---
/**
 * Privacy Policy — EN
 * URL: /en/privacy
 */
import PageLayout from '@/layouts/PageLayout.astro';
import Icon from '@/components/ui/primitives/Icon/Icon.astro';
import Badge from '@/components/ui/data-display/Badge/Badge.astro';
import Card from '@/components/ui/data-display/Card/Card.astro';
import { Hero } from '@/components/hero';
---

<PageLayout
  title="Privacy Policy — Armarium"
  description="Privacy Policy of Armarium Suite. Your data is hosted exclusively in Switzerland."
  locale="en"
>
  <Hero layout="centered" size="sm">
    <Badge slot="badge" variant="brand" pill>
      <Icon name="shield-check" size="sm" />
      Privacy Policy
    </Badge>
    <h1 slot="title">
      Your data,<br />
      <span class="text-brand-500 [-webkit-text-fill-color:var(--color-brand-500)]">your protection.</span>
    </h1>
    <p slot="description">
      Armarium takes data protection seriously. Your financial data is stored and processed exclusively in Switzerland – no data selling, no tracking.
    </p>
  </Hero>

  <!-- Hosting: Infomaniak -->
  <section class="py-[var(--space-section-md)] bg-brand-500/8 dark:bg-background-secondary border-t border-border">
    <div class="mx-auto max-w-5xl px-6">
      <div class="flex flex-col gap-8" data-reveal>
        <div class="flex flex-col items-center gap-4 text-center">
          <Badge variant="brand" pill>Hosting & Infrastructure</Badge>
          <h2 class="font-display text-3xl md:text-4xl font-bold text-foreground">
            100% Swiss hosting
          </h2>
          <p class="text-lg text-foreground-muted max-w-2xl">
            Armarium runs its entire infrastructure exclusively on <strong class="text-foreground">Infomaniak</strong> servers in Switzerland. No data ever leaves Swiss territory.
          </p>
        </div>

        <div class="grid gap-4 sm:grid-cols-2 lg:grid-cols-3">
          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center text-brand-500 shrink-0">
                <Icon name="shield" size="sm" />
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Information Security</p>
                <h3 class="text-sm font-semibold text-foreground">ISO 27001:2022</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  Certified information security management system. Covers development, cloud infrastructure, web services, support and data center operations.
                </p>
              </div>
            </div>
          </Card>

          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center shrink-0">
                <svg class="w-5 h-6" viewBox="0 0 32 36" fill="none" xmlns="http://www.w3.org/2000/svg" aria-label="Swiss Hosting" role="img">
                  <defs><clipPath id="zh-en-privacy"><path d="M16 1L1 7V23L6 30L16 34L26 30L31 23V7L16 1Z"/></clipPath></defs>
                  <path d="M16 1L1 7V23L6 30L16 34L26 30L31 23V7L16 1Z" fill="white"/>
                  <polygon points="1,7 16,1 31,7 1,34" fill="#003DA5" clip-path="url(#zh-en-privacy)"/>
                  <path d="M16 1L1 7V23L6 30L16 34L26 30L31 23V7L16 1Z" fill="none" stroke="#003DA5" stroke-width="1.5"/>
                </svg>
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Data Sovereignty</p>
                <h3 class="text-sm font-semibold text-foreground">Swiss Hosting Label</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  Data is stored, processed and operated exclusively in Swiss data centers. No outsourcing abroad.
                </p>
              </div>
            </div>
          </Card>

          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center text-brand-500 shrink-0">
                <Icon name="code-2" size="sm" />
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Development</p>
                <h3 class="text-sm font-semibold text-foreground">Swiss Made Software</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  Infomaniak develops its software primarily in Switzerland and meets the requirements of the Swiss Made Software label.
                </p>
              </div>
            </div>
          </Card>

          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center text-brand-500 shrink-0">
                <Icon name="file-check" size="sm" />
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Legal Compliance</p>
                <h3 class="text-sm font-semibold text-foreground">nFADP & GDPR</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  Full compliance with the Swiss Federal Act on Data Protection (nFADP) and the European General Data Protection Regulation (GDPR).
                </p>
              </div>
            </div>
          </Card>

          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center text-brand-500 shrink-0">
                <Icon name="leaf" size="sm" />
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Sustainability</p>
                <h3 class="text-sm font-semibold text-foreground">ISO 14001 · B Corp™</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  100% renewable energy (60% hydro, 40% solar). 200% CO₂ compensation. Certified B Corp™ since 2025.
                </p>
              </div>
            </div>
          </Card>

