Update privacy policy, terms of service, and support pages with new sections and details

Enhances the Privacy Policy with Chrome Web Store Limited Use Disclosure, Data Controller, and Data Retention Schedule sections. Updates the Terms of Service with detailed disclaimers for browser extension use. Adds a Security & Abuse Reporting section to the Support page.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9203795e-937a-4306-b81d-b4d5c78c240e
Replit-Commit-Checkpoint-Type: intermediate_checkpoint
Replit-Commit-Event-Id: 05219c3d-56d8-4eb5-ace6-24ec5d7e049a
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7c94b7a0-29c7-4f2e-94ef-44b2153872b7/9203795e-937a-4306-b81d-b4d5c78c240e/j2GzDqZ
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
sirpiglr 2025-12-15 00:17:48 +00:00
parent ea08d820cd
commit e4a75a3740
3 changed files with 392 additions and 21 deletions

View file

@ -165,10 +165,31 @@ export default function Privacy() {
>
Chrome Web Store User Data Policy
</a>
, including the Limited Use requirements. We only request permissions
necessary for DLP functionality and do not use this data for advertising,
creditworthiness assessment, or sale to third parties.
, including the Limited Use requirements.
</p>
<ul className="list-disc pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>
<strong>Minimal Permissions:</strong> We only request browser permissions
strictly necessary for DLP security scanning functionality. We do not
request access to browsing history, bookmarks, or other unrelated data.
</li>
<li>
<strong>No Human Review of Personal Data:</strong> User data processed
by the extension is NOT subject to human review except in cases of:
(a) explicit user consent, (b) security investigations for abuse/fraud
prevention, or (c) legal compliance requirements.
</li>
<li>
<strong>No Advertising or Profiling:</strong> We do not use extension
data for advertising, user profiling, creditworthiness assessment,
or sale to third parties.
</li>
<li>
<strong>Automated Processing Only:</strong> DLP pattern matching is
performed by automated systems. Human operators only access aggregated,
anonymized audit logs for security purposes.
</li>
</ul>
</section>
<section className="space-y-3">
@ -184,6 +205,22 @@ export default function Privacy() {
</p>
</section>
<section className="space-y-3">
<h2 className="font-semibold">Data Controller & Data Protection Officer</h2>
<p className="text-sm text-muted-foreground">
<strong>Data Controller:</strong> AeThex Inc., 123 Innovation Drive,
Phoenix, AZ 85001, United States. We are responsible for deciding how
we collect, hold, and use your personal information.
</p>
<p className="text-sm text-muted-foreground mt-2">
<strong>Data Protection Officer (DPO):</strong> For questions about
data protection or to exercise your rights, contact our DPO at{" "}
<a href="mailto:dpo@aethex.dev" className="text-aethex-400 hover:underline">
dpo@aethex.dev
</a>.
</p>
</section>
<section className="space-y-3">
<h2 className="font-semibold">Legal Bases (EEA/UK)</h2>
<p className="text-sm text-muted-foreground">
@ -214,11 +251,37 @@ export default function Privacy() {
</section>
<section className="space-y-3">
<h2 className="font-semibold">Data Retention</h2>
<h2 className="font-semibold">Data Retention Schedule</h2>
<p className="text-sm text-muted-foreground">
We retain data for as long as needed to provide Services, comply
with law, resolve disputes, and enforce agreements. You may
request deletion of your account data, subject to legal holds.
with law, resolve disputes, and enforce agreements. Specific retention
periods include:
</p>
<ul className="list-disc pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>
