/privacy + /terms post-pivot refresh: bump 'Last updated' to 2026-05-07; add 'Lead capture' clause for /services Get-Started forms; clarify 'no markup on partner fees' in /terms

a261c64cf590b0fa55d774b3e65de897750eea56 · 2026-05-07 09:05:02 -0700 · Steve
Files touched

M server/server.js
Diff

commit a261c64cf590b0fa55d774b3e65de897750eea56
Author: Steve <steve@designerwallcoverings.com>
Date:   Thu May 7 09:05:02 2026 -0700

    /privacy + /terms post-pivot refresh: bump 'Last updated' to 2026-05-07; add 'Lead capture' clause for /services Get-Started forms; clarify 'no markup on partner fees' in /terms
---
 server/server.js | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/server/server.js b/server/server.js
index 126ccbe..0edf84f 100644
--- a/server/server.js
+++ b/server/server.js
@@ -1157,7 +1157,7 @@ function _renderTextPage(title, eyebrow, h1, blocks) {
         <h1>${h1}</h1>
         ${blocks.map(b => `<p style="font-family:var(--mono);font-size:13px;line-height:1.85;color:var(--ink-soft);margin-bottom:20px">${b}</p>`).join("")}
         <p style="margin-top:42px;font-family:var(--mono);font-size:11px;color:var(--ink-mute)">
-          Last updated 2026-05-05 · Questions: <a href="mailto:${esc(SUPPORT_EMAIL)}" style="color:var(--gold)">${esc(SUPPORT_EMAIL)}</a>
+          Last updated 2026-05-07 · Questions: <a href="mailto:${esc(SUPPORT_EMAIL)}" style="color:var(--gold)">${esc(SUPPORT_EMAIL)}</a>
         </p>
       </main>`
   });
@@ -1168,7 +1168,8 @@ app.get("/privacy", (req, res) => {
     `<strong>Commands.</strong> Your chat messages and routed actions are logged in an audit trail tied to your account. The audit log records the action taken, the connector involved, and a 140-character snippet of your original message — not full message bodies, not vendor responses.`,
     `<strong>LLM routing.</strong> When the agent classifies your intent, your message is sent to a self-hosted Ollama instance running on Steve's hardware. We do not send your commands to third-party LLM providers (Anthropic, OpenAI, etc.). Your business workflow is not training someone else's model.`,
     `<strong>Cookies.</strong> One signed session cookie (HttpOnly, SameSite=Lax). No third-party trackers, no advertising pixels, no analytics SDKs.`,
-    `<strong>Vendor calls.</strong> When you authorize an action against a connected SaaS tool (Shopify, Stripe, Slack, etc.), the agent calls that vendor's API directly with <em>your</em> credentials. Their privacy policy applies to that data.`,
+    `<strong>Vendor calls.</strong> When you authorize an action against a connected SaaS tool (Shopify, Stripe, Slack, etc.) — including the multi-API orchestrations on <a href="/services" style="color:var(--gold)">/services</a> — the agent calls that vendor's API directly with <em>your</em> credentials. Their privacy policy applies to that data, not ours. We never act as a man-in-the-middle for the data that flows between you and the vendor.`,
+    `<strong>Lead capture.</strong> If you submit the "Get Started" form on /services, we store the email, optional phone, optional state, and the free-text notes you typed. That's it — no tracking pixels, no enrichment-vendor lookups, no third-party sharing. We reply within one business day from <a href="mailto:${esc(SUPPORT_EMAIL)}" style="color:var(--gold)">${esc(SUPPORT_EMAIL)}</a>.`,
     `<strong>Data export / deletion.</strong> Email <a href="mailto:${esc(SUPPORT_EMAIL)}" style="color:var(--gold)">${esc(SUPPORT_EMAIL)}</a> and we'll respond within 7 days.`,
   ]));
 });
@@ -1176,7 +1177,7 @@ app.get("/terms", (req, res) => {
   res.type("html").send(_renderTextPage("Terms", "Terms of use", `Plain-English <em>terms.</em>`, [
     `VenturaClaw is provided as-is. The agent routes commands to vendor APIs that you've connected. You are responsible for the actions you authorize — including refunds, posts, DNS changes, and anything else with real-world consequences.`,
     `<strong>Sensitive actions are gated.</strong> Writes (refunds, posts, DNS edits, deletions) land in an approval queue with the parsed intent shown in plain English. Nothing actually happens until you approve. We strongly recommend reading what you're approving before clicking.`,
-    `<strong>No fee-splitting, no commissions.</strong> We do not take a cut of any transactions you run through connected vendors. Your relationship with Stripe, Shopify, etc. is direct.`,
+    `<strong>No fee-splitting, no commissions.</strong> We do not take a cut of any transactions you run through connected vendors. Your relationship with Stripe, Shopify, etc. is direct. The only money that flows to us is the flat orchestration fee on a paid /services tier; partner fees (registrar, government, USPTO, IRS, broker premiums) are paid directly to the partner and never marked up.`,
     `<strong>Acceptable use.</strong> Don't use this to spam, harass, defraud, or violate the terms of any connected vendor. We reserve the right to revoke access for misuse.`,
     `<strong>Liability.</strong> To the maximum extent permitted by law, VenturaClaw is not liable for damages resulting from agent-routed actions, vendor outages, or LLM misclassification. Always review approval-queue items before approving.`,
     `By signing in, you accept these terms.`,
← 12f8e98 /connectors lede: cross-link to /services hub ('Looking for · back to Ventura Claw · +/api/public/services — 18-row JSON catalog (mirrors /api/pu 23e9887 →