From 2f24489ecbd4050ebbdecafb8bb22bf2eeafb10d Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Sun, 25 Jan 2026 17:12:34 -0600
Subject: [PATCH] add privacy page

---
 lib/towerops_web/components/layouts.ex        |   8 ++
 .../controllers/page_controller.ex            |   4 +
 .../controllers/page_html/privacy.html.heex   | 117 ++++++++++++++++++
 lib/towerops_web/router.ex                    |   1 +
 4 files changed, 130 insertions(+)
 create mode 100644 lib/towerops_web/controllers/page_html/privacy.html.heex

diff --git a/lib/towerops_web/components/layouts.ex b/lib/towerops_web/components/layouts.ex
index 71592f60..52e5f57c 100644
--- a/lib/towerops_web/components/layouts.ex
+++ b/lib/towerops_web/components/layouts.ex
@@ -612,6 +612,14 @@ defmodule ToweropsWeb.Layouts do
       <div class="mx-auto max-w-7xl px-4 py-6 sm:px-6 lg:px-8">
         <div class="flex flex-col items-center gap-2 text-sm text-gray-600 dark:text-gray-400">
           <p>Copyright © {Date.utc_today().year} Towerops</p>
+          <p class="text-xs">
+            <.link
+              navigate={~p"/privacy"}
+              class="hover:text-gray-900 dark:hover:text-gray-200 underline decoration-dotted underline-offset-2"
+            >
+              Privacy Policy
+            </.link>
+          </p>
           <p class="text-xs">
             Last deploy <span title={@formatted_time}>{@time_ago}</span> · {@formatted_time}
           </p>
diff --git a/lib/towerops_web/controllers/page_controller.ex b/lib/towerops_web/controllers/page_controller.ex
index c5c230a4..13032022 100644
--- a/lib/towerops_web/controllers/page_controller.ex
+++ b/lib/towerops_web/controllers/page_controller.ex
@@ -11,4 +11,8 @@ defmodule ToweropsWeb.PageController do
       render(conn, :home, layout: false)
     end
   end
+
+  def privacy(conn, _params) do
+    render(conn, :privacy)
+  end
 end
diff --git a/lib/towerops_web/controllers/page_html/privacy.html.heex b/lib/towerops_web/controllers/page_html/privacy.html.heex
new file mode 100644
index 00000000..e39efc3b
--- /dev/null
+++ b/lib/towerops_web/controllers/page_html/privacy.html.heex
@@ -0,0 +1,117 @@
+<Layouts.app flash={@flash}>
+  <div class="space-y-8">
+    <div>
+      <h1 class="text-3xl font-bold text-gray-900 dark:text-white">Privacy Policy</h1>
+      <p class="mt-2 text-sm text-gray-600 dark:text-gray-400">
+        Last updated: {Date.utc_today() |> Calendar.strftime("%B %d, %Y")}
+      </p>
+    </div>
+
+    <div class="prose prose-sm dark:prose-invert max-w-none">
+      <section class="space-y-4">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">
+          Our Commitment to Privacy
+        </h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          At Towerops, we value your privacy. This policy outlines how we collect, use, and protect your data when you use our network monitoring platform.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">
+          Data Collection and Use
+        </h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We collect and store information necessary to provide our network monitoring services, including:
+        </p>
+        <ul class="list-disc pl-6 space-y-2 text-gray-700 dark:text-gray-300">
+          <li>Account information (email address, organization details)</li>
+          <li>Network device data (IP addresses, SNMP data, device configurations)</li>
+          <li>Monitoring metrics and alerts</li>
+          <li>Usage information to improve our services</li>
+        </ul>
+        <p class="text-gray-700 dark:text-gray-300">
+          <strong class="font-semibold">
+            Your data is used exclusively for providing our monitoring services to you.
+          </strong>
+          We will never sell, trade, or expose your data to third parties for marketing or any other purposes.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Data Protection</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We implement industry-standard security measures to protect your data:
+        </p>
+        <ul class="list-disc pl-6 space-y-2 text-gray-700 dark:text-gray-300">
+          <li>Encrypted connections (HTTPS/TLS) for all data transmission</li>
+          <li>Secure database storage with encryption at rest</li>
+          <li>Access controls and authentication mechanisms</li>
+          <li>Regular security audits and updates</li>
+        </ul>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Data Retention</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We retain your data for as long as your account is active and as necessary to provide our services. Time-series monitoring data is retained according to your subscription plan. When you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Third-Party Services</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We use limited third-party services to operate our platform:
+        </p>
+        <ul class="list-disc pl-6 space-y-2 text-gray-700 dark:text-gray-300">
+          <li>Cloud infrastructure providers for hosting</li>
+          <li>Email delivery services for notifications</li>
+          <li>Payment processors for subscription billing</li>
+        </ul>
+        <p class="text-gray-700 dark:text-gray-300">
+          These services are bound by their own privacy policies and are used solely to deliver our services to you.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Your Rights</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          You have the right to:
+        </p>
+        <ul class="list-disc pl-6 space-y-2 text-gray-700 dark:text-gray-300">
+          <li>Access your data at any time through your account</li>
+          <li>Export your data in standard formats</li>
+          <li>Request deletion of your account and associated data</li>
+          <li>Update or correct your information</li>
+          <li>Opt out of non-essential communications</li>
+        </ul>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Cookies and Tracking</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We use essential cookies to maintain your session and preferences. We do not use third-party tracking or advertising cookies.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">
+          Changes to This Policy
+        </h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          We may update this privacy policy from time to time. We will notify you of any significant changes by email or through our platform.
+        </p>
+      </section>
+
+      <section class="space-y-4 mt-8 pt-8 border-t border-gray-200 dark:border-gray-700">
+        <h2 class="text-xl font-semibold text-gray-900 dark:text-white">Contact Us</h2>
+        <p class="text-gray-700 dark:text-gray-300">
+          If you have questions about this privacy policy or how we handle your data, please contact us at <a
+            href="mailto:privacy@towerops.net"
+            class="text-blue-600 hover:text-blue-500 dark:text-blue-400 dark:hover:text-blue-300"
+          >privacy@towerops.net</a>.
+        </p>
+      </section>
+    </div>
+  </div>
+</Layouts.app>
diff --git a/lib/towerops_web/router.ex b/lib/towerops_web/router.ex
index fdada219..42406066 100644
--- a/lib/towerops_web/router.ex
+++ b/lib/towerops_web/router.ex
@@ -43,6 +43,7 @@ defmodule ToweropsWeb.Router do
     pipe_through :browser
 
     get "/", PageController, :home
+    get "/privacy", PageController, :privacy
     get "/docs/api", ApiDocsController, :index
   end