<strong>Account Data:</strong> Retained while your account is active
and for 30 days after deletion request to allow recovery.
</li>
<li>
<strong>Server Logs & Analytics:</strong> Retained for 90 days, then
aggregated or deleted.
</li>
<li>
<strong>Security Violation Records:</strong> Retained for 2 years for
abuse prevention and legal compliance.
</li>
<li>
<strong>Backups:</strong> Retained for 30 days in encrypted form,
then permanently deleted.
</li>
<li>
<strong>Financial/Transaction Records:</strong> Retained for 7 years
as required by tax and accounting regulations.
</li>
</ul>
<p className="text-sm text-muted-foreground mt-2">
You may request deletion of your account data, subject to legal holds
and regulatory requirements.
</p>
</section>
@ -236,6 +299,85 @@ export default function Privacy() {
</ul>
</section>
<section className="space-y-3">
<h2 className="font-semibold">California Privacy Rights (CCPA/CPRA)</h2>
<p className="text-sm text-muted-foreground">
If you are a California resident, you have additional rights under
the California Consumer Privacy Act (CCPA) and California Privacy
Rights Act (CPRA):
</p>
<ul className="list-disc pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>
<strong>Right to Know:</strong> Request disclosure of personal
information we collect, use, disclose, and sell.
</li>
<li>
<strong>Right to Delete:</strong> Request deletion of your personal
information, subject to certain exceptions.
</li>
<li>
<strong>Right to Correct:</strong> Request correction of inaccurate
personal information.
</li>
<li>
<strong>Right to Opt-Out of Sale/Sharing:</strong> We do not sell
or share your personal information for cross-context behavioral
advertising. If this changes, you will have the right to opt out.
</li>
<li>
<strong>Right to Limit Use of Sensitive Data:</strong> Request
limitations on processing of sensitive personal information.
</li>
<li>
<strong>Right to Non-Discrimination:</strong> You will not receive
discriminatory treatment for exercising your rights.
</li>
</ul>
<p className="text-sm text-muted-foreground mt-2">
<strong>Do Not Sell or Share My Personal Information:</strong> AeThex
does not sell personal information and does not share personal information
for cross-context behavioral advertising purposes.
</p>
<p className="text-sm text-muted-foreground mt-2">
To exercise any of these rights, contact us at{" "}
<a href="mailto:privacy@aethex.dev" className="text-aethex-400 hover:underline">
privacy@aethex.dev
</a>{" "}
or submit a request through your account settings. We will verify your
identity before processing your request.
</p>
</section>
<section className="space-y-3">
<h2 className="font-semibold">Right to Appeal</h2>
<p className="text-sm text-muted-foreground">
If we deny your data rights request (such as access, deletion, or
correction), you have the right to appeal our decision. To appeal:
</p>
<ol className="list-decimal pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>
Email{" "}
<a href="mailto:dpo@aethex.dev" className="text-aethex-400 hover:underline">
dpo@aethex.dev
</a>{" "}
with the subject line "Privacy Appeal".
</li>
<li>
Include your original request reference number and explain why you
believe our decision was incorrect.
</li>
<li>
We will review your appeal within 45 days and provide a written
response explaining our final decision.
</li>
<li>
If you are unsatisfied with our appeal decision, you may file a
complaint with your local data protection authority (for EEA/UK
residents) or the California Attorney General (for California residents).
</li>
</ol>
</section>
<section className="space-y-3">
<h2 className="font-semibold">Security</h2>
<p className="text-sm text-muted-foreground">