          <Card hover>
            <div class="flex items-start gap-3">
              <div class="w-10 h-10 rounded-xl bg-gradient-to-br from-brand-500/20 to-brand-500/5 flex items-center justify-center text-brand-500 shrink-0">
                <Icon name="server" size="sm" />
              </div>
              <div>
                <p class="text-xs font-bold tracking-wide text-foreground-muted mb-0.5">Data Center</p>
                <h3 class="text-sm font-semibold text-foreground">Physical Security</h3>
                <p class="text-xs text-foreground-muted mt-1 leading-relaxed">
                  Multiple redundant Swiss data centers. Annual penetration tests, AES-256 encryption, PUE &lt; 1.1.
                </p>
              </div>
            </div>
          </Card>
        </div>
      </div>
    </div>
  </section>

  <!-- Privacy Policy -->
  <section class="py-[var(--space-section-md)] bg-background border-t border-border">
    <div class="mx-auto max-w-3xl px-6">
      <div class="prose prose-neutral dark:prose-invert max-w-none space-y-10" data-reveal>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">1. Data Controller</h2>
          <p class="text-foreground-muted leading-relaxed">
            The data controller for processing within Armarium Suite is Armarium, Zürich, Switzerland. For privacy inquiries, contact us at:
            <a href="mailto:privacy@armarium.ch" class="text-brand-500 hover:text-brand-600 transition-colors">privacy@armarium.ch</a>.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">2. Data Collected</h2>
          <p class="text-foreground-muted leading-relaxed mb-3">Armarium only collects data strictly necessary for operating the app:</p>
          <ul class="space-y-2 text-foreground-muted">
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Registration data:</strong> email address and password (hashed, never stored in plain text).</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Financial data:</strong> transactions, budgets, categories and accounts you enter yourself.</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Technical data:</strong> IP address (for security purposes), browser type, timestamp of last login.</span></li>
          </ul>
          <p class="text-foreground-muted leading-relaxed mt-3">
            We use <strong class="text-foreground">no tracking, no advertising cookies and no third-party analytics services</strong>.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">3. Purpose of Processing</h2>
          <p class="text-foreground-muted leading-relaxed mb-3">Your data is used exclusively for:</p>
          <ul class="space-y-2 text-foreground-muted">
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span>Providing and operating Armarium Suite</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span>Authentication and account protection</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span>Technical support at your request</span></li>
          </ul>
          <p class="text-foreground-muted leading-relaxed mt-3">
            Your data is <strong class="text-foreground">not shared with third parties</strong> – neither for advertising purposes nor for analysis.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">4. Data Storage & Hosting</h2>
          <p class="text-foreground-muted leading-relaxed">
            All data is stored and processed exclusively on servers of <strong class="text-foreground">Infomaniak Network SA</strong> in Switzerland. Infomaniak is ISO 27001:2022 certified and fulfills all requirements of the Swiss Data Protection Act (nFADP) and GDPR. No data is transferred to third countries.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">5. Data Security</h2>
          <p class="text-foreground-muted leading-relaxed">
            All data transmissions are encrypted via HTTPS/TLS. Passwords are stored only as hashed values (bcrypt). Infomaniak's infrastructure uses AES-256 encryption and undergoes annual penetration testing.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">6. Your Rights</h2>
          <p class="text-foreground-muted leading-relaxed mb-3">Under nFADP and GDPR, you have the following rights:</p>
          <ul class="space-y-2 text-foreground-muted">
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Access:</strong> know what data is stored about you.</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Rectification:</strong> have inaccurate data corrected.</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Erasure:</strong> complete deletion of your account and all data.</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Portability:</strong> export of your data in a common format.</span></li>
            <li class="flex items-start gap-2"><Icon name="check" size="sm" class="text-brand-500 shrink-0 mt-0.5" /><span><strong class="text-foreground">Objection:</strong> object to certain processing activities.</span></li>
          </ul>
          <p class="text-foreground-muted leading-relaxed mt-3">
            Send requests to: <a href="mailto:privacy@armarium.ch" class="text-brand-500 hover:text-brand-600 transition-colors">privacy@armarium.ch</a>. We process your request within 30 days.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">7. Account Deletion</h2>
          <p class="text-foreground-muted leading-relaxed">
            You can delete your account at any time in the app settings. All your data will be irreversibly and completely removed from our systems. Restoration is not possible afterwards.
          </p>
        </div>

        <div>
          <h2 class="font-display text-2xl font-bold text-foreground mb-4">8. Changes to This Policy</h2>
          <p class="text-foreground-muted leading-relaxed">
            We reserve the right to update this privacy policy as needed. The current version is available at <a href="/en/privacy" class="text-brand-500 hover:text-brand-600 transition-colors">armarium.ch/en/privacy</a>. For material changes, registered users will be notified by email.
          </p>
          <p class="text-foreground-muted leading-relaxed mt-2 text-sm">
            Last updated: April 2026
          </p>
        </div>

      </div>
    </div>
  </section>
</PageLayout>
