{{--
    PLACEHOLDER LEGAL TEXT — NOT REVIEWED BY COUNSEL.
    Drafting scaffolding covering topics a Nigerian fintech privacy policy
    typically needs, including a Nigeria Data Protection Act (NDPA) 2023
    reference. Have a lawyer qualified in Nigerian data protection law
    review and finalize before this is relied upon.
--}}
<x-layouts.public title="Privacy Policy" description="How URecharge collects, uses and protects your personal data.">
    <section class="mx-auto max-w-3xl px-4 py-16 sm:px-6 lg:px-8">
        <h1 class="text-3xl font-bold tracking-tight text-slate-900 sm:text-4xl dark:text-white">Privacy Policy</h1>
        <p class="mt-2 text-sm text-slate-500 dark:text-slate-400">Last updated: {{ now()->format('F Y') }}</p>

        <div class="prose prose-slate mt-10 max-w-none dark:prose-invert">
            <h2>1. Introduction</h2>
            <p>
                This policy explains what personal data URecharge collects, why we collect it, and how it's used,
                stored and protected, in line with the Nigeria Data Protection Act (NDPA) 2023.
            </p>

            <h2>2. Information we collect</h2>
            <ul>
                <li>Account information: name, email address, phone number, and password (stored hashed, never in plain text).</li>
                <li>Transaction information: wallet funding and purchase history, including amounts, references and status.</li>
                <li>Identity verification information, where required for KYC purposes.</li>
                <li>Technical information: IP address, device and browser information, collected for security and fraud prevention.</li>
            </ul>
            <p>
                We do not collect or store your full card details — card payments are processed directly by our
                payment processor (Paystack), which is independently responsible for card data under PCI-DSS.
            </p>

            <h2>3. How we use your information</h2>
            <ul>
                <li>To create and maintain your account and wallet.</li>
                <li>To process your purchases and funding requests, and to detect and prevent fraud.</li>
                <li>To communicate with you about your account, transactions, or in response to a message you send us.</li>
                <li>To comply with legal and regulatory obligations, including KYC/AML requirements.</li>
            </ul>

            <h2>4. Sharing your information</h2>
            <p>
                We share the minimum information necessary with our payment processor (Paystack) to process a
                deposit, and with VTU/billing aggregators to fulfil a purchase you've requested. We do not sell
                your personal data.
            </p>

            <h2>5. Data retention</h2>
            <p>
                We retain account and transaction records for as long as your account is active and for a period
                afterward as required for financial record-keeping and regulatory compliance.
            </p>

            <h2>6. Your rights</h2>
            <p>
                Subject to applicable law, you may request access to, correction of, or deletion of your personal
                data, by contacting us as described below. We may decline a deletion request where we're required
                to retain a record for regulatory reasons.
            </p>

            <h2>7. Security</h2>
            <p>
                We use industry-standard measures to protect your data, including encryption in transit, hashed
                passwords, and access controls limiting who within URecharge can view sensitive data.
            </p>

            <h2>8. Changes to this policy</h2>
            <p>
                We may update this policy from time to time. Material changes will be highlighted on this page.
            </p>

            <h2>9. Contact</h2>
            <p>
                For any privacy-related request or question, reach us via our <a href="{{ route('contact.show') }}">contact page</a>.
            </p>
        </div>
    </section>
</x-layouts.public>