View file

@ -476,8 +476,168 @@ export default function Support() {
</div>
</section>
{/* Emergency Support */}
{/* Security & Abuse Reporting */}
<section className="py-20">
<div className="container mx-auto px-4">
<div className="text-center mb-16 animate-slide-up">
<h2 className="text-3xl lg:text-4xl font-bold text-gradient mb-4">
Security & Abuse Reporting
</h2>
<p className="text-lg text-muted-foreground">
Report security vulnerabilities, abuse, or policy violations
</p>
</div>
<div className="grid grid-cols-1 lg:grid-cols-2 gap-6 max-w-5xl mx-auto">
<Card className="border-border/50 hover:border-aethex-400/50 transition-all duration-300 animate-scale-in">
<CardHeader>
<div className="flex items-center space-x-4">
<div className="p-3 rounded-lg bg-gradient-to-r from-red-500 to-orange-600">
<Shield className="h-6 w-6 text-white" />
</div>
<div>
<CardTitle className="text-xl">Report Security Vulnerability</CardTitle>
<CardDescription>
Found a security issue? Let us know responsibly.
</CardDescription>
</div>
</div>
</CardHeader>
<CardContent className="space-y-4">
<p className="text-sm text-muted-foreground">
If you've discovered a security vulnerability in AeThex services,
please report it to our security team. We take all reports seriously
and will respond promptly.
</p>
<Button asChild className="w-full bg-red-500 hover:bg-red-600">
<a href="mailto:security@aethex.dev">
<Mail className="h-4 w-4 mr-2" />
security@aethex.dev
</a>
</Button>
</CardContent>
</Card>
<Card className="border-border/50 hover:border-aethex-400/50 transition-all duration-300 animate-scale-in">
<CardHeader>
<div className="flex items-center space-x-4">
<div className="p-3 rounded-lg bg-gradient-to-r from-yellow-500 to-amber-600">
<Bug className="h-6 w-6 text-white" />
</div>
<div>
<CardTitle className="text-xl">Report Abuse or Violations</CardTitle>
<CardDescription>
Report harassment, spam, or policy violations.
</CardDescription>
</div>
</div>
</CardHeader>
<CardContent className="space-y-4">
<p className="text-sm text-muted-foreground">
If you've encountered abuse, harassment, spam, or Terms of Service
violations, report them to our Trust & Safety team.
</p>
<Button asChild className="w-full bg-yellow-500 hover:bg-yellow-600 text-black">
<a href="mailto:abuse@aethex.dev">
<Mail className="h-4 w-4 mr-2" />
abuse@aethex.dev
</a>
</Button>
</CardContent>
</Card>
</div>
<Card className="max-w-5xl mx-auto mt-8 border-border/50 animate-slide-up">
<CardHeader>
<CardTitle className="text-xl text-gradient">Incident Response Process</CardTitle>
<CardDescription>
What happens after you report a security issue or abuse
</CardDescription>
</CardHeader>
<CardContent>
<div className="grid grid-cols-1 md:grid-cols-4 gap-6">
<div className="text-center space-y-2">
<div className="mx-auto w-12 h-12 rounded-full bg-aethex-400/20 flex items-center justify-center">
<span className="text-xl font-bold text-aethex-400">1</span>
</div>
<h4 className="font-semibold">Acknowledgment</h4>
<p className="text-sm text-muted-foreground">
We acknowledge receipt within 24 hours for security reports,
48 hours for abuse reports.
</p>
</div>
<div className="text-center space-y-2">
<div className="mx-auto w-12 h-12 rounded-full bg-aethex-400/20 flex items-center justify-center">
<span className="text-xl font-bold text-aethex-400">2</span>
</div>
<h4 className="font-semibold">Investigation</h4>
<p className="text-sm text-muted-foreground">
Our team investigates the report, gathers evidence, and
assesses severity.
</p>
</div>
<div className="text-center space-y-2">
<div className="mx-auto w-12 h-12 rounded-full bg-aethex-400/20 flex items-center justify-center">
<span className="text-xl font-bold text-aethex-400">3</span>
</div>
<h4 className="font-semibold">Resolution</h4>
<p className="text-sm text-muted-foreground">
We take appropriate action - patching vulnerabilities or
enforcing policies against violators.
</p>
</div>
<div className="text-center space-y-2">
<div className="mx-auto w-12 h-12 rounded-full bg-aethex-400/20 flex items-center justify-center">
<span className="text-xl font-bold text-aethex-400">4</span>
</div>
<h4 className="font-semibold">Follow-Up</h4>
<p className="text-sm text-muted-foreground">
We notify you of the outcome and any actions taken (where
appropriate).
</p>
</div>
</div>
</CardContent>
</Card>
<Card className="max-w-5xl mx-auto mt-8 border-border/50 animate-slide-up">
<CardHeader>
<CardTitle className="text-xl text-gradient">Escalation Steps</CardTitle>
<CardDescription>
If your report isn't addressed or you disagree with the outcome
</CardDescription>
</CardHeader>
<CardContent>
<ol className="space-y-4 text-sm text-muted-foreground">
<li className="flex items-start gap-3">
<span className="flex-shrink-0 w-6 h-6 rounded-full bg-aethex-400/20 flex items-center justify-center text-xs font-bold text-aethex-400">1</span>
<div>
<strong className="text-foreground">Reply to your original report</strong>
<p>Reference your ticket number and explain why you believe further action is needed.</p>
</div>
</li>
<li className="flex items-start gap-3">
<span className="flex-shrink-0 w-6 h-6 rounded-full bg-aethex-400/20 flex items-center justify-center text-xs font-bold text-aethex-400">2</span>
<div>
<strong className="text-foreground">Contact escalations@aethex.dev</strong>
<p>For unresolved issues, escalate to our senior Trust & Safety team with your ticket number.</p>
</div>
</li>
<li className="flex items-start gap-3">
<span className="flex-shrink-0 w-6 h-6 rounded-full bg-aethex-400/20 flex items-center justify-center text-xs font-bold text-aethex-400">3</span>
<div>
<strong className="text-foreground">Executive Review</strong>
<p>For serious unresolved matters, contact legal@aethex.dev for executive review.</p>
</div>
</li>
</ol>
</CardContent>
</Card>
</div>
</section>
{/* Emergency Support */}
<section className="py-20 bg-background/30">
<div className="container mx-auto px-4">
<Card className="max-w-4xl mx-auto bg-gradient-to-r from-red-500/10 to-orange-500/10 border-red-500/30 animate-scale-in">
<CardContent className="p-8 text-center">

