{% extends 'base.html' %}
{% load static %}

{% block title %}Privacy Policy - Sales Shark{% endblock %}

{% block extra_css %}
<style>
    .privacy-container {
        max-width: 900px;
        margin: 0 auto;
        padding: 40px 20px;
        font-size: 1rem;
        line-height: 1.7;
    }
    
    .privacy-header {
        text-align: center;
        margin-bottom: 40px;
        padding-bottom: 20px;
        border-bottom: 3px solid var(--primary-color);
    }
    
    .section {
        margin-bottom: 35px;
        background: var(--card-bg);
        padding: 25px;
        border-radius: 10px;
        border-left: 4px solid var(--primary-color);
    }
    
    .section h3 {
        color: var(--primary-color);
        font-weight: 600;
        margin-bottom: 15px;
    }
    
    .highlight-box {
        background: #e8f4fd;
        border: 1px solid #b3d9ff;
        border-radius: 8px;
        padding: 20px;
        margin: 20px 0;
    }
    
    .data-protection-box {
        background: #e8f5e8;
        border: 2px solid #28a745;
        border-radius: 10px;
        padding: 25px;
        margin: 25px 0;
        text-align: center;
    }
    
    .contact-info {
        background: var(--primary-color);
        color: white;
        padding: 25px;
        border-radius: 10px;
        margin-top: 40px;
        text-align: center;
    }
    
    .last-updated {
        text-align: center;
        color: #6c757d;
        font-style: italic;
        margin-bottom: 30px;
    }
    
    .data-type {
        background: #f8f9fa;
        border-radius: 6px;
        padding: 15px;
        margin: 15px 0;
        border-left: 3px solid var(--primary-color);
    }
</style>
{% endblock %}

{% block content %}
<div class="privacy-container">
    <div class="privacy-header">
        <h1><i class="fas fa-user-shield"></i> Privacy Policy</h1>
        <p class="lead">How we collect, use, and protect your personal information</p>
    </div>
    
    <div class="last-updated">
        Last updated: September 11, 2025
    </div>
    
    <!-- Introduction -->
    <div class="section">
        <h3><i class="fas fa-info-circle"></i> 1. Introduction</h3>
        <p>At Sales Shark, we take your privacy seriously. This Privacy Policy explains how Optinet Limited ("we," "us," or "our") collects, uses, processes, and protects your personal information when you use our business management platform.</p>
        
        <p>This policy applies to all users of Sales Shark, including business owners, employees, customers, and suppliers whose information is processed through our system.</p>
        
        <div class="data-protection-box">
            <h4><i class="fas fa-shield-alt"></i> Our Privacy Commitment</h4>
            <p><strong>We are committed to protecting your privacy and ensuring the security of your personal data. We will never sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.</strong></p>
        </div>
    </div>

    <!-- Information We Collect -->
    <div class="section">
        <h3><i class="fas fa-database"></i> 2. Information We Collect</h3>
        
        <div class="data-type">
            <h5><i class="fas fa-user"></i> Account Information</h5>
            <ul>
                <li>Name and contact details (email, phone number)</li>
                <li>Business information (company name, address, tax numbers)</li>
                <li>Login credentials (username, encrypted password)</li>
                <li>Payment and billing information</li>
            </ul>
        </div>
        
        <div class="data-type">
            <h5><i class="fas fa-chart-bar"></i> Business Data</h5>
            <ul>
                <li>Customer records and transaction history</li>
                <li>Product inventory and pricing information</li>
                <li>Employee records and attendance data</li>
                <li>Supplier information and purchase orders</li>
                <li>Financial records and reporting data</li>
            </ul>
        </div>
        
        <div class="data-type">
            <h5><i class="fas fa-cog"></i> Usage Information</h5>
            <ul>
                <li>System usage patterns and feature utilization</li>
                <li>Log files and access records</li>
                <li>Device information (IP address, browser type, operating system)</li>
                <li>Performance metrics and error reports</li>
            </ul>
        </div>
        
        <div class="data-type">
            <h5><i class="fas fa-comments"></i> Communication Data</h5>
            <ul>
                <li>Support requests and correspondence</li>
                <li>Feedback and survey responses</li>
                <li>Marketing communications preferences</li>
            </ul>
        </div>
    </div>

    <!-- How We Use Information -->
    <div class="section">
        <h3><i class="fas fa-tasks"></i> 3. How We Use Your Information</h3>
        <p>We use your personal information for the following purposes:</p>
        
        <p><strong>3.1 Service Provision:</strong></p>
        <ul>
            <li>Operating and maintaining the Sales Shark platform</li>
            <li>Processing transactions and managing payments</li>
            <li>Providing customer support and technical assistance</li>
            <li>Generating reports and analytics for your business</li>
        </ul>
        
        <p><strong>3.2 Account Management:</strong></p>
        <ul>
            <li>Creating and managing user accounts</li>
            <li>Authenticating users and preventing unauthorized access</li>
            <li>Managing subscriptions and billing</li>
            <li>Communicating important account updates</li>
        </ul>
        
