{ "$schema": "https://ui.shadcn.com/schema/registry-item.json", "name": "privacy-policy-generator", "title": "Privacy Policy Generator", "type": "registry:block", "files": [ { "path": "packages/registry-react/blocks/privacy-policy-generator/PrivacyPolicyGenerator.tsx", "content": "'use client'\n\nimport * as React from 'react'\nimport {\n ShieldCheck,\n Copy,\n Check,\n Download,\n Building2,\n Mail,\n Cookie,\n CreditCard,\n BarChart3,\n Bug,\n Server,\n Scale,\n Code2,\n FileCode,\n Sliders,\n CheckCircle2,\n} from 'lucide-react'\nimport { cn } from '@/lib/utils'\nimport { Badge } from '@/components/ui/badge'\nimport { Button } from '@/components/ui/button'\nimport { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle } from '@/components/ui/card'\nimport { Checkbox } from '@/components/ui/checkbox'\nimport { Input } from '@/components/ui/input'\nimport { Separator } from '@/components/ui/separator'\nimport { Switch } from '@/components/ui/switch'\n\nexport interface PrivacyPolicyGeneratorProps {\n className?: string\n initialCompanyName?: string\n initialContactEmail?: string\n initialWebsiteUrl?: string\n initialEffectiveDate?: string\n onExportMarkdown?: (content: string) => void\n onExportHtml?: (content: string) => void\n}\n\ninterface ProcessorMeta {\n id: string\n name: string\n category: 'Analytics' | 'Payment' | 'Telemetry' | 'Infrastructure'\n description: string\n purpose: string\n dataCollected: string\n location: string\n}\n\nconst ALL_PROCESSORS: ProcessorMeta[] = [\n {\n id: 'ga4',\n name: 'Google Analytics 4',\n category: 'Analytics',\n description: 'Traffic telemetry, session counts, anonymized IP',\n purpose: 'Audience engagement & web traffic analytics',\n dataCollected: 'Anonymized IP, browser type, referral URLs, screen resolution',\n location: 'United States (Google LLC)',\n },\n {\n id: 'posthog',\n name: 'PostHog Cloud',\n category: 'Analytics',\n description: 'Product telemetry, session recording, feature flags',\n purpose: 'User journey tracking and product telemetry',\n dataCollected: 'Interaction events, UI clickstreams, feature flag evaluation data',\n location: 'United States / EU (PostHog, Inc.)',\n },\n {\n id: 'plausible',\n name: 'Plausible Analytics',\n category: 'Analytics',\n description: 'Privacy-first cookieless analytics',\n purpose: 'Aggregated website traffic metrics without personal identification',\n dataCollected: 'Page views, referrers, operating system name (no persistent cookies)',\n location: 'European Union (Estonia)',\n },\n {\n id: 'stripe',\n name: 'Stripe, Inc.',\n category: 'Payment',\n description: 'PCI-DSS Level 1 tokenized billing and transactions',\n purpose: 'Payment gateway execution, fraud screening, and subscription billing',\n dataCollected: 'Card token, last 4 digits, billing address, customer ID',\n location: 'United States / Global (Stripe, Inc.)',\n },\n {\n id: 'paddle',\n name: 'Paddle',\n category: 'Payment',\n description: 'Merchant of record, checkout & tax compliance',\n purpose: 'International checkout, VAT/sales tax management, and receipt delivery',\n dataCollected: 'Customer billing details, invoice records, transaction totals',\n location: 'United Kingdom / Global (Paddle.com Market Ltd.)',\n },\n {\n id: 'sentry',\n name: 'Sentry',\n category: 'Telemetry',\n description: 'Application exceptions, crash stack traces, release health',\n purpose: 'Crash diagnosis, real-time error telemetry, and performance tracking',\n dataCollected: 'Error stack traces, browser environment, client runtime exceptions',\n location: 'United States (Functional Software, Inc.)',\n },\n {\n id: 'datadog',\n name: 'Datadog',\n category: 'Telemetry',\n description: 'APM performance telemetry, log indexing',\n purpose: 'Edge latency monitoring, API endpoint tracing, system uptime auditing',\n dataCollected: 'Server request metrics, response latencies, infrastructure logs',\n location: 'United States (Datadog, Inc.)',\n },\n {\n id: 'cloudflare',\n name: 'Cloudflare Pages',\n category: 'Infrastructure',\n description: 'Global CDN routing, edge caching, and DDoS mitigation',\n purpose: 'Edge website delivery, SSL/TLS encryption, and automated bot mitigation',\n dataCollected: 'Connecting IP address (for DDoS protection), HTTP request headers',\n location: 'Global Anycast Edge Network (Cloudflare, Inc.)',\n },\n {\n id: 'aws',\n name: 'AWS S3',\n category: 'Infrastructure',\n description: 'Encrypted cloud object storage for assets and files',\n purpose: 'Scalable cloud object storage for media assets and encrypted backups',\n