/* ============================================================= Privacy — long-form legal page Placeholder structure with TODO markers for content agent. ============================================================= */ function PagePrivacy() { const sections = [ { id: 'who', title: '1. Who we are', body: 'MedSpaCopy is a service operated by [LEGAL_ENTITY] from [JURISDICTION]. We provide diagnostic SEO/AI-search reports and doctor-reviewed clinical content for licensed US aesthetic clinics.' }, { id: 'what', title: '2. What we collect', body: 'When you run a free visibility report, we collect the URL you submit and your work email. When you order content, we collect billing information through our payment processor and the brief you write. We do not collect protected health information (PHI), and our service is not intended for transmitting it.' }, { id: 'why', title: '3. Why we collect it', body: 'To deliver the report or the article you ordered, to send transactional email about your account, to improve our editorial methodology, and to comply with US tax and accounting law.' }, { id: 'review', title: '4. How doctor review works', body: 'Articles are reviewed by US-licensed physicians under contract with MedSpaCopy. Reviewers see only the article draft, the clinic name, and the editorial brief — no patient data. Each reviewer signs a confidentiality and FTC-claims compliance agreement.' }, { id: 'sharing', title: '5. Who we share data with', body: 'Stripe (payments), AWS (hosting), Loops (transactional email), and the assigned medical reviewer for the duration of the review. We do not sell data, and we do not share it with advertising networks.' }, { id: 'retention', title: '6. How long we keep it', body: 'Reports and account data: for as long as your account is open, plus 24 months after closure for accounting. Anonymized methodology samples may be kept indefinitely.' }, { id: 'rights', title: '7. Your rights', body: 'You can request access, correction, or deletion of your data at any time at privacy@medspacopy.com. California residents have additional rights under CCPA. EU/UK residents — we are not a controller for EU/UK personal data.' }, { id: 'cookies', title: '8. Cookies', body: 'A session cookie for sign-in, a preference cookie for theme. No third-party advertising or analytics cookies. Optional analytics through privacy-respecting tooling (Plausible).' }, { id: 'children', title: '9. Children', body: 'Our service is for licensed clinics and their staff. We do not knowingly collect data from anyone under 18.' }, { id: 'changes', title: '10. Changes', body: 'We will email account holders before any material change to this policy. Minor edits (typos, clarifications) are logged in the change history below.' }, ]; return (
Legal · Updated 2026-04-15 · v 1.04

Privacy policy.

What we collect, why we collect it, and the lines we don't cross. Written so you can read it in five minutes.

{sections.map(s => (

{s.title}

{s.body}

))}
2026-04-15 · v 1.04 · clarified retention policy
2026-02-02 · v 1.03 · added FTC-claims compliance language
2025-12-10 · v 1.02 · launch
); }