<!--
  Starting-point legal boilerplate, not a substitute for review by counsel.
  The data categories below are drawn from what this codebase actually
  collects (see database/schema.sql); update this if the site's forms,
  cookies, or third-party services change.
-->
<!doctype html>
<html lang="en">
<head>
<%- include('../partials/head', { meta }) %>
</head>
<body data-page="privacy-policy">
<%- include('../partials/header', { heroDark: false }) %>

<main id="main-content">
  <article style="padding-top: calc(var(--header-h) + var(--space-2xl)); padding-bottom: var(--space-2xl);">
    <div class="container" style="max-width: 780px; margin-inline: auto;">
      <header style="margin-bottom: var(--space-xl);" data-reveal>
        <p class="section-eyebrow">Legal</p>
        <h1 style="font-size: var(--fs-h1); margin-bottom: 0.5rem;">Privacy Policy</h1>
        <p class="lead" style="margin: 0;">Last updated: August 7, 2026</p>
      </header>

      <div class="article-body" data-reveal>
        <p>
          This Privacy Policy explains how Kubera Wealth Management ("Kubera," "we," "us," or "our") collects,
          uses, and protects information when you visit <%= SITE_URL %> (the "Site") or interact with our
          founder or admin portals. It does not apply to information we collect offline or through other means.
        </p>

        <h2>1. Information We Collect</h2>
        <p>We collect information you provide directly, through the following parts of the Site:</p>
        <ul>
          <li><strong>Contact form</strong> — your name, email address, subject, and message.</li>
          <li><strong>Newsletter signup</strong> — your email address.</li>
          <li><strong>"Apply for Funding"</strong> — your name, email, phone number, company website, sector, stage, target raise amount, a description of your company, and any pitch deck, financials, or business plan you upload.</li>
          <li><strong>Founder portal account</strong> — the email address and password (stored as a one-way hash, never in plain text) you use to activate and log in to your account, and any documents you upload afterward.</li>
          <li><strong>Careers applications</strong> — your name, email, phone, LinkedIn URL, résumé, and any cover note you submit.</li>
          <li><strong>Event registration</strong> — your name, email, and company.</li>
        </ul>
        <p>We also automatically collect limited technical information when you use the Site:</p>
        <ul>
          <li>IP address and general request metadata (for rate limiting, security, and abuse prevention);</li>
          <li>a session cookie that keeps you logged in and protects forms against cross-site request forgery; and</li>
          <li>a local, on-device preference for light/dark theme and whether you've acknowledged our cookie notice — these are stored in your browser's local storage, not sent to us.</li>
        </ul>
        <p>
          We do not currently use third-party advertising or analytics trackers. The Site does load fonts and a
          small number of JavaScript libraries from third-party content delivery networks (Google Fonts, jsDelivr,
          unpkg) to render correctly; those requests are subject to the respective provider's own privacy practices.
        </p>

        <h2>2. How We Use Your Information</h2>
        <ul>
          <li>to respond to inquiries submitted through the contact form;</li>
          <li>to evaluate applications submitted through "Apply for Funding" or our careers page;</li>
          <li>to create and maintain your founder portal account and let you track your application's status;</li>
          <li>to send you operational emails — account activation, password resets, application-status updates, and, if you've subscribed, our newsletter;</li>
          <li>to register you for events you sign up for; and</li>
          <li>to maintain the security, integrity, and proper functioning of the Site.</li>
        </ul>
        <p>We do not sell your personal information.</p>

        <h2>3. Cookies</h2>
        <p>
          We use a small number of strictly necessary cookies — most notably a session cookie that keeps you
          logged in to the founder or admin portal and protects forms from cross-site request forgery. These
          are required for the Site to function and are not used for advertising or cross-site tracking. The
          cookie notice shown on your first visit lets you acknowledge this; declining does not disable the
          strictly necessary session cookie, since the Site cannot log you in without it.
        </p>

        <h2>4. How We Share Information</h2>
        <p>We share personal information only in the following circumstances:</p>
        <ul>
          <li><strong>Service providers</strong> — companies that host our infrastructure, deliver our email, or otherwise process data on our behalf, under obligations consistent with this policy;</li>
          <li><strong>Legal reasons</strong> — if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Kubera, our users, or others; and</li>
          <li><strong>Business transfers</strong> — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.</li>
        </ul>
        <p>We do not otherwise share your personal information with third parties without your consent.</p>

        <h2>5. Data Retention</h2>
        <p>
          We retain personal information for as long as necessary to fulfill the purposes described in this
          policy — for example, for as long as your founder portal account is active, or as needed to comply
          with legal, accounting, or reporting obligations. You may request deletion as described below.
        </p>

        <h2>6. Your Rights and Choices</h2>
        <ul>
          <li><strong>Newsletter</strong> — every email we send includes an unsubscribe option, or you can email us directly.</li>
          <li><strong>Access, correction, or deletion</strong> — you can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, subject to legitimate business or legal retention needs.</li>
          <li><strong>Founder portal</strong> — you can update your password at any time from your account settings.</li>
        </ul>
        <p>
          To exercise any of these rights, contact us using the details in Section 10 below. Depending on where
          you live, you may have additional rights under applicable law (for example, the EU/UK GDPR or the
          California Consumer Privacy Act); we will honor requests to the extent required by the law that
          applies to you.
        </p>

        <h2>7. Data Security</h2>
        <p>
          We use technical and organizational safeguards appropriate to the sensitivity of the information we
          hold — including encrypted password storage, access controls on our admin and founder portals, and
          rate limiting on public forms. No method of transmission or storage is completely secure, and we
          cannot guarantee absolute security.
        </p>

        <h2>8. Children's Privacy</h2>
        <p>
          This Site is not directed to children under 16, and we do not knowingly collect personal information
          from children under 16. If you believe a child has provided us with personal information, contact us
          and we will take appropriate steps to delete it.
        </p>

        <h2>9. International Users</h2>
        <p>
          If you access the Site from outside the country where our servers are located, your information may
          be transferred to, stored, and processed in a different jurisdiction with different data protection
          laws than your own.
        </p>

        <h2>10. Contact Us</h2>
        <p>
          Questions about this Privacy Policy, or requests relating to your personal information, can be sent
          through our <a href="/contact">Contact page</a><% if (CONTACT_EMAIL) { %> or to <a href="mailto:<%= CONTACT_EMAIL %>"><%= CONTACT_EMAIL %></a><% } %>.
        </p>

        <h2>11. Changes to This Policy</h2>
        <p>
          We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most
          recent revision. Material changes will be reflected on this page.
        </p>
      </div>
    </div>
  </article>
</main>

<%- include('../partials/footer') %>
</body>
</html>