dataCollected: 'Uploaded user media assets, encrypted data archives',\n location: 'United States & EU Regions (Amazon Web Services, Inc.)',\n },\n]\n\nexport function PrivacyPolicyGenerator({\n className,\n initialCompanyName = 'UIPKGE Technologies Inc.',\n initialContactEmail = 'privacy@uipkge.dev',\n initialWebsiteUrl = 'https://uipkge.dev',\n initialEffectiveDate = 'August 21, 2026',\n onExportMarkdown,\n onExportHtml,\n}: PrivacyPolicyGeneratorProps) {\n // Configuration State\n const [companyName, setCompanyName] = React.useState(initialCompanyName)\n const [contactEmail, setContactEmail] = React.useState(initialContactEmail)\n const [websiteUrl, setWebsiteUrl] = React.useState(initialWebsiteUrl)\n const [effectiveDate, setEffectiveDate] = React.useState(initialEffectiveDate)\n\n // Jurisdictions & Legal Regulations\n const [jurisdictions, setJurisdictions] = React.useState({\n gdpr: true,\n ccpa: true,\n pipeda: false,\n lgpd: false,\n })\n\n // Third-Party Data Processors\n const [processors, setProcessors] = React.useState>({\n ga4: true,\n posthog: false,\n plausible: true,\n stripe: true,\n paddle: false,\n sentry: true,\n datadog: false,\n cloudflare: true,\n aws: true,\n })\n\n // Cookie Tracking Switch\n const [cookieTracking, setCookieTracking] = React.useState(true)\n\n // Copy feedback states\n const [copiedMd, setCopiedMd] = React.useState(false)\n const [copiedHtml, setCopiedHtml] = React.useState(false)\n\n const activeProcessorsList = React.useMemo(() => {\n return ALL_PROCESSORS.filter((p) => processors[p.id])\n }, [processors])\n\n const activeJurisdictionsCount = React.useMemo(() => {\n let count = 0\n if (jurisdictions.gdpr) count++\n if (jurisdictions.ccpa) count++\n if (jurisdictions.pipeda) count++\n if (jurisdictions.lgpd) count++\n return count\n }, [jurisdictions])\n\n const generateMarkdown = React.useCallback((): string => {\n const company = companyName.trim() || 'Our Company'\n const email = contactEmail.trim() || 'privacy@example.com'\n const website = websiteUrl.trim() || 'https://example.com'\n const date = effectiveDate.trim() || 'August 21, 2026'\n\n let md = `# Privacy Policy for ${company}\\n\\n`\n md += `**Effective Date:** ${date} \\n`\n md += `**Last Updated:** ${date} \\n`\n md += `**Website:** [${website}](${website})\\n\\n`\n md += `---\\n\\n`\n\n md += `## 1. Introduction & Overview\\n\\n`\n md += `${company} (\"we\", \"our\", or \"us\") respects your privacy and is committed to protecting your personal information. This Privacy Policy details our practices concerning the collection, use, storage, and disclosure of personal data when you visit [${website}](${website}) (the \"Website\") or use our services.\\n\\n`\n md += `By accessing or using our Website, you consent to the data collection and processing methods outlined in this policy.\\n\\n`\n\n md += `## 2. Personal Information We Collect\\n\\n`\n md += `We collect information necessary to operate our platform, maintain security, and fulfill legal requirements:\\n\\n`\n md += `- **Direct Inquiries & Communication:** When you reach out to us at ${email}, we retain your contact details and message contents.\\n`\n if (processors.stripe || processors.paddle) {\n md += `- **Payment & Billing Data:** For paid services, payment transactions are processed securely through PCI-DSS Level 1 compliant processors. We do not store complete raw credit card numbers on our servers.\\n`\n }\n if (processors.ga4 || processors.posthog || processors.plausible || processors.sentry || processors.datadog) {\n md += `- **Telemetry & Usage Information:** Diagnostic telemetry, operating system details, browser version, and aggregated usage metrics are collected to maintain service reliability.\\n`\n }\n md += `\\n`\n\n md += `## 3. Third-Party Sub-Processors & Data Sharing\\n\\n`\n if (activeProcessorsList.length > 0) {\n md += `We partner with trusted third-party sub-processors to power our application infrastructure. Each partner operates under a Data Processing Agreement (DPA) adhering to standard contractual clauses:\\n\\n`\n md += `| Sub-Processor | Category | Purpose | Processing Location |\\n`\n md += `| :--- | :--- | :--- | :--- |\\n`\n for (const p of activeProcessorsList) {\n md += `| **${p.name}** | ${p.category} | ${p.purpose} | ${p.location} |\\n`\n }\n md += `\\n`\n } else {\n md += `We do not share your personal information with external commercial sub-processors.