<!doctype html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Ambient Privacy Policy</title>
    <meta name="description" content="Beta privacy policy for Ambient clients, workers, and visitors.">
    <link rel="stylesheet" href="/static/styles.css">
  </head>
  <body>
    <div class="shell">
      <header class="nav">
        <a class="brand" href="/">
          <span class="brand-mark">HC</span>
          <span>Ambient</span>
        </a>
        <nav class="nav-links">
          <a href="/">Overview</a>
          <a href="/terms">Terms</a>
          <a href="/trust">Why it's safe</a>
          <a href="/worker-agreement">Worker Agreement</a>
        </nav>
      </header>

      <main>
        <section class="hero">
          <article class="hero-copy">
            <div class="eyebrow">Beta legal draft</div>
            <h1 class="page-title">Privacy Policy</h1>
            <p class="lead">
              This policy explains what Ambient collects, how data is used, how long it is retained, and the
              deletion choices available during the beta period. It is a practical draft and still needs lawyer review.
            </p>
            <div class="tag-row">
              <span class="tag">Effective April 7, 2026</span>
              <span class="tag">GDPR basics included</span>
              <span class="tag">Subject to review</span>
            </div>
          </article>

          <aside class="hero-panel">
            <div class="panel-kicker">Summary</div>
            <div class="metric">
              <strong>Collect</strong>
              <span>Account identifiers, API usage records, transcripts, worker telemetry, and authentication data.</span>
            </div>
            <div class="metric">
              <strong>Retain</strong>
              <span>Only as long as needed for operations, billing, support, abuse prevention, or legal obligations.</span>
            </div>
            <div class="metric">
              <strong>Delete</strong>
              <span>You can request job and transcript deletion; some billing and audit records must be retained.</span>
            </div>
          </aside>
        </section>

        <section class="section">
          <div class="grid grid-2">
            <article class="panel">
              <h3>1. Information we collect</h3>
              <p>
                Ambient collects account details you provide, API keys and partner configuration, submitted audio
                references, generated transcripts, billing records, support correspondence, and diagnostic events such as
                worker heartbeats, abuse detections, and manager sign-in activity.
              </p>
              <h3>2. How we use data</h3>
              <p>
                We use this information to operate the coordinator, dispatch jobs, validate worker quality, prevent
                abuse, bill for usage, pay workers, and improve the product. We do not sell personal data.
              </p>
              <h3>3. Worker processing model</h3>
              <p>
                Audio is split into short fragments and dispatched to workers. Workers receive the minimum data needed to
                transcribe a fragment. The current pilot is not designed for HIPAA-regulated or highly restricted audio.
              </p>
              <h3>4. Retention</h3>
              <p>
                Job inputs, transcripts, and operational metadata are retained only while needed for product operation,
                recovery, billing, and auditability. Backup media may retain copies for disaster recovery until they age
                out under the active retention window.
              </p>
            </article>

            <article class="panel">
              <h3>5. Your rights</h3>
              <p>
                Subject to applicable law, you may request access to, correction of, or deletion of personal data that
                Ambient controls. EEA and UK users may also request restriction, objection, or portability where
                those rights apply.
              </p>
              <h3>6. Lawful bases and transfers</h3>
              <p>
                Ambient generally processes data to perform a contract, operate legitimate business interests such as
                security and fraud prevention, and comply with legal obligations. Cross-border transfers may occur where
                the service or support providers operate.
              </p>
              <h3>7. Security</h3>
              <p>
                We use HTTPS in transit, access controls for the hosted coordinator, manager authentication with passkeys,
                logging, and operational safeguards. No security program is perfect, and beta systems change frequently.
              </p>
              <h3>8. Contact and updates</h3>
              <p>
                Ambient may update this draft as the product and legal review progress. Material changes will be
                reflected on this page before broad public launch.
              </p>
            </article>
          </div>
        </section>
      </main>

      <footer class="footer">
        Ambient · <a href="/terms">Terms of Service</a> · <a href="/worker-agreement">Worker Agreement</a>
      </footer>
    </div>
  </body>
</html>
