.

Controller

[LEGAL OPERATOR / COMPANY NAME]

[REGISTERED ADDRESS]

[PRIVACY CONTACT EMAIL]

Data processed by the local MVP

Account registration can process a name, workspace name, email address, and password hash. Workspace activity can include brand profile details, campaign briefs, demo concepts, role assignments, sessions, usage records, and audit events.

Why data is processed

[LEGAL REVIEW REQUIRED: specify the purpose and GDPR lawful basis for account creation, authentication, product delivery, security, support, legal obligations, and any future billing.]

Storage and recipients

The current MVP uses a local SQLite database. No live AI provider, email provider, analytics provider, or Stripe account is configured in the documented local setup.

[CONFIRM PRODUCTION HOSTING, BACKUPS, ACCESS CONTROLS, SUBPROCESSORS, AND INTERNATIONAL TRANSFERS.]

Retention

Sessions currently expire after up to 14 days.

[DEFINE RETENTION FOR ACCOUNTS, WORKSPACE DATA, AUDIT LOGS, BACKUPS, SUPPORT REQUESTS, AND BILLING RECORDS.]

Your rights

[LEGAL REVIEW REQUIRED: describe applicable access, correction, deletion, restriction, objection, portability, complaint, and identity-verification processes, plus the verified contact route.]