import type { Metadata } from "next";
import LegalPage from "@/components/LegalPage";

export const metadata: Metadata = {
  title: "Privacy Policy",
  description:
    "How MxERP (ACG Infotech Ltd.) collects, uses, discloses and safeguards your information — including DPDP Act 2023 rights.",
  alternates: { canonical: "/privacy-policy" },
};

const SECTIONS = [
  { id: "collect", label: "Information we collect" },
  { id: "use", label: "How we use it" },
  { id: "share", label: "How we share it" },
  { id: "transfers", label: "International transfers" },
  { id: "retention", label: "Data retention" },
  { id: "cookies", label: "Cookies & tracking" },
  { id: "security", label: "Data security" },
  { id: "rights", label: "Your rights (DPDP Act)" },
  { id: "third-party", label: "Third-party links" },
  { id: "children", label: "Children's privacy" },
  { id: "contact", label: "Contact us" },
  { id: "changes", label: "Changes to this policy" },
];

export default function PrivacyPolicyPage() {
  return (
    <LegalPage
      pill="LEGAL · PRIVACY"
      title="Privacy Policy"
      intro="How MxERP (ACG Infotech Ltd.) collects, uses, discloses and safeguards your information when you visit this website or use our products."
      updated="October 2026"
      sections={SECTIONS}
      other={{
        href: "/terms-of-use",
        label: "Terms of Use",
        text: "The rules for using this website and MxERP products.",
      }}
    >
      <p>
        MxERP, a product of ACG Infotech Ltd. (ACGIL), Noida, India, is committed to
        protecting the privacy of our website visitors, customers and partners. This
        policy explains what we collect, why, and the choices you have — including
        your rights under India&apos;s Digital Personal Data Protection Act, 2023
        (DPDP Act).
      </p>

      <section id="collect">
        <h2>1. Information we collect</h2>
        <h3>1.1 Information you give us</h3>
        <p>When you request a demo, ask for a callback, subscribe or contact us, we collect:</p>
        <ul>
          <li>Name, company name and industry</li>
          <li>Email address and phone number (validated against country-specific rules)</li>
          <li>Company size, areas of interest and anything you tell us about your requirement</li>
          <li>Callback time preference and consent record</li>
        </ul>
        <h3>1.2 Information collected automatically</h3>
        <ul>
          <li>IP address and approximate location</li>
          <li>Browser, device and operating system</li>
          <li>Pages visited and time spent (cookies — see section 6)</li>
        </ul>
        <h3>1.3 Information from MxERP usage</h3>
        <p>
          If your organisation licenses MxERP, business data you enter (projects,
          financial or operational data) is processed only to provide the software
          and support. It remains your organisation&apos;s property.
        </p>
      </section>

      <section id="use">
        <h2>2. How we use your information</h2>
        <ul>
          <li>To respond to demo, callback and support requests</li>
          <li>To provide, operate and maintain MxERP and related services</li>
          <li>To send product updates you asked for (e.g. the monthly newsletter)</li>
          <li>To improve our website, products and customer experience</li>
          <li>To comply with legal obligations and detect fraud or security incidents</li>
        </ul>
        <p>
          Marketing communication is sent only on the basis of your consent, given
          through our forms, and every message carries an unsubscribe option.
        </p>
      </section>

      <section id="share">
        <h2>3. How we share your information</h2>
        <p>We do not sell your personal information. Limited sharing happens only:</p>
        <ul>
          <li>With service providers operating our website, hosting or support, under confidentiality obligations</li>
          <li>With authorised partners or resellers, where needed to fulfil your request</li>
          <li>When required by law, regulation or governmental request</li>
          <li>To protect the rights, property or safety of ACGIL, our customers or others</li>
        </ul>
      </section>

      <section id="transfers">
        <h2>4. International data transfers</h2>
        <p>
          We serve clients globally, so your information may be stored and processed
          outside your country, including in India where our servers and central
          operations are located, with protections required by applicable law.
        </p>
      </section>

      <section id="retention">
        <h2>5. Data retention</h2>
        <p>
          We keep personal information only as long as needed for the purposes in
          this policy — providing services, legal compliance, dispute resolution —
          then securely delete or anonymise it.
        </p>
      </section>

      <section id="cookies">
        <h2>6. Cookies and tracking technologies</h2>
        <p>
          We use a consent banner for non-essential cookies. You can accept, reject
          or change your choice anytime, and control cookies in your browser settings;
          some features may not work with cookies disabled.
        </p>
      </section>

      <section id="security">
        <h2>7. Data security</h2>
        <p>
          We apply administrative, technical and physical safeguards — access controls,
          encryption where appropriate and regular reviews. No system is completely
          secure, and we cannot guarantee absolute security.
        </p>
      </section>

      <section id="rights">
        <h2>8. Your rights (DPDP Act, 2023)</h2>
        <p>Under India&apos;s DPDP Act, you may:</p>
        <ul>
          <li>Access a summary of personal data we hold about you</li>
          <li>Request correction, completion or erasure of your data</li>
          <li>Withdraw consent at any time (processing done before withdrawal stays lawful)</li>
          <li>Nominate another individual to exercise your rights on your behalf</li>
          <li>Seek grievance redressal with us first, then with the Data Protection Board of India</li>
        </ul>
        <p>
          Write to <a href="mailto:akg@acgil.net">akg@acgil.net</a> or call{" "}
          <a href="tel:+919818993537">+91-9818993537</a>; we respond within the
          timelines the Act prescribes.
        </p>
      </section>

      <section id="third-party">
        <h2>9. Third-party links</h2>
        <p>
          Our site links to third parties (e.g. brochure downloads, maps, LinkedIn).
          Their privacy practices are their own — please review their policies.
        </p>
      </section>

      <section id="children">
        <h2>10. Children&apos;s privacy</h2>
        <p>
          MxERP is business software and is not directed at under-18s. We do not
          knowingly collect children&apos;s data; accidental collection is deleted
          promptly on notice.
        </p>
      </section>

      <section id="contact">
        <h2>11. Contact us</h2>
        <p>
          ACG Infotech Ltd. (MxERP) — H-107, Sector-63, Noida – 201301, Uttar
          Pradesh, India · <a href="tel:+919818993537">+91-9818993537</a> ·{" "}
          <a href="mailto:akg@acgil.net">akg@acgil.net</a>
        </p>
      </section>

      <section id="changes">
        <h2>12. Changes to this policy</h2>
        <p>
          We may update this policy as practices, technology or law change. The
          revised version appears here with a new “Last updated” date — please
          review it periodically.
        </p>
      </section>
    </LegalPage>
  );
}