\\n\\n`\n }\n\n md += `## 4. Cookies & Tracking Technologies\\n\\n`\n if (cookieTracking) {\n md += `We use cookies and equivalent browser storage mechanisms to ensure core site navigation and analyze traffic:\\n\\n`\n md += `- **Strictly Necessary Cookies:** Essential for page routing, authentication tokens, and user preference persistence.\\n`\n if (processors.ga4 || processors.posthog) {\n md += `- **Performance & Analytics Cookies:** Help us analyze traffic patterns to optimize layout performance.\\n`\n }\n md += `\\nYou may configure your browser to reject cookies. However, disabling certain necessary cookies may affect website functionality.\\n\\n`\n } else {\n md += `**Zero-Tracking Cookies Guarantee:** This website operates on a privacy-first basis and does not place tracking cookies, advertising beacons, or third-party marketing identifiers on your device.\\n\\n`\n }\n\n md += `## 5. Compliance & Statutory Privacy Rights\\n\\n`\n if (jurisdictions.gdpr) {\n md += `### 5.1 European Union (GDPR - Regulation EU 2016/679)\\n\\n`\n md += `If you reside in the European Economic Area (EEA), you possess specific rights under the GDPR:\\n`\n md += `- **Right of Access (Art. 15):** Request confirmation and a portable copy of personal records held.\\n`\n md += `- **Right to Rectification (Art. 16):** Update or rectify inaccurate or incomplete personal records.\\n`\n md += `- **Right to Erasure (Art. 17):** Request permanent erasure of personal data under statutory conditions.\\n`\n md += `- **Right to Data Portability (Art. 20):** Receive your personal data in a structured, machine-readable format.\\n`\n md += `- **Supervisory Authority:** You have the statutory right to lodge a complaint with an EU Data Protection Authority.\\n\\n`\n }\n if (jurisdictions.ccpa) {\n md += `### 5.2 California Privacy Rights (CCPA / CPRA)\\n\\n`\n md += `Under the California Consumer Privacy Act and California Privacy Rights Act, California consumers have the right to:\\n`\n md += `- **Know and Access:** Request details regarding personal data categories collected over the past 12 months.\\n`\n md += `- **Delete Personal Information:** Request deletion of personal data collected directly from you.\\n`\n md += `- **Do Not Sell or Share My Information:** ${company} does not sell, rent, or trade your personal data to third-party brokers.\\n`\n md += `- **Non-Discrimination:** You will not receive discriminatory pricing or service degradation for exercising your privacy rights.\\n\\n`\n }\n if (jurisdictions.pipeda) {\n md += `### 5.3 Canadian Privacy Rights (PIPEDA)\\n\\n`\n md += `In compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we adhere to the 10 Fair Information Principles ensuring accountability and purpose limitation. Complaints may be directed to the Office of the Privacy Commissioner of Canada (OPC).\\n\\n`\n }\n if (jurisdictions.lgpd) {\n md += `### 5.4 Brazilian Privacy Rights (LGPD - Law No. 13.709/2018)\\n\\n`\n md += `Under the Brazilian General Data Protection Law (LGPD), Brazilian data subjects may request confirmation of processing, anonymization of non-essential records, and revocation of consent. Oversight is provided by the ANPD.\\n\\n`\n }\n if (!jurisdictions.gdpr && !jurisdictions.ccpa && !jurisdictions.pipeda && !jurisdictions.lgpd) {\n md += `We honor international data privacy best practices. You may request access to, correction of, or deletion of your personal records at any time.\\n\\n`\n }\n\n md += `## 6. Data Security & Storage\\n\\n`\n md += `We implement defense-in-depth technical safeguards including TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, and strict role-based access control (RBAC). Data is retained only for the duration required to fulfill contractual and legal compliance duties.\\n\\n`\n\n md += `## 7. Contact Information & Privacy Inquiries\\n\\n`\n md += `If you have questions, inquiries, or wish to exercise your statutory rights, contact our Data Protection representative:\\n\\n`\n md += `- **Entity:** ${company}\\n`\n md += `- **Privacy Email:** [${email}](mailto:${email})\\n`\n md += `- **Website:** [${website}](${website})\\n`\n\n return md\n }, [\n companyName,\n contactEmail,\n websiteUrl,\n effectiveDate,\n jurisdictions,\n processors,\n cookieTracking,\n activeProcessorsList,\n ])\n\n const generateHtml = React.useCallback((): string => {\n const company = companyName.trim() || 'Our Company'\n const email = contactEmail.trim() || 'privacy@example.com'\n const website = websiteUrl.trim() || 'https://example.com'\n const date = effectiveDate.trim() || 'August 21, 2026'\n\n let html = `\\n\\n\\n \\n Privacy Policy - ${company}\\n \\n\\n\\n`\n html += `

