@extends('layouts.app')

@section('title', 'Veriqo - Data Processing Agreement')

@section('content')

<!-- main content -->
    <main class="page-content">

        <!-- page banner -->
        <section class="page_banner animate__animated animate__fadeInLeft animate__delay-0.5s">
            <div class="container">
                <div class="row justify-content-center">
                    <div class="col-md-10">
                        <div class="page_banner_content">
                            <h1>Data Processing Agreement</h1>
                            <p>Enterprise-grade compliance for executive decision intelligence</p>
                        </div>
                    </div>
                </div>
            </div>
        </section>

        <!-- policy point -->
        <section class="policy_point">
            <div class="container">
                <div class="policy_point_info">
                    <div class="policy_update_info animate-on-scroll" data-animation="fadeInUp">
                        <h4>Last Updated: October 1, 2025</h4>
                    </div>
                    <div class="policy_point_info_list">
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Payment Terms</h3>
                            <ul>
                                <li>
                                    <p><span>Data Controller:</span> Customer (you)</p>
                                </li>
                                <li>
                                    <p><span>Data Processor:</span> Digital Pulse 365 Ltd. (trading as VERIQO), registered at 128 City Road, London, EC1V 2NX, UK</p>
                                </li>
                            </ul>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Scope & Purpose </h3>
                            <div class="policy_info_list_item_inr">
                                <p>This DPA governs the processing of personal data submitted via VERIQO’s AI decision platform. Processing is strictly limited to:</p>
                                <ul>
                                    <li>
                                        <p>Authentication (email address)</p>
                                    </li>
                                    <li>
                                        <p>Payment processing (via Stripe)</p>
                                    </li>
                                    <li>
                                        <p>Delivery of AI-generated strategic analysis</p>
                                    </li>
                                </ul>
                                <p><span>Query content is NOT processed as personal data</span> under this agreement, as it is deleted within 60 seconds and never stored.</p>
                            </div>
                        </div>                         
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Data Processing Principles</h3>
                            <ul>
                                <li>
                                    <p><span>Lawfulness:</span> Processing only as instructed by Controller</p>
                                </li>
                                <li>
                                    <p><span>Purpose Limitation:</span> No use beyond service delivery</p>
                                </li>
                                <li>
                                    <p><span>Data Minimization:</span> Only essential data collected</p>
                                </li>
                                <li>
                                    <p><span>Storage Limitation:</span> All data deleted per retention policy</p>
                                </li>
                                <li>
                                    <p><span>Zero Retention:</span> Strategic queries deleted within 60 seconds</p>
                                </li>
                            </ul>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Security Measures</h3>
                            <div class="policy_info_list_item_inr">
                                <p>VERIQO implements and maintains appropriate technical and organizational measures:</p>
                                <ul>
                                    <li>
                                        <p>Encryption of data in transit (TLS 1.3)</p>
                                    </li>
                                    <li>
                                        <p>Secure processing environment with no persistent storage</p>
                                    </li>
                                    <li>
                                        <p>Regular security testing and vulnerability scanning</p>
                                    </li>
                                    <li>
                                        <p>Access controls and authentication (MFA for staff)</p>
                                    </li>
                                    <li>
                                        <p>SOC 2 Type II compliance (in progress)</p>
                                    </li>
                                    <li>
                                        <p>Annual third-party penetration testing</p>
                                    </li>
                                </ul>
                            </div>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Sub-Processors</h3>
                            <div class="policy_info_list_item_inr">
                                <p>VERIQO uses the following sub-processors:</p>
                                <ul>
                                    <li>
                                        <p><span>Stripe:</span> processing (GDPR-compliant)</p>
                                    </li>
                                    <li>
                                        <p><span>AWS:</span> Cloud infrastructure (EU/UK regions only)</p>
                                    </li>
                                    <li>
                                        <p><span>Auth0:</span>Identity management (enterprise plans)</p>
                                    </li>
                                </ul>
                                <p>Customers will be notified of new sub-processors with 30 days to object.</p>
                            </div>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Data Subject Rights</h3>
                            <div class="policy_info_list_item_inr">
                                <p>VERIQO will assist the Controller in fulfilling data subject requests, including:</p>
                                <ul>
                                    <li>
                                        <p>Access, rectification, erasure</p>
                                    </li>
                                    <li>
                                        <p>Restriction of processing</p>
                                    </li>
                                    <li>
                                        <p>Data portability (limited to account metadata)</p>
                                    </li>
                                </ul>
                                <p>Note: Query content is not retained and cannot be retrieved.</p>
                            </div>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>International Transfers</h3>
                            <div class="policy_info_list_item_inr">
                                <p>All data processing occurs within the UK or EU. No transfers to third countries.</p>
                            </div>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Audit & Compliance</h3>
                            <div class="policy_info_list_item_inr">
                                <p>VERIQO will:</p>
                                <ul>
                                    <li>
                                        <p>Provide annual compliance reports</p>
                                    </li>
                                    <li>
                                        <p>Allow Controller audits with 30 days notice</p>
                                    </li>
                                    <li>
                                        <p>Maintain records of processing activities</p>
                                    </li>
                                </ul>
                            </div>
                        </div>
                        <div class="policy_point_info_list_item animate-on-scroll" data-animation="fadeInRight">
                            <h3>Term & Termination</h3>
                            <div class="policy_info_list_item_inr">
                                <p>This DPA remains in effect while the VERIQO service is active. Upon termination:</p>
                                <ul>
                                    <li>
                                        <p>All personal data will be securely deleted within 30 days</p>
                                    </li>
                                    <li>
                                        <p>No backups or copies retained</p>
                                    </li>
                                </ul>
                            </div>
                        </div>                         
                    </div>
                </div>
            </div>
        </section>
    </main>

