Privacy & data retention
Status: stub — to be filled from PRD §6.3 and the click-tracking design.
Will cover:
- What we collect: click events (time, geo, device/OS, referrer) and match records — no PII by default
- Retention windows per data type
- User/data-subject deletion requests
- GDPR/CCPA posture and DPA availability