Privacy Policy

\\n`\n html += `
\\n`\n html += ` Effective Date: ${date} • Organization: ${company} • Website: ${website}\\n`\n html += `
\\n\\n`\n\n html += `

1. Introduction & Overview

\\n`\n html += `

${company} (\"we\", \"our\", or \"us\") respects your privacy and is committed to protecting your personal information. This Privacy Policy details our practices concerning the collection, use, storage, and disclosure of personal data when you visit ${website} (the \"Website\") or use our services.

\\n\\n`\n\n html += `

2. Personal Information We Collect

\\n`\n html += `

We collect information necessary to operate our platform, maintain security, and fulfill legal requirements:

\\n`\n html += ` \\n\\n`\n\n html += `

3. Third-Party Sub-Processors & Data Sharing

\\n`\n if (activeProcessorsList.length > 0) {\n html += `

We partner with trusted third-party sub-processors to power our application infrastructure under strict Data Processing Agreements (DPAs):

\\n`\n html += ` \\n \\n \\n \\n \\n \\n \\n \\n \\n \\n`\n for (const p of activeProcessorsList) {\n html += ` \\n \\n \\n \\n \\n \\n`\n }\n html += ` \\n
Sub-ProcessorCategoryPurposeProcessing Location
${p.name}${p.category}${p.purpose}${p.location}
\\n\\n`\n } else {\n html += `

We do not share your personal information with external commercial sub-processors.

\\n\\n`\n }\n\n html += `

4. Cookies & Tracking Technologies

\\n`\n if (cookieTracking) {\n html += `

We use cookies and equivalent browser storage mechanisms to ensure core site navigation and analyze traffic:

\\n`\n html += ` \\n`\n html += `

You may configure your browser to reject cookies. However, disabling certain necessary cookies may affect website functionality.

\\n\\n`\n } else {\n html += `

Zero-Tracking Cookies Guarantee: This website operates on a privacy-first basis and does not place tracking cookies, advertising beacons, or third-party marketing identifiers on your device.

\\n\\n`\n }\n\n html += `

5. Compliance & Statutory Privacy Rights

\\n`\n if (jurisdictions.gdpr) {\n html += `

5.1 European Union (GDPR - Regulation EU 2016/679)

\\n`\n html += `

If you reside in the European Economic Area (EEA), you possess rights under the GDPR including Right of Access (Art. 15), Right to Rectification (Art. 16), Right to Erasure (Art. 17), and Right to Data Portability (Art. 20). You may also lodge a complaint with your local EU Data Protection Authority.

\\n`\n }\n if (jurisdictions.ccpa) {\n html += `

5.2 California Privacy Rights (CCPA / CPRA)

\\n`\n html += `

Under the California Consumer Privacy Act (CCPA/CPRA), California residents may request details regarding personal data collected, request erasure of personal data, and are guaranteed that ${company} does not sell personal data to third parties.

\\n`\n }\n if (jurisdictions.pipeda) {\n html += `

5.3 Canadian Privacy Rights (PIPEDA)

\\n`\n html += `

In compliance with Canada's PIPEDA, we adhere to the 10 Fair Information Principles ensuring accountability, consent, and purpose limitation.

\\n`\n }\n if (jurisdictions.lgpd) {\n html += `

5.4 Brazilian Privacy Rights (LGPD)

\\n`\n html += `

Under the Brazilian General Data Protection Law (LGPD), Brazilian data subjects may request confirmation of processing, anonymization of non-essential records, and revocation of consent.

\\n`\n }\n if (!jurisdictions.gdpr && !jurisdictions.ccpa && !jurisdictions.pipeda && !jurisdictions.lgpd) {\n html += `

We honor international data privacy best practices. You may request access to, correction of, or deletion of your personal records at any time.

\\n`\n }\n\n html += `\\n

6. Data Security & Storage

\\n`\n html += `

We implement defense-in-depth technical safeguards including TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, and strict role-based access control (RBAC).

\\n\\n`\n\n html += `

7. Contact Information & Privacy Inquiries

\\n`\n html += `

For any questions or statutory inquiries, contact our Data Protection team at ${email}.

