/**
 * llmindex.io — privacy policy
 * Author:  Simon-Pierre Boucher
 * Contact: contact@spboucher.ai
 * License: Proprietary — © Simon-Pierre Boucher, all rights reserved
 */
import type { Metadata } from 'next';

export const metadata: Metadata = { title: 'Privacy Policy' };
export const revalidate = 86400;

const UPDATED = '2026-08-05';

export default function PrivacyPage() {
  return (
    <div className="mx-auto max-w-3xl space-y-8">
      <div className="space-y-2">
        <h1 className="text-2xl font-bold text-zinc-900 sm:text-3xl">Privacy Policy</h1>
        <p className="text-sm text-zinc-500">Last updated: {UPDATED}</p>
      </div>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">Who we are</h2>
        <p>
          LLM Index (www.llmindex.io) is operated by <span className="font-medium text-zinc-800">Simon-Pierre Boucher</span>{' '}
          (&ldquo;we&rdquo;, &ldquo;us&rdquo;). Contact:{' '}
          <a className="underline hover:text-emerald-600" href="mailto:contact@spboucher.ai">contact@spboucher.ai</a>.
        </p>
      </section>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">What we collect — and what we don&apos;t</h2>
        <ul className="list-disc space-y-2 pl-5">
          <li><span className="font-medium text-zinc-800">No accounts, no profiles.</span> The site requires no registration and stores no user profiles.</li>
          <li><span className="font-medium text-zinc-800">No advertising trackers, no third-party analytics.</span> We do not run ad networks, marketing pixels, or fingerprinting scripts, and we set no advertising cookies.</li>
          <li><span className="font-medium text-zinc-800">Server logs &amp; rate limiting.</span> Like virtually every website, our infrastructure processes IP addresses and standard request metadata (user agent, requested URL, timestamp) to serve pages, prevent abuse, and enforce the public API rate limits (60 requests/minute anonymously). Rate-limit counters are keyed on a transient identifier and expire automatically within minutes; routine logs are rotated and not used to identify individuals.</li>
          <li><span className="font-medium text-zinc-800">Network providers.</span> Traffic transits our hosting and tunneling providers (e.g., ngrok), which maintain their own operational logs under their own policies.</li>
          <li><span className="font-medium text-zinc-800">API keys.</span> If we issue you an API key for the higher rate tier, we store the key and its usage counters — nothing more.</li>
          <li><span className="font-medium text-zinc-800">Email.</span> If you write to us, we keep the correspondence for as long as needed to handle your request.</li>
        </ul>
      </section>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">What the benchmark data contains</h2>
        <p>
          The rankings, scores, model responses and judge verdicts published on this site are
          generated by us, about <em>AI models</em> — they contain no personal data about visitors.
          Evaluation prompts are synthetically generated; no visitor input is ever sent to any AI
          model.
        </p>
      </section>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">Legal bases &amp; sharing</h2>
        <p>
          We process the minimal technical data described above on the basis of legitimate interest
          (operating and protecting a public website). We do not sell or rent any data. We disclose
          data only if legally required.
        </p>
      </section>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">Your rights</h2>
        <p>
          Depending on your jurisdiction (e.g., GDPR, PIPEDA, Québec Law 25), you may have rights of
          access, rectification, deletion and objection regarding personal data. Given how little we
          collect, most requests resolve trivially — write to{' '}
          <a className="underline hover:text-emerald-600" href="mailto:contact@spboucher.ai">contact@spboucher.ai</a>{' '}
          and we will respond within 30 days.
        </p>
      </section>

      <section className="space-y-3 text-sm leading-relaxed text-zinc-600">
        <h2 className="text-lg font-semibold text-zinc-900">Changes</h2>
        <p>
          We may update this policy; material changes will be reflected by the date above. Continued
          use of the site after changes constitutes acceptance.
        </p>
      </section>
    </div>
  );
}