Privacy Policy
Last updated: TODO
Placeholder. Replace before public launch. Must disclose: what we collect (email, company name, API usage logs), how we use it (account auth, billing, abuse prevention), retention (12 months for usage logs), data sub-processors (Stripe, Resend, hosting provider), how to delete an account, GDPR / CCPA rights. NCUA data itself is public; we serve it but don't claim ownership.