\\n`\n\n html += `\\n`\n return html\n }, [\n companyName,\n contactEmail,\n websiteUrl,\n effectiveDate,\n jurisdictions,\n processors,\n cookieTracking,\n activeProcessorsList,\n ])\n\n const downloadPolicy = (format: 'md' | 'html') => {\n const content = format === 'md' ? generateMarkdown() : generateHtml()\n const mimeType = format === 'md' ? 'text/markdown;charset=utf-8' : 'text/html;charset=utf-8'\n const ext = format === 'md' ? 'md' : 'html'\n const safeName = (companyName.trim() || 'uipkge')\n .toLowerCase()\n .replace(/[^a-z0-9]+/g, '-')\n .replace(/(^-|-$)/g, '')\n const filename = `${safeName}-privacy-policy.${ext}`\n\n const blob = new Blob([content], { type: mimeType })\n const url = URL.createObjectURL(blob)\n const link = document.createElement('a')\n link.href = url\n link.download = filename\n document.body.appendChild(link)\n link.click()\n document.body.removeChild(link)\n URL.revokeObjectURL(url)\n\n if (format === 'md') onExportMarkdown?.(content)\n else onExportHtml?.(content)\n }\n\n const copyPolicy = async (format: 'md' | 'html') => {\n const content = format === 'md' ? generateMarkdown() : generateHtml()\n try {\n if (navigator.clipboard && window.isSecureContext) {\n await navigator.clipboard.writeText(content)\n } else {\n const textarea = document.createElement('textarea')\n textarea.value = content\n textarea.style.position = 'fixed'\n textarea.style.opacity = '0'\n document.body.appendChild(textarea)\n textarea.focus()\n textarea.select()\n document.execCommand('copy')\n document.body.removeChild(textarea)\n }\n\n if (format === 'md') {\n setCopiedMd(true)\n setTimeout(() => setCopiedMd(false), 2000)\n onExportMarkdown?.(content)\n } else {\n setCopiedHtml(true)\n setTimeout(() => setCopiedHtml(false), 2000)\n onExportHtml?.(content)\n }\n } catch (err) {\n console.error('Failed to copy policy:', err)\n }\n }\n\n return (\n
\n {/* Header Section */}\n
\n
\n
\n
\n \n
\n

\n Website Privacy Policy & Compliance Generator\n

\n \n \n {activeJurisdictionsCount} Jurisdictions\n \n
\n

\n Generate compliant privacy disclosures tailored to your tech stack and analytics tools.\n

\n
\n\n {/* Quick Export Actions in Header */}\n
\n downloadPolicy('md')}\n >\n \n Export (.md)\n \n \n
\n
\n\n {/* 2-Column Builder Workspace */}\n
\n {/* Left Column: Policy Configuration Sidebar (40% / 5 cols) */}\n
\n \n \n
\n
\n \n Policy Configuration\n
\n \n {activeProcessorsList.length} Sub-Processors\n \n
\n \n Configure company identity, applicable legal regulations, and active data processors.\n \n \n\n \n {/* 1. Organization & Contact Details */}\n
\n
\n \n \n Entity & Contact Information\n \n
\n\n
\n
\n \n setCompanyName(e.target.value)}\n placeholder=\"e.g. UIPKGE Technologies Inc.\"\n size=\"middle\"\n />\n
\n\n
\n \n setContactEmail(e.target.value)}\n placeholder=\"e.g. privacy@uipkge.dev\"\n size=\"middle\"\n />\n
\n\n
\n
\n \n setWebsiteUrl(e.target.value)}\n placeholder=\"https://uipkge.dev\"\n size=\"middle\"\n />\n
\n
\n \n setEffectiveDate(e.target.value)}\n placeholder=\"August 21, 2026\"\n size=\"middle\"\n />\n
\n
\n
\n
\n\n \n\n {/* 2. Jurisdiction & Legal Regulations */}\n
\n
\n
\n \n \n Jurisdiction & Regulations\n \n
\n {activeJurisdictionsCount} selected\n
\n

\n Select applicable privacy frameworks to automatically insert required consumer rights clauses.\n

\n\n
\n {/* GDPR */}\n
\n setJurisdictions((prev) => ({ ...prev, gdpr: Boolean(checked) }))}\n className=\"mt-0.5\"\n />\n
\n \n GDPR (EU)\n \n

\n General Data Protection Regulation (Articles 13, 14, 15–22, DPO and supervisory authority\n clauses).\n

\n
\n
\n\n {/* CCPA / CPRA */}\n
\n setJurisdictions((prev) => ({ ...prev, ccpa: Boolean(checked) }))}\n className=\"mt-0.5\"\n />\n
\n \n CCPA / CPRA (California)\n \n

\n California Consumer Privacy Act (Right to Know, Delete, Correct, and “Do Not Sell My\n Info”).\n