        <p><strong>3.3 Service Improvement:</strong></p>
        <ul>
            <li>Analyzing usage patterns to improve our services</li>
            <li>Developing new features and functionality</li>
            <li>Monitoring system performance and security</li>
            <li>Conducting research and analytics</li>
        </ul>
        
        <p><strong>3.4 Legal and Compliance:</strong></p>
        <ul>
            <li>Complying with applicable laws and regulations</li>
            <li>Responding to legal requests and court orders</li>
            <li>Protecting our rights and preventing fraud</li>
            <li>Ensuring system security and integrity</li>
        </ul>
    </div>

    <!-- Data Sharing -->
    <div class="section">
        <h3><i class="fas fa-share-alt"></i> 4. Data Sharing and Disclosure</h3>
        <p>We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:</p>
        
        <p><strong>4.1 Service Providers:</strong> We work with trusted third-party service providers who help us operate our platform:</p>
        <ul>
            <li><strong>Cloud Infrastructure:</strong> Secure data hosting and storage</li>
            <li><strong>Payment Processors:</strong> Secure payment processing (M-Pesa, credit cards)</li>
            <li><strong>Email Services:</strong> Transactional and support communications</li>
            <li><strong>Analytics Tools:</strong> Usage analytics and performance monitoring</li>
        </ul>
        <p>All service providers are bound by strict confidentiality agreements and data protection requirements.</p>
        
        <p><strong>4.2 Legal Requirements:</strong> We may disclose information when required by law or to protect our legal rights:</p>
        <ul>
            <li>Responding to court orders, subpoenas, or legal processes</li>
            <li>Investigating fraud or security incidents</li>
            <li>Protecting the rights, property, or safety of our users</li>
            <li>Complying with regulatory requirements</li>
        </ul>
        
        <p><strong>4.3 Business Transfers:</strong> In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.</p>
    </div>

    <!-- Data Security -->
    <div class="section">
        <h3><i class="fas fa-lock"></i> 5. Data Security Measures</h3>
        <p>We implement comprehensive security measures to protect your personal information:</p>
        
        <p><strong>5.1 Encryption:</strong></p>
        <ul>
            <li><strong>Data in Transit:</strong> All data transmitted between your device and our servers is encrypted using TLS 1.3 (256-bit encryption)</li>
            <li><strong>Data at Rest:</strong> All stored data is encrypted using AES-256 encryption</li>
            <li><strong>Database Encryption:</strong> Database files and backups are fully encrypted</li>
        </ul>
        
        <p><strong>5.2 Access Controls:</strong></p>
        <ul>
            <li>Multi-factor authentication for admin access</li>
            <li>Role-based access permissions</li>
            <li>Regular access reviews and audits</li>
            <li>Automated session management and timeout</li>
        </ul>
        
        <p><strong>5.3 Infrastructure Security:</strong></p>
        <ul>
            <li>Secure data centers with 24/7 monitoring</li>
            <li>Network firewalls and intrusion detection systems</li>
            <li>Regular security updates and patch management</li>
            <li>Automated backup and disaster recovery systems</li>
        </ul>
        
        <p><strong>5.4 Monitoring and Response:</strong></p>
        <ul>
            <li>Continuous security monitoring and threat detection</li>
            <li>Incident response team available 24/7</li>
            <li>Regular penetration testing and vulnerability assessments</li>
            <li>Security awareness training for all employees</li>
        </ul>
    </div>

    <!-- Data Retention -->
    <div class="section">
        <h3><i class="fas fa-clock"></i> 6. Data Retention</h3>
        <p>We retain your personal information only as long as necessary to provide our services and comply with legal obligations:</p>
        
        <p><strong>6.1 Active Accounts:</strong> Personal information is retained while your account is active and you continue using our services.</p>
        
        <p><strong>6.2 Inactive Accounts:</strong> If your account becomes inactive, we may delete your data after 12 months of inactivity, following a 90-day notice period.</p>
        
        <p><strong>6.3 Account Deletion:</strong> When you delete your account, we will:</p>
        <ul>
            <li>Delete your personal information within 30 days</li>
            <li>Retain anonymized usage data for analytics purposes</li>
            <li>Keep legally required records as mandated by law</li>
        </ul>
        
        <p><strong>6.4 Backup Retention:</strong> Backup copies are retained for 30 days and are automatically purged unless needed for disaster recovery.</p>
    </div>

    <!-- Your Rights -->
    <div class="section">
        <h3><i class="fas fa-user-check"></i> 7. Your Privacy Rights</h3>
        <p>You have the following rights regarding your personal information:</p>
        
        <p><strong>7.1 Access Rights:</strong></p>
        <ul>
            <li><strong>View Your Data:</strong> Request a copy of all personal information we hold about you</li>
            <li><strong>Data Portability:</strong> Export your data in standard formats (CSV, JSON, PDF)</li>
            <li><strong>Account Information:</strong> Access and update your account details at any time</li>
        </ul>
        
