Privacy notice

Adapted from the project launch draft in docs/PRIVACY.md.

Draft — not final. This notice is a launch draft. It requires jurisdiction-specific legal review and counsel approval before any sale. Company identity, data controller, retention/deletion process, and related legal facts are not filled in here.