VirtualPR/frontend/src/views/legal/privacy.jsx

import { Link } from 'react-router';
import LegalLayout from '@/views/legal/LegalLayout';

const Privacy = () => {
  return (
    <LegalLayout title="Privacy Policy">
      <p>
        VirtualPR (the Pulmonary Rehabilitation Program) is available at https://pulmorehab.virtualengage.in and is operated by Stratawiz (“we”, “us”). This policy explains what information we collect, how we use it, and the choices available to the people who use the service. It applies to staff who sign in to VirtualPR and to patient information those staff enter in order to run the program.
      </p>

      <h2 className="h5 mt-4">Information we collect</h2>
      <p>We collect the following information:</p>
      <ul>
        <li>Staff account details: name, email address, password (stored only as a hash), and role.</li>
        <li>Program records entered by staff: patient identifier, name, mobile number, age, gender, language, health conditions, session slot, preferred weekday, cohort, payment status, payment screenshot, and WhatsApp preferences.</li>
        <li>Session, cohort, holiday, leave, and message records needed to schedule and run the program.</li>
        <li>Technical logs needed to keep the service secure and to diagnose errors.</li>
      </ul>

      <h2 className="h5 mt-4">Google user data</h2>
      <p>
        A staff member may connect their own Google account from My profile. Connecting is optional. We request only these permissions:
      </p>
      <ul>
        <li>
          <strong>Email address</strong> (<code>https://www.googleapis.com/auth/userinfo.email</code>) — to show which Google account is connected.
        </li>
        <li>
          <strong>Google Calendar events</strong> (<code>https://www.googleapis.com/auth/calendar.events</code>) — to create, update, and delete events on that person’s primary calendar for rehabilitation sessions assigned to them.
        </li>
        <li>
          <strong>Google Meet spaces</strong> (<code>https://www.googleapis.com/auth/meetings.space.created</code>) — to create the Meet link for those events and apply the meeting settings chosen in VirtualPR, including who may join and whether participants may use a microphone and camera.
        </li>
      </ul>
      <p>From the connected Google account we store:</p>
      <ul>
        <li>the Google account email address and account identifier;</li>
        <li>the OAuth access token and refresh token, stored encrypted;</li>
        <li>the permission scopes that were granted and the token expiry time;</li>
        <li>the identifier, link, and Meet link of calendar events VirtualPR creates.</li>
      </ul>
      <p>
        We use this Google data only to show the connected account and to create, update, and delete the calendar events and Meet links for that staff member’s program sessions. We do not read, list, or change calendar events that VirtualPR did not create. We do not access Gmail, Drive, Contacts, or any other Google product.
      </p>
      <p>
        We do not sell Google user data. We do not use Google user data for advertising, for credit decisions, or to train generalized artificial-intelligence models. We do not transfer Google user data to others except to Google, to perform the calendar and Meet actions the staff member requested, or where required by law. Humans do not read this Google data except where the staff member asks us to, where we need to investigate a security incident, or where the law requires it.
      </p>
      <p>
        VirtualPR’s use and transfer of information received from Google APIs adheres to the <a href="https://developers.google.com/terms/api-services-user-data-policy" target="_blank" rel="noopener noreferrer">Google API Services User Data Policy</a>, including the Limited Use requirements.
      </p>

      <h2 className="h5 mt-4">How we use other information</h2>
      <p>We use staff and patient information to:</p>
      <ul>
        <li>authenticate staff and apply their role permissions;</li>
        <li>enroll patients, schedule sessions, and assign cohorts and educators;</li>
        <li>send program email, such as password resets and operational notices;</li>
        <li>send WhatsApp messages and group updates that the program is configured to send, except where a patient has opted out;</li>
        <li>keep audit records of staff actions and protect the service.</li>
      </ul>

      <h2 className="h5 mt-4">Sharing</h2>
      <p>
        We do not sell personal information. We share information with service providers that host the application, store the database, deliver email, or deliver WhatsApp messages, and only so they can perform those services for us. We may disclose information if a law, court, or government authority requires it, or to protect the rights and safety of patients, staff, or the public.
      </p>

      <h2 className="h5 mt-4">Retention and deletion</h2>
      <p>
        Google tokens and the connected-account email are deleted when a staff member chooses Disconnect on My profile. We also ask Google to revoke the token. The staff member can remove VirtualPR at any time from their Google Account permissions at <a href="https://myaccount.google.com/permissions" target="_blank" rel="noopener noreferrer">myaccount.google.com/permissions</a>.
      </p>
      <p>
        Program records are kept for as long as the program needs them. Onboarding records that stay unpaid and unconfirmed are deleted on a daily schedule. Staff can ask us to delete their account by emailing the address below.
      </p>

      <h2 className="h5 mt-4">Security</h2>
      <p>
        Access to VirtualPR is limited to signed-in staff and to the actions their role allows. Passwords are hashed. Google tokens are encrypted at rest. No method of storage or transmission is perfectly secure.
      </p>

      <h2 className="h5 mt-4">Contact</h2>
      <p>
        Questions about this policy or a request to access, correct, or delete staff account information can be sent to <a href="mailto:support1@stratawiz.com">support1@stratawiz.com</a>. The related terms are on the <Link to="/terms">Terms of Use</Link> page.
      </p>
    </LegalLayout>
  );
};

export default Privacy;