        <p><strong>7.2 Control Rights:</strong></p>
        <ul>
            <li><strong>Correction:</strong> Update or correct inaccurate personal information</li>
            <li><strong>Deletion:</strong> Request deletion of your personal information (right to be forgotten)</li>
            <li><strong>Restriction:</strong> Limit how we process your personal information</li>
            <li><strong>Objection:</strong> Object to processing for direct marketing purposes</li>
        </ul>
        
        <p><strong>7.3 Communication Preferences:</strong></p>
        <ul>
            <li>Opt-out of marketing communications at any time</li>
            <li>Choose which notifications you receive</li>
            <li>Update your communication preferences in account settings</li>
        </ul>
        
        <div class="highlight-box">
            <strong><i class="fas fa-envelope"></i> Exercising Your Rights:</strong> To exercise any of these rights, please contact us at privacy@salesshark.com or through your account settings. We will respond within 30 days.
        </div>
    </div>

    <!-- International Data Transfers -->
    <div class="section">
        <h3><i class="fas fa-globe"></i> 8. International Data Transfers</h3>
        <p>Sales Shark is primarily operated from Kenya. However, we may transfer your personal information to other countries for processing:</p>
        
        <p><strong>8.1 Data Location:</strong> Your primary data is stored in secure data centers in Kenya and other African regions.</p>
        
        <p><strong>8.2 Third-Party Services:</strong> Some of our service providers may be located in other countries, including the United States and European Union.</p>
        
        <p><strong>8.3 Transfer Safeguards:</strong> All international data transfers are protected by:</p>
        <ul>
            <li>Standard Contractual Clauses approved by regulatory authorities</li>
            <li>Data Processing Agreements with strict privacy requirements</li>
            <li>Regular compliance audits and assessments</li>
        </ul>
    </div>

    <!-- GDPR Compliance -->
    <div class="section">
        <h3><i class="fas fa-certificate"></i> 9. GDPR and International Compliance</h3>
        <p>For users in the European Union, we comply with the General Data Protection Regulation (GDPR):</p>
        
        <p><strong>9.1 Legal Basis:</strong> We process your personal data based on:</p>
        <ul>
            <li><strong>Contract Performance:</strong> To provide our services to you</li>
            <li><strong>Legitimate Interests:</strong> To improve our services and prevent fraud</li>
            <li><strong>Legal Compliance:</strong> To comply with applicable laws</li>
            <li><strong>Consent:</strong> For marketing communications and analytics</li>
        </ul>
        
        <p><strong>9.2 Data Protection Officer:</strong> We have appointed a Data Protection Officer who can be reached at dpo@salesshark.com</p>
        
        <p><strong>9.3 Supervisory Authority:</strong> You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.</p>
    </div>

    <!-- Cookies and Tracking -->
    <div class="section">
        <h3><i class="fas fa-cookie-bite"></i> 10. Cookies and Tracking Technologies</h3>
        <p>We use cookies and similar technologies to improve your experience:</p>
        
        <p><strong>10.1 Essential Cookies:</strong> Required for basic system functionality, including authentication and security.</p>
        
        <p><strong>10.2 Functional Cookies:</strong> Remember your preferences and settings to personalize your experience.</p>
        
        <p><strong>10.3 Analytics Cookies:</strong> Help us understand how you use our service to improve performance and features.</p>
        
        <p><strong>10.4 Cookie Control:</strong> You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect system functionality.</p>
    </div>

    <!-- Children's Privacy -->
    <div class="section">
        <h3><i class="fas fa-child"></i> 11. Children's Privacy</h3>
        <p>Sales Shark is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.</p>
    </div>

    <!-- Changes to Privacy Policy -->
    <div class="section">
        <h3><i class="fas fa-edit"></i> 12. Changes to This Privacy Policy</h3>
        <p>We may update this Privacy Policy from time to time. When we make changes:</p>
        <ul>
            <li>We will notify you by email and through in-app notifications</li>
            <li>We will post the updated policy on our website with the revision date</li>
            <li>Significant changes will include a 30-day notice period</li>
            <li>Continued use of our services constitutes acceptance of the updated policy</li>
        </ul>
    </div>

    <!-- Contact Information -->
    <div class="contact-info">
        <h3><i class="fas fa-envelope"></i> Contact Information</h3>
        <p>If you have questions about this Privacy Policy or how we handle your personal information:</p>
        <p><strong>Privacy Officer</strong></p>
        <p><strong>Email:</strong> privacy@salesshark.com</p>
        <p><strong>Data Protection Officer:</strong> dpo@salesshark.com</p>
        <p><strong>General Support:</strong> support@salesshark.com</p>
        <p><strong>Phone:</strong> +254 796 374 224</p>
        <p><strong>Address:</strong> Optinet Limited, Nairobi, Kenya</p>
        <p><strong>Response Time:</strong> We respond to privacy inquiries within 30 days</p>
    </div>
</div>
{% endblock %}