Privacy

This document is a placeholder. Final wording must come from legal counsel and be versioned before production launch (docs/08 "Privacy features").