Repository navigation
Legal b privacy - #64
Merged
Merged
Conversation
…nbook
Four new legal pages, each written from the code rather than from a template,
plus a breach-response runbook in the security model.
- docs/privacy-policy.md: the full Art. 13/14 notice. Data inventory traced to
the tables and modules that hold each category, including the one people
forget -- third parties whose personal data sits inside synced files.
Retention stated per category, with an honest note that the 7-day sweep is
a serving guarantee and not a verified automated delete: there is no cron
entry, scheduled function or pg_cron job anywhere that performs it.
- docs/subprocessors.md: six vendors, verified by grepping hostnames rather
than assumed. Supabase runs in ca-central-1 (Montreal), not the US -- probed
per-region against the connection pooler. 30 days' notice, how to object.
- docs/cookies.md: every storage item by name. Written for the post-removal
state of crosscode_distinct_id, which workstream E is landing.
- docs/dpa.md: Art. 28 processing agreement, accept-by-reference. The Art. 32
section says plainly that there is no end-to-end encryption, and lists what
is *not* in place as well as what is.
- docs/security.md: breach-response runbook. 72-hour clock, notification
templates for the authority and for users, evidence preservation before
provider logs age out.
docs/privacy.md gets cross-links only; it stays the plain-language summary.
Plumbing: all four registered in generate-docs.mjs, vite.config.js and both
footers. Kept workstream C's stripHtmlComments() helper -- without it the
<!-- LAWYER --> notes render as visible text. See HANDOFF.md.
Every {{TOKEN}} used is one of the four approved ones and each page ends with
a fill-in checklist naming them.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.