Files
industries/app/(marketing)/privacy/_client.tsx
zeekay 49beb995f8 fix: production audit — security, content, and UX fixes
Security:
- Fix OAuth CSRF bypass: require state match instead of accepting when no state saved
- Remove query-param token fallback (tokens logged by CDN/analytics)
- Move auth token from localStorage to sessionStorage (XSS mitigation)
- Replace upstream model ID 'qwen3-32b' with branded 'zen' in chat widget
- Change analytics person_profiles from 'always' to 'identified_only' (GDPR)
- Replace deceptive auth page (collected + discarded credentials) with clean redirect

Content:
- Fix wrong Twitter handle (@hanaborobyai → @hanzoai)
- Fix privacy policy contradiction (removed "train on your data" claim)
- Remove internal Google Docs URLs from capabilities page
- Replace unverified "$50M Series B" with verified Techstars '17 milestone
- Replace 8 dead '#' news links with real product/resource links
- Fix Navbar "58 papers" → "130+ papers" to match all other surfaces
- Replace "Hanzo L1" (undefined product) with "Zen4 MoDE models" in hero
- Fix AI slop: "harness the power" → "deploy in production", "state-of-the-art" → "production-grade", "cutting-edge" → "frontier"
- Fix solutions page template filler descriptions
- Fix stat inconsistencies: careers AI models 50+ → 45+, help credits $10 → $5
- Fix zen-guard params 1B → 4B (matching canonical spec)
- Fix dead research sub-page links (/alignment, /safety → GitHub papers repos)
- Fix capabilities dead links → real product pages

UX:
- Wire contact form to api.hanzo.ai/v1/contact with Cal.com fallback
- Fix dead buttons on services page (Get Started → /contact, View Case Studies → /case-studies)
- Fix security whitepaper button → "Request Security Documentation" linking to /contact
- Fix help Live Chat button → hanzo.bot
- Fix Cal.com URLs (cal.com/hanzo → cal.com/hanzo/30min)
- Fix Cal.com template literal (${"dark"} → plain string)
- Replace console.error on 404 with analytics event tracking
2026-02-27 10:15:39 -08:00

120 lines
5.1 KiB
TypeScript

"use client";
import { cn } from "@/lib/utils";
export default function PageClient() {
return (
<div className={cn("min-h-screen transition-colors duration-300", "bg-background")}>
<main className="pt-32 pb-16 px-4 sm:px-6 lg:px-8">
<div className={cn("max-w-4xl mx-auto prose", "prose-invert")}>
<h1 className={cn("text-4xl font-bold mb-8", "text-foreground")}>Privacy Policy</h1>
<div className="space-y-8">
<section>
<h2>Data Controller</h2>
<p>Hanzo Industries, Inc. ("Hanzo", "we", "us", or "our") is the data controller for the personal information we process under this policy.</p>
<p>For privacy-related inquiries, you can reach our Data Protection Officer (DPO) at:</p>
<ul>
<li>Email: dpo@hanzo.ai</li>
<li>General Support: help@hanzo.ai</li>
</ul>
<p>Our registered agent information:</p>
<ul>
<li>Registered Agent: Legalinc Corporate Services Inc.</li>
<li>Address: 131 Continental Dr, Suite 305, Newark, DE 19713 US</li>
</ul>
</section>
<section>
<h2>1. Information We Collect</h2>
<p>We collect the following types of information:</p>
<ul>
<li>Account information (email, name, billing details)</li>
<li>Usage data (API calls, prompts, generated content)</li>
<li>Device information (IP address, browser type)</li>
<li>Payment information (processed securely via Stripe)</li>
</ul>
</section>
<section>
<h2>2. How We Use Your Information</h2>
<p>We use collected information for:</p>
<ul>
<li>Providing and improving our services</li>
<li>Improving service quality and reliability</li>
<li>Personalizing your experience</li>
<li>Marketing and advertising purposes</li>
<li>Analytics and service optimization</li>
<li>Processing payments and maintaining financial records</li>
</ul>
</section>
<section>
<h2>3. Data Sharing and Disclosure</h2>
<p>We may share your information with:</p>
<ul>
<li>Service providers (e.g., Stripe for payment processing)</li>
<li>Analytics partners</li>
<li>Marketing partners</li>
<li>Law enforcement when required by law</li>
</ul>
<p>When you make a payment, your payment information is processed securely by Stripe. Hanzo does not store your full payment details.</p>
</section>
<section>
<h2>4. AI Training and Data Usage</h2>
<p>Content generated through our platform may be used to:</p>
<ul>
<li>Improve our AI models</li>
<li>Analyze usage patterns</li>
<li>Develop new features</li>
<li>Create derivative works</li>
</ul>
</section>
<section>
<h2>5. Data Retention</h2>
<p>We retain your information for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data, subject to legal requirements.</p>
</section>
<section>
<h2>6. Your Rights</h2>
<p>You have the right to:</p>
<ul>
<li>Access your personal data</li>
<li>Correct inaccurate data</li>
<li>Request data deletion</li>
<li>Object to data processing</li>
<li>Export your data</li>
</ul>
<p>To exercise these rights, please contact our DPO at dpo@hanzo.ai</p>
</section>
<section>
<h2>7. Security</h2>
<p>We implement appropriate security measures to protect your information from unauthorized access, alteration, or destruction. This includes using industry-standard encryption for data transmission and storage.</p>
</section>
<section>
<h2>8. Updates to Privacy Policy</h2>
<p>We may update this policy periodically. We will notify you of significant changes via email or service notifications.</p>
</section>
<section>
<h2>9. Contact Information</h2>
<p>For any questions about our Privacy Policy or data practices:</p>
<ul>
<li>Data Protection Officer: dpo@hanzo.ai</li>
<li>General Support: help@hanzo.ai</li>
<li>Company: Hanzo Industries, Inc.</li>
<li>Registered Agent: Legalinc Corporate Services Inc.</li>
<li>Address: 131 Continental Dr, Suite 305, Newark, DE 19713 US</li>
</ul>
</section>
</div>
</div>
</main>
</div>
);
}