// Privacy Policy page

const PrivacyPage = () => (
  <>
    <Nav/>
    <section className="aud-hero opener" style={{ minHeight: 'auto', paddingTop: 128, paddingBottom: 64 }}>
      <div className="container" style={{ maxWidth: 760 }}>
        <div className="page-eyebrow"><span className="bar"></span>LEGAL · PRIVACY</div>
        <h1 style={{ fontSize: 48, marginTop: 16 }}>Privacy Policy</h1>
        <p className="ink-3 mono" style={{ fontSize: 13, marginTop: 12, letterSpacing: '0.04em' }}>EFFECTIVE JANUARY 1, 2025 · THE VR SCHOOL · 520 LASUEN MALL #200 · STANFORD CA 94309</p>
      </div>
    </section>

    <section style={{ borderTop: '1px solid var(--line-soft)', paddingBottom: 128 }}>
      <div className="container" style={{ maxWidth: 760 }}>
        <div className="privacy-body">

          <div className="privacy-section">
            <h2>1. Who We Are</h2>
            <p>The VR School is a WASC-accredited virtual reality high school offering UC A-G approved courses to students in grades 6–12 globally. We are located at 520 Lasuen Mall #200, Stanford, California 94309. Questions about this policy should be directed to <a href="mailto:privacy@thevr.school">privacy@thevr.school</a>.</p>
          </div>

          <div className="privacy-section">
            <h2>2. Information We Collect</h2>
            <p>We collect the following categories of information:</p>
            <ul>
              <li><b>Enrollment data</b> — name, date of birth, grade level, prior school records, guardian contact information</li>
              <li><b>Account credentials</b> — username, hashed password, session tokens</li>
              <li><b>Academic records</b> — coursework, grades, transcripts, assessment results, protected under FERPA</li>
              <li><b>Usage analytics</b> — time in world, lesson completion, SofAI interaction logs (anonymized in aggregate reporting)</li>
              <li><b>Communications</b> — emails, support tickets, form submissions</li>
              <li><b>Payment details</b> — billing name and address; full card numbers are processed externally and never stored by us</li>
            </ul>
          </div>

          <div className="privacy-section">
            <h2>3. How We Use Your Information</h2>
            <p>Data supports: course delivery, enrollment management, academic tracking, student and family communications, support services, legal compliance, and curriculum improvement.</p>
            <p><b>We do not use student data for advertising, profiling unrelated to education, or sale to third parties.</b></p>
          </div>

          <div className="privacy-section">
            <h2>4. How We Share Your Information</h2>
            <p>Information is shared with:</p>
            <ul>
              <li>Service providers under data processing agreements (hosting, payment processing, analytics)</li>
              <li>Educational partners (e.g., California Community Colleges for dual enrollment) with student or guardian consent</li>
              <li>Accreditation bodies (ACS WASC) as required for accreditation maintenance</li>
              <li>Law enforcement or regulatory authorities when legally required</li>
            </ul>
            <p><b>We do not sell, rent, or trade personal information to third parties for commercial purposes.</b></p>
          </div>

          <div className="privacy-section">
            <h2>5. Children's Privacy (COPPA)</h2>
            <p>For students under 13, verifiable parental consent is required before enrollment. Parents may review, correct, or request deletion of their child's personal information at any time by contacting <a href="mailto:privacy@thevr.school">privacy@thevr.school</a>. We do not engage in behavioral advertising targeting children under 13.</p>
          </div>

          <div className="privacy-section">
            <h2>6. FERPA Rights</h2>
            <p>Students 18 and older, and parents or guardians of enrolled minors, have the right to:</p>
            <ul>
              <li>Inspect and review educational records within 45 days of a written request</li>
              <li>Request amendment of records believed to be inaccurate or misleading</li>
              <li>Control disclosure of personally identifiable information in educational records</li>
            </ul>
            <p>Requests should be submitted in writing to <a href="mailto:admissions@thevr.school">admissions@thevr.school</a> or mailed to our Stanford address.</p>
          </div>

          <div className="privacy-section">
            <h2>7. California Privacy Rights (CCPA / CPRA)</h2>
            <p>California residents have the right to: know what personal information is collected, delete personal information, correct inaccurate information, and opt out of the sale of personal information (we do not sell personal information). We will respond to verified requests within 45 days.</p>
          </div>

          <div className="privacy-section">
            <h2>8. Data Retention</h2>
            <p>Student academic records are retained for a minimum of seven years after the end of enrollment. Usage analytics in aggregate form may be retained indefinitely. Account credentials are purged within 90 days of account closure upon request.</p>
          </div>

          <div className="privacy-section">
            <h2>9. Cookies and Tracking</h2>
            <p>We use session cookies for authentication and preference storage. We do not use third-party advertising trackers. Analytics tools we use are configured to anonymize IP addresses.</p>
          </div>

          <div className="privacy-section">
            <h2>10. Security</h2>
            <p>We implement industry-standard encryption in transit (TLS 1.3) and at rest (AES-256). Access to student records is role-restricted. We conduct annual security reviews.</p>
          </div>

          <div className="privacy-section">
            <h2>11. Policy Changes</h2>
            <p>Material changes to this policy will be announced to enrolled students and guardians at least 14 days before taking effect. The effective date at the top of this page reflects the most recent revision.</p>
          </div>

          <div className="privacy-section">
            <h2>12. Contact</h2>
            <p>Privacy questions, FERPA requests, COPPA consent, and CCPA rights requests:</p>
            <p>
              <a href="mailto:privacy@thevr.school">privacy@thevr.school</a><br/>
              The VR School · Attn: Privacy Officer<br/>
              520 Lasuen Mall #200<br/>
              Stanford, CA 94309
            </p>
          </div>

        </div>
      </div>
    </section>

    <Footer/>
  </>
);

ReactDOM.createRoot(document.getElementById('root')).render(<PrivacyPage/>);