Privacy Policy

Placeholder — replace with your actual privacy policy before launch. At minimum, this should cover what tenant/employee data is collected, how AI provider keys are encrypted at rest, data retention for audit logs and AI request logs, and each tenant's data-isolation guarantees.