View file

@ -176,25 +176,51 @@ export default function Terms() {
</h2>
<p className="text-sm text-muted-foreground">
The AeThex Sentinel extension and Warden bot are provided for data loss
prevention purposes. You acknowledge that:
prevention purposes. By installing or using the extension, you acknowledge
and agree to the following:
</p>
<ul className="list-disc pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>
The extension may interfere with website functionality on certain sites.
AeThex is not responsible for any website breakage or data loss resulting
<strong>Website Interference:</strong> The extension may interfere with
website functionality on certain sites. AeThex is not responsible for
any website breakage, form submission failures, or data loss resulting
from extension use.
</li>
<li>
No security tool is 100% effective. AeThex does not guarantee prevention
of all data leaks or security incidents.
<strong>False Positives:</strong> The DLP scanning system may generate
false positives, blocking legitimate content that resembles sensitive
data patterns. AeThex is not liable for any business disruption, lost
transactions, or inconvenience caused by false positive detections.
</li>
<li>
You are solely responsible for configuring security policies appropriate
for your organization's needs.
<strong>No Absolute Security Guarantee:</strong> No security tool is
100% effective. AeThex does not guarantee prevention of all data leaks,
security incidents, or breaches. The extension is one layer of defense
and should not be your sole security measure.
</li>
<li>
The extension requires certain browser permissions to function. You consent
to granting these permissions when you install the extension.
<strong>Data Interception Liability:</strong> While the extension scans
text for security purposes, AeThex is not liable for any claims arising
from the interception, analysis, or processing of data passing through
the extension. You are responsible for ensuring compliance with applicable
privacy laws in your jurisdiction.
</li>
<li>
<strong>Policy Configuration Responsibility:</strong> You are solely
responsible for configuring security policies appropriate for your
organization's needs. Misconfigured policies may result in over-blocking
or under-protection.
</li>
<li>
<strong>Policy Updates:</strong> You are responsible for staying informed
about extension policy updates. We will notify you of material changes,
but continued use after notification constitutes acceptance.
</li>
<li>
<strong>Browser Permissions:</strong> The extension requires certain
browser permissions to function. You consent to granting these permissions
when you install the extension and acknowledge that revoking permissions
will disable extension functionality.
</li>
</ul>
</section>
@ -214,13 +240,56 @@ export default function Terms() {
<section className="space-y-3">
<h2 className="font-semibold">Dispute Resolution & Arbitration</h2>
<p className="text-sm text-muted-foreground">
Any dispute arising from these Terms or the Services shall be resolved
<strong>Mutual Agreement:</strong> Both you and AeThex Inc. agree that
any dispute arising from these Terms or the Services shall be resolved
through binding arbitration in accordance with the rules of the American
Arbitration Association. The arbitration shall take place in Arizona, USA.
You agree to waive any right to participate in a class action lawsuit or
class-wide arbitration against AeThex Inc. This arbitration agreement does
not preclude you from bringing issues to the attention of federal, state,
or local agencies who may seek relief on your behalf.
</p>
<p className="text-sm text-muted-foreground mt-2">
<strong>Class Action Waiver:</strong> You agree to waive any right to
participate in a class action lawsuit or class-wide arbitration against
AeThex Inc.
</p>
<p className="text-sm text-muted-foreground mt-2">
<strong>Small Claims Court Exception:</strong> Notwithstanding the above,
either party may bring an individual action in small claims court for
disputes within the court's jurisdictional limits.
</p>
<p className="text-sm text-muted-foreground mt-2">
<strong>Injunctive Relief Exception:</strong> Either party may seek
emergency injunctive relief from a court of competent jurisdiction to
prevent irreparable harm pending arbitration, including protection of
intellectual property rights, confidential information, or to stop
ongoing violations of these Terms.
</p>
<p className="text-sm text-muted-foreground mt-2">
<strong>Government Agency Complaints:</strong> This arbitration agreement
does not preclude you from bringing issues to the attention of federal,
state, or local agencies who may seek relief on your behalf.
</p>
</section>
<section className="space-y-3">
<h2 className="font-semibold">Arbitration Opt-Out</h2>
<p className="text-sm text-muted-foreground">
You have the right to opt out of binding arbitration within 30 days of
creating your account or accepting these Terms (whichever is later). To
opt out, you must send a written notice to{" "}
<a href="mailto:legal@aethex.dev" className="text-aethex-400 hover:underline">
legal@aethex.dev
</a>{" "}
with the subject line "Arbitration Opt-Out" that includes:
</p>
<ul className="list-disc pl-5 text-sm text-muted-foreground space-y-1 mt-2">
<li>Your full legal name</li>
<li>Your AeThex account email address</li>
<li>A clear statement that you wish to opt out of binding arbitration</li>
<li>The date of your opt-out request</li>
</ul>
<p className="text-sm text-muted-foreground mt-2">
If you opt out, disputes will be resolved in the state or federal courts
located in Maricopa County, Arizona. Opting out will not affect your
ability to use the Services.
</p>
</section>