https://governances.app/assets/ActaGuardPrivacyPage-XkssV1E5.js

1import{j as e}from"./vendor-react-B3EYGvMK.js";import"./vendor-core-x-1-NXdt.js";import"./vendor-utils-LzlEokX_.js";import"./vendor-charts-7eHFXWK6.js";import"./vendor-markdown-Dvr4r0Go.js";import"./vendor-3d-h4bRncFc.js";const n=({navigate:s})=>e.jsx("div",{className:"min-h-screen bg-slate-950 text-slate-300 font-sans p-8 md:p-16",children:e.jsxs("div",{className:"max-w-3xl mx-auto space-y-8 bg-slate-900 p-8 rounded-lg border border-slate-800",children:[e.jsx("h1",{className:"text-3xl font-bold text-vos-gold font-mono uppercase tracking-wider",children:"Acta Guard Privacy Policy (Slack App)"}),e.jsxs("p",{className:"text-sm text-slate-500",children:[e.jsx("strong",{children:"Last updated:"})," 2026-06-13",e.jsx("br",{}),e.jsx("strong",{children:"Contact:"})," ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-400 hover:underline",children:"[email protected]"})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Summary"}),e.jsx("p",{children:"Acta Guard is a Slack app that helps teams run AI compliance readiness checks in Slack and provides results as a traceId and a Proof certificate link."})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Data we access in Slack"}),e.jsx("p",{children:"Acta Guard requests only the minimum Slack permissions required to operate:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{children:"commands"})," (to run ",e.jsx("code",{children:"/compliance-scan"}),")"]}),e.jsxs("li",{children:[e.jsx("strong",{children:"chat:write"})," (to deliver results)"]})]}),e.jsx("p",{className:"font-bold text-vos-gold",children:"We do not request Slack message history scopes."})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Data we collect and store"}),e.jsx("p",{children:"When you run a scan, Acta Guard may store:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:["a ",e.jsx("strong",{children:"traceId"})]}),e.jsx("li",{children:"high-level scan metadata (e.g., timestamps and policy outcomes such as “rate limited” or “blocked by policy”)"}),e.jsx("li",{children:"security logs required for abuse prevention and service reliability"})]}),e.jsxs("p",{children:["We do ",e.jsx("strong",{children:"not"})," intentionally store sensitive personal data from Slack messages."]}),e.jsx("p",{className:"font-bold text-vos-gold",children:"We do not use Slack data to train Large Language Models (LLMs)."})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"PII and security policy"}),e.jsx("p",{children:"Acta Guard enforces security guardrails (e.g., SSRF/PII Gate)."}),e.jsxs("p",{children:["If a request is blocked by policy, ",e.jsx("strong",{children:"no scan is executed"})," and ",e.jsx("strong",{children:"no cryptographic evidence is generated"})," for that request."]})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"How results are delivered"}),e.jsxs("p",{children:["Results are delivered ",e.jsx("strong",{children:"privacy-first"})," (ephemeral by default, visible only to the requester)."]})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Sharing & third parties"}),e.jsx("p",{children:"We do not sell personal data. We do not share customer data with third parties except as required to operate the service (e.g., hosting and security infrastructure)."})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Data retention"}),e.jsxs("p",{children:["Scan metadata and traceIds are retained for ",e.jsx("strong",{children:"12 months"}),". Security logs are retained for ",e.jsx("strong",{children:"90 days"}),". After these periods, data is permanently deleted."]})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Legal basis (GDPR)"}),e.jsxs("p",{children:["Processing is based on ",e.jsx("strong",{children:"legitimate interest"})," (Art. 6(1)(f) GDPR) for service operation, security, and abuse prevention. For EU data subjects, data is processed and stored exclusively in the EU (Frankfurt, europe-west3)."]})]}),e.jsxs("section",{className:"space-y-4",children:[e.jsx("h2",{className:"text-xl font-bold text-white",children:"Support & Data Requests"}),e.jsxs("p",{children:["For support, provide the ",e.jsx("strong",{children:"traceId"})," and the approximate Slack timestamp."]}

1),e.jsxs("p",{children:["To request access, deletion, or export of data, email ",e.jsx("a",{href:"mailto:[email protected]",className:"text-blue-400 hover:underline",children:"[email protected]"}),"."]})]})]})});export{n as ActaGuardPrivacyPage};