\n
\n
\n\n {/* PIPEDA */}\n
\n setJurisdictions((prev) => ({ ...prev, pipeda: Boolean(checked) }))}\n className=\"mt-0.5\"\n />\n
\n \n PIPEDA (Canada)\n \n

\n Personal Information Protection and Electronic Documents Act (10 Fair Information Principles).\n

\n
\n
\n\n {/* LGPD */}\n
\n setJurisdictions((prev) => ({ ...prev, lgpd: Boolean(checked) }))}\n className=\"mt-0.5\"\n />\n
\n \n LGPD (Brazil)\n \n

\n Lei Geral de Proteção de Dados (Law No. 13.709/2018, ANPD compliance rights).\n

\n
\n
\n
\n
\n\n \n\n {/* 3. Third-Party Data Processors */}\n
\n
\n
\n \n \n Third-Party Processors\n \n
\n \n {activeProcessorsList.length}/{ALL_PROCESSORS.length} Active\n \n
\n\n {/* Category: Analytics */}\n
\n
\n \n Analytics & Metrics\n
\n
\n {/* GA4 */}\n
\n
\n

Google Analytics 4

\n

\n Traffic telemetry, visitor trends & IP masking\n

\n
\n setProcessors((prev) => ({ ...prev, ga4: checked }))}\n aria-label=\"Google Analytics 4\"\n />\n
\n {/* PostHog */}\n
\n
\n

PostHog Cloud

\n

\n Product telemetry, event tracking & session replay\n

\n
\n setProcessors((prev) => ({ ...prev, posthog: checked }))}\n aria-label=\"PostHog Cloud\"\n />\n
\n {/* Plausible */}\n
\n
\n

Plausible Analytics

\n

Privacy-first cookieless analytics in EU

\n
\n setProcessors((prev) => ({ ...prev, plausible: checked }))}\n aria-label=\"Plausible Analytics\"\n />\n
\n
\n
\n\n {/* Category: Payment Processing */}\n
\n
\n \n Payment Processing\n
\n
\n {/* Stripe */}\n
\n
\n

Stripe

\n

\n PCI-DSS Level 1 tokenized billing and transactions\n

\n
\n setProcessors((prev) => ({ ...prev, stripe: checked }))}\n aria-label=\"Stripe\"\n />\n
\n {/* Paddle */}\n
\n
\n

Paddle

\n

\n Merchant of record, checkout & global tax handling\n

\n
\n setProcessors((prev) => ({ ...prev, paddle: checked }))}\n aria-label=\"Paddle\"\n />\n
\n
\n
\n\n {/* Category: Error Logging & Telemetry */}\n
\n
\n \n Error Logging & Telemetry\n
\n
\n {/* Sentry */}\n
\n
\n

Sentry

\n

\n Application exceptions, crash tracing & stack traces\n

\n
\n setProcessors((prev) => ({ ...prev, sentry: checked }))}\n aria-label=\"Sentry\"\n />\n
\n {/* Datadog */}\n
\n
\n

Datadog

\n

APM performance telemetry & log aggregation

\n
\n setProcessors((prev) => ({ ...prev, datadog: checked }))}\n aria-label=\"Datadog\"\n />\n
\n
\n
\n\n {/* Category: Infrastructure & Hosting */}\n
\n
\n \n Infrastructure & Hosting\n
\n
\n {/* Cloudflare */}\n
\n
\n

Cloudflare Pages

\n

\n Global CDN edge routing, caching & DDoS mitigation\n

\n
\n setProcessors((prev) => ({ ...prev, cloudflare: checked }))}\n aria-label=\"Cloudflare Pages\"\n />\n
\n {/* AWS S3 */}\n
\n
\n

AWS S3

\n

\n Encrypted cloud object storage for assets and media\n

\n
\n setProcessors((prev) => ({ ...prev, aws: checked }))}\n aria-label=\"AWS S3\"\n />\n
\n
\n
\n
\n\n \n\n {/* 4. Cookie Tracking Disclosure Switch */}\n
\n
\n
\n \n

Cookie Tracking Disclosure

\n
\n

\n Enable if using session cookies, analytics tags, or local storage. When disabled, generates a strict\n cookieless guarantee.\n

\n
\n \n
\n \n \n
\n\n {/* Right Column: Live Policy Document Preview (60% / 7 cols) */}\n
\n \n \n
\n
\n
\n \n \n \n \n Live Policy Document Preview\n
\n \n Real-time generated legal disclosures tailored to your chosen configuration.\n \n
\n\n {/* Copy Actions Bar */}\n
\n \n\n \n
\n
\n \n\n \n {/* Formatted Document Canvas */}\n
\n {/* Document Header Block */}\n
\n
\n \n Official Disclosure\n \n \n Last updated: {effectiveDate || 'August 21, 2026'}\n \n
\n

