Privacy Policy

TODO — draft with counsel before launch. See docs/SECURITY.md for the underlying data-handling commitments this policy must reflect.