@endsection
  
  <script src="./assets/js/jquery.min.js"></script>
  <script src="./assets/js/bs.min.js"></script>
  <script src="./assets/js/custom.js"></script>
    <script>
        $(document).ready(function () {

            // Check if user is logged in (has JWT token in localStorage)
            var accessToken = localStorage.getItem('access_token');

            // if (!accessToken) {
            //     // User is not logged in, redirect to index.html
            //     window.location.href = './index.html';
            // }

            // Replace profile images with user initial
            // Replace profile images with user initial
            function updateProfileInitial() {
                try {
                    // Get user data from localStorage
                    var userDataStr = localStorage.getItem('user');
                    if (!userDataStr) {
                        return; // No user data available
                    }

                    var userData = JSON.parse(userDataStr);
                    var fullName = userData.full_name || '';

                    // Get first alphabet letter (A-Z), ignoring all non-alphabet characters (Google-like behavior)
                    var firstLetter = '';
                    if (fullName && fullName.trim().length > 0) {
                        var trimmedName = fullName.trim();
                        // Find first A-Z letter (case-insensitive), skip hyphens, symbols, numbers, etc.
                        var match = trimmedName.match(/[a-zA-Z]/);
                        if (match) {
                            firstLetter = match[0].toUpperCase();
                        } else {
                            firstLetter = '?'; // No letters found (e.g., "---", "@#$")
                        }
                    } else {
                        firstLetter = '?'; // Fallback if no name
                    }

                    // Replace all profile images with initial div
                    $('#profileSection img[src*="/profile.png"]').each(function () {
                        $(this).replaceWith('<div class="profile-initial">' + firstLetter + '</div>');
                    });

                    // Add click handler for profile initial to toggle dropdown
                    $('.profile-initial').on('click', function (e) {
                        e.stopPropagation();
                        // Get the closest profile container and find its dropdown
                        var $profileContainer = $(this).closest('.profile');
                        var $dropdown = $profileContainer.find('.profile_dropdown');
                        // Toggle the dropdown with slide animation (same as custom.js)
                        $dropdown.slideToggle(200);
                    });
                } catch (error) {
                    console.error('Error updating profile initial:', error);
                }
            }

            // Close dropdown when clicking outside
            $(document).on('click', function (e) {
                if (!$(e.target).closest('.profile').length) {
                    $('.profile_dropdown').slideUp(200);
                }
            });
            

            // Call function to update profile initial
            updateProfileInitial();

            function updateNavbarAuthUI() {
                var accessToken = localStorage.getItem('access_token');

                if (accessToken) {
                    // Hide "Sign In", show profile dropdown
                    $('#signInButton').hide();
                    $('#profileSection').show();
                } else {
                    // Show "Sign In", hide profile dropdown
                    $('#signInButton').show();
                    $('#profileSection').hide();
                }
            }
            updateNavbarAuthUI();
        });
         $('#logoutBtn, .logout-btn').on('click', function (e) {
                e.preventDefault();
                handleLogout();
            });

            function showConfirmationModal(message, onConfirm, onCancel) {
                $('#confirmationMessage').text(message);
                $('#confirmationModal').fadeIn(300);

                // Remove any existing handlers to prevent duplicates
                $('#confirmationYesBtn, #confirmationNoBtn').off('click');

                // Yes button handler
                $('#confirmationYesBtn').on('click', function () {
                    $('#confirmationModal').fadeOut(300);
                    if (onConfirm) {
                        onConfirm();
                    }
                });

                // No button handler
                $('#confirmationNoBtn').on('click', function () {
                    $('#confirmationModal').fadeOut(300);
                    if (onCancel) {
                        onCancel();
                    }
                });

                // Close on overlay click (optional - you can remove this if you don't want it)
                $('#confirmationModal').on('click', function (e) {
                    if ($(e.target).hasClass('confirmation-modal')) {
                        $('#confirmationModal').fadeOut(300);
                        if (onCancel) {
                            onCancel();
                        }
                    }
                });
            }

            function handleLogout() {
                showConfirmationModal('Are you sure you want to logout?', function () {
                    // User confirmed - proceed with logout
                    // Clear all authentication data from localStorage and sessionStorage
                    localStorage.removeItem('access_token');
                    localStorage.removeItem('user');
                    localStorage.removeItem('remember_me_used'); // Clear Remember Me flag
                    sessionStorage.removeItem('access_token');
                    sessionStorage.removeItem('user');

                    // Note: We keep remembered_email and remembered_password in localStorage
                    // so they persist after logout (only cleared if Remember Me was unchecked)

                    // Redirect to index.html (refresh page to show sign in button)
                    window.location.href = './index.html';
                });
            }

    </script>
</body>
</html>