\n Privacy Policy for {companyName || 'UIPKGE Technologies Inc.'}\n

\n
\n \n Effective Date: {effectiveDate || 'August 21, 2026'}\n \n •\n \n Website: {websiteUrl || 'https://uipkge.dev'}\n \n •\n \n Contact: {contactEmail || 'privacy@uipkge.dev'}\n \n
\n
\n\n {/* 1. Introduction & Overview */}\n
\n

1. Introduction & Scope

\n

\n {companyName || 'UIPKGE Technologies Inc.'} (“we”, “our”, or\n “us”) is dedicated to safeguarding your personal data and ensuring transparent privacy\n practices. This Privacy Policy governs your use of{' '}\n \n {websiteUrl || 'https://uipkge.dev'}\n {' '}\n (the “Website”) and all associated services and developer APIs.\n

\n

\n By accessing our Website, you acknowledge that you have read, understood, and agreed to the\n practices described in this policy.\n

\n\n {/* Core Commitments Callout */}\n
\n
\n \n
\n

Core Privacy Commitments

\n
    \n
  • \n \n We never sell or rent your personal information to third-party data brokers.\n
    • \n
  • \n \n Industry-standard encryption: TLS 1.3 in transit and AES-256 at rest.\n
    • \n
  • \n \n Guaranteed rights to data access, export portability, and permanent erasure.\n
    • \n
\n
\n
\n
\n
\n\n {/* 2. Personal Information We Collect */}\n
\n

2. Personal Information We Collect

\n

\n We gather only the minimum information necessary to operate our platform securely:\n

\n\n
\n
\n

Account & Inquiries

\n

\n When contacting us via {contactEmail || 'privacy@uipkge.dev'} or registering a workspace, we\n collect names, email addresses, and communication logs.\n

\n
\n\n {(processors.stripe || processors.paddle) && (\n
\n

Billing & Payment Data

\n

\n Payment processing is handled via tokenized PCI-DSS Level 1 compliant gateways (\n {[processors.stripe ? 'Stripe' : '', processors.paddle ? 'Paddle' : '']\n .filter(Boolean)\n .join(', ')}\n ). Raw credit card numbers are never stored on our infrastructure.\n

\n
\n )}\n\n {(processors.ga4 ||\n processors.posthog ||\n processors.plausible ||\n processors.sentry ||\n processors.datadog) && (\n
\n

Telemetry & System Health

\n

\n Aggregated telemetry, client user-agents, IP addresses, and error stack traces to guarantee\n uptime and API responsiveness.\n

\n
\n )}\n
\n
\n\n {/* 3. Third-Party Sub-Processors */}\n
\n
\n

3. Third-Party Sub-Processors

\n \n {activeProcessorsList.length} Disclosed\n \n
\n

\n To operate our platform efficiently, we engage vetted sub-processors governed by strict Data\n Processing Agreements (DPAs):\n

\n\n {activeProcessorsList.length > 0 ? (\n
\n
\n \n \n \n \n \n \n \n \n \n \n {activeProcessorsList.map((proc) => (\n \n \n \n \n \n \n ))}\n \n
\n Sub-Processor\n \n Category\n \n Purpose\n \n Processing Location\n
\n {proc.name}\n \n \n {proc.category}\n \n {proc.purpose}\n {proc.location}\n
\n
\n
\n ) : (\n
\n No external third-party sub-processors are currently enabled.\n
\n )}\n
\n\n {/* 4. Cookies & Tracking Technologies */}\n
\n

4. Cookies & Tracking Technologies

\n {cookieTracking ? (\n
\n

\n We use cookies and local storage tokens to provide essential authentication and analyze site\n traffic patterns:\n

\n
    \n
  • \n Strictly Necessary Cookies: Session\n tokens, theme preference states, and security anti-CSRF verification.\n
    • \n {(processors.ga4 || processors.posthog) && (\n
  • \n Analytics Cookies: Aggregated\n interaction counters to assess documentation usability and improve performance.\n
    • \n )}\n
\n

\n You can configure your browser to block or alert you about cookies. Disabling strictly necessary\n cookies may degrade website functionality.\n

\n
\n ) : (\n
\n
\n \n
\n

\n Zero-Tracking Cookies Guarantee\n

\n

\n This website operates on a 100% cookieless privacy architecture. We do not store persistent\n tracking cookies, cross-site beacons, or marketing identifiers on your device.\n

\n
\n
\n
\n )}\n
\n\n {/* 5. Statutory Compliance & User Rights */}\n
\n

\n 5. Statutory Compliance & Your Privacy Rights\n

\n\n {/* GDPR Clause */}\n {jurisdictions.gdpr && (\n
\n
\n

\n 5.1 European Union (GDPR - EU 2016/679)\n

\n \n EU / EEA\n \n
\n

\n If you reside in the European Economic Area, you possess statutory rights under GDPR Articles\n 15–22:\n

