Update privacy.md

web/privacy.md

@@ -4,20 +4,34 @@ title: Privacy Policy
 permalink: /privacy/
 ---
 
+### Privacy Policy
+
 ## Introduction
 
-This Privacy Policy outlines how the Buspilot Add-on collects, uses, and protects any information that you give when using this add-on.
+This Privacy Policy outlines how the Buspilot Add-on collects, uses, shares, retains, and protects any information that you provide when using this add-on.
 
 ## Data Collection and Use
 
-The Buspilot Add-on does not collect personal information about you unless explicitly provided by you for the purpose of updating and managing GTFS documents and app content. The types of personal information collected may include:
+The Buspilot Add-on collects personal information only when explicitly provided by you for the purpose of updating and managing GTFS documents, app content, and user access control. The types of personal information collected may include:
+
+- Contact details such as email addresses, primarily for GitHub, Firebase account management, and whitelisting users for access control.
+- Data related to bus routes, app content, and access rights (via the whitelist), which are inputted directly by users.
+
+This data is used exclusively to publish and synchronize bus schedules to GitHub, Firebase, and manage user access control as directed by user actions.
+
+## Data Sharing, Transfer, or Disclosure
+
+We do not share, transfer, or disclose your personal information to third parties unless required by law or with your explicit consent. Data is shared only within the systems you connect to (e.g., GitHub, Firebase) for the purpose of publishing or synchronizing bus schedules, managing app-related data, and controlling user access, as initiated by user actions.
+
+## Data Retention and Deletion
 
-* Contact details such as email addresses for the purpose of GitHub and Firebase account management.
-* Data related to bus routes and app content, as directly inputted by users.
+We retain your data for as long as it is necessary to fulfill the purposes for which it was collected or as long as updates are being published or synchronized. Data will remain on GitHub or Firebase until updated, deleted, or replaced by the user.
 
-## Data Sharing and Publication
+You can delete your data by:
+- Publishing an updated spreadsheet with the desired changes.
+- Publishing an empty spreadsheet to delete all related data, including whitelisted users, from GitHub and Firebase.
 
-Collected data is used exclusively for the purpose of updating and publishing to GitHub and Firebase, as directed by user actions. Data is not retrieved or published without explicit user interaction.
+For any specific data deletion requests, please contact support at [[email protected]](mailto:[email protected]).
 
 ## Security