\n
    \n
  • \n \n \n Access (Art. 15): Obtain copy of personal data.\n \n
    • \n
  • \n \n \n Rectification (Art. 16): Correct inaccurate records.\n \n
    • \n
  • \n \n \n Erasure (Art. 17): Request deletion of data.\n \n
    • \n
  • \n \n \n Portability (Art. 20): Export data in JSON format.\n \n
    • \n
\n

\n You also have the statutory right to lodge a formal complaint with your local EU Supervisory\n Authority.\n

\n
\n )}\n\n {/* CCPA / CPRA Clause */}\n {jurisdictions.ccpa && (\n
\n
\n

\n 5.2 California Privacy Rights (CCPA / CPRA)\n

\n \n California\n \n
\n

\n California residents are entitled to notice at collection and the following statutory\n protections:\n

\n
    \n
  • \n • Right to Know & Access: Request categories and specific pieces of\n data collected in the past 12 months.\n
    • \n
  • \n • Right to Delete: Request deletion of personal records collected from\n you.\n
    • \n
  • \n • Zero Data Selling: We do not sell or share personal information with\n third-party data brokers.\n
    • \n
  • \n • Non-Discrimination: We do not alter service availability or pricing\n when you exercise privacy rights.\n
    • \n
\n
\n )}\n\n {/* PIPEDA Clause */}\n {jurisdictions.pipeda && (\n
\n
\n

5.3 Canadian Privacy Rights (PIPEDA)

\n \n Canada\n \n
\n

\n In compliance with Canada’s PIPEDA, we adhere to the 10 Fair Information Principles\n ensuring accountability, consent, purpose limitation, and safeguard standards. Inquiries can be\n escalated to the Office of the Privacy Commissioner of Canada (OPC).\n

\n
\n )}\n\n {/* LGPD Clause */}\n {jurisdictions.lgpd && (\n
\n
\n

5.4 Brazilian Privacy Rights (LGPD)

\n \n Brazil\n \n
\n

\n Under Law No. 13.709/2018 (LGPD), Brazilian data subjects may confirm processing activities,\n request anonymization or blocking of non-compliant data, and revoke consent through our Data\n Protection Officer.\n

\n
\n )}\n\n {/* Generic fallback if no checkboxes selected */}\n {!jurisdictions.gdpr && !jurisdictions.ccpa && !jurisdictions.pipeda && !jurisdictions.lgpd && (\n
\n We adhere to global privacy principles. You may request access to, correction of, or erasure of\n your personal data at any time by contacting our team.\n
\n )}\n
\n\n {/* 6. Data Security & Storage */}\n
\n

6. Data Security & Storage

\n

\n We enforce technical and organizational safeguards including TLS 1.3 encryption in transit, AES-256\n encryption at rest, segmented cloud VPC environments, and strict least-privilege role-based access\n controls (RBAC). Data is retained only for as long as necessary to fulfill operational commitments\n or statutory legal obligations.\n

\n
\n\n {/* 7. Contact Information & Data Protection Officer */}\n
\n

\n 7. Contact Information & Data Protection\n

\n

\n To submit a data request, exercise your statutory privacy rights, or ask questions regarding this\n policy, please contact:\n

\n
\n

\n {companyName || 'UIPKGE Technologies Inc.'}\n

\n

Attn: Privacy & Data Protection Officer

\n
\n \n \n {contactEmail || 'privacy@uipkge.dev'}\n \n
\n
\n
\n
\n \n\n \n
\n \n \n Generated for {companyName || 'UIPKGE Technologies Inc.'}\n \n
\n
\n \n {activeProcessorsList.length} Processors\n \n \n {activeJurisdictionsCount} Jurisdictions\n \n
\n \n \n
\n
\n
\n )\n}\n", "type": "registry:block", "target": "~/components/blocks/PrivacyPolicyGenerator.tsx" } ], "dependencies": [ "lucide-react" ], "devDependencies": [], "registryDependencies": [ "https://uipkge.dev/r/react/badge.json", "https://uipkge.dev/r/react/button.json", "https://uipkge.dev/r/react/card.json", "https://uipkge.dev/r/react/checkbox.json", "https://uipkge.dev/r/react/input.json", "https://uipkge.dev/r/react/separator.json", "https://uipkge.dev/r/react/switch.json" ], "description": "Customizable website privacy policy builder with third-party tracking disclosures, CCPA, and GDPR compliance clauses.", "categories": [ "legal", "marketing", "app", "form" ] }