docs: Privacy Policy and Terms & Conditions pages (#1434)

* Added docs privacy policy and terms & conditions pages

* Update terms-and-conditions.mdx

---------

Co-authored-by: Yousef <[email protected]>

Author: matthewlipski

docs/components/Footer.tsx

@@ -76,7 +76,7 @@ export function FooterContent() {
             {/* <SubmitForm /> */}
           </div>
           <div className="grid grid-cols-1 gap-8 xl:col-span-2">
-            <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-4 md:gap-8">
+            <div className="grid grid-cols-2 sm:grid-cols-3 md:grid-cols-5 md:gap-8">
               <div className="mt-12 xl:!mt-0">
                 <FooterHeader>Learn</FooterHeader>
                 <ul className="ml-0 mt-4 list-none space-y-1.5">
@@ -107,6 +107,17 @@ export function FooterContent() {
                   ))}
                 </ul>
               </div>
+              <div className="mt-12 xl:!mt-0">
+                <FooterHeader>Legal</FooterHeader>
+                <ul className="ml-0 mt-4 list-none space-y-1.5">
+                  <li key={"terms-and-conditions"}>
+                    <FooterLink href={"/legal/terms-and-conditions"}>Terms & Conditions</FooterLink>
+                  </li>
+                  <li key={"privacy-policy"}>
+                    <FooterLink href={"/legal/privacy-policy"}>Privacy Policy</FooterLink>
+                  </li>
+                </ul>
+              </div>
               <div className="mt-12 xl:!mt-0">
                 <FooterHeader>Theme</FooterHeader>
                 <ul className="ml-0 mt-4 list-none space-y-1.5">

docs/pages/_meta.json

@@ -28,5 +28,13 @@
       "toc": true
     }
   },
-  "about": "About"
+  "about": "About",
+  "legal": {
+    "title": "Legal",
+    "display": "hidden",
+    "theme": {
+      "sidebar": false,
+      "toc": false
+    }
+  }
 }

docs/pages/legal/privacy-policy.mdx

@@ -0,0 +1,127 @@
+# Privacy Policy BlockNote
+
+This Privacy Policy was last updated on: 12 February 2025
+
+We are BlockNote (OpenBlocks B.V.). We take your privacy seriously. Sometimes, we need your Personal Data. We consider **Personal Data** to be any information relating to an identified or identifiable person, in conformity with the General Data Protection Regulation (the **GDPR**).
+
+This policy explains which Personal Data we use and why (the **Privacy Policy**). Furthermore, you will read how we process, store and protect your Personal Data. Finally, we outline what rights you have when we process your Personal Data.
+
+This Privacy Policy applies to our Website [https://www.blocknotejs.org](https://www.blocknotejs.org) (the **Website**), our online application (the **App**) and the services or products we provide (the **Services**). We process your Personal Data in accordance with the GDPR and all other relevant legislation and regulations in the field of protection of Personal Data, like Dutch Telecommunications Act (_Telecommunicatiewet_) regarding the use of cookies (the **Relevant Legislation**).
+
+## Are you under the age of 16?
+
+If you are younger than 16 years old, you need permission from your parents or legal guardian to use our Website, App and Services.
+
+## Processing of Personal Data
+
+In order to provide you with our Website, App and Services, we process your Personal Data.
+
+## How do we receive your Personal Data?
+
+**Personal data we receive from you:**
+
+We receive Personal Data directly from you when you log in via our website or interact with our applications.
+
+## Who is the controller of your Personal Data?
+
+We are the controller of your Personal Data within the meaning of the Relevant Legislation. At the end of this Policy, you can find our contact details .
+
+## What Personal Data do we process, for which specified purpose(s), and on which legal basis?
+
+We need some of your Personal Data in order for you to use our Website, Apps and Services.
+
+We are allowed to process your Personal Data, because we comply with the Relevant Legislation. We lawfully process your Personal Data because we:
+
+1. Have legal bases for processing your Personal Data;
+2. Inform you about the processing; and
+3. Only process data for specific purposes, and no more than is necessary for that.
+
+In the table below you will read (1) which Personal Data we process (2) for which purpose(s) and (3) on which legal basis.
+
+We shall only use your Personal Data for the following purposes or for compatible purposes. By doing so, we will not use your Personal Data in an unexpected manner.
+
+| **(Personal) Data**                                                                                                 | **Purpose(s)**                                                                    | **Legal Basis**                                                                    |
+|---------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------|------------------------------------------------------------------------------------|
+| _Contact Data:_<br/>- Email address                                                                                 | _We use these Data:_<br/>- For the delivery or performance of our Services to you | _We process these Data on the basis of:_<br/>- Consent                             |
+| _Payment Data:_<br/>- Payment Data of the paying party                                                              | _We use these Data:_<br/>- To send invoices                                       | _We process these Data on the basis of:_<br/>- A necessity to perform the contract |
+| _Content Data related to the Services:_<br/>- Correspondence or chat messages  \- Your questions about our Services | _We use these Data:_<br/>- To provide you with an optimal service                 | _We process these Data on the basis of:_<br/>- A necessity to perform the contract |
+
+## Are you obliged to share your Personal Data with us?
+
+In some cases, the processing of your Personal Data is necessary. This is relevant, for example, when we have to process your Personal Data in order to oblige to a contract with you or to provide a service to you. Without your Personal Data, we cannot provide our Service to you.
+
+## How do we secure your Personal Data?
+
+We make every effort to protect your Personal Data from loss, destruction, use, alteration or dissemination of your Personal Data by unauthorized persons. We ensure that those who have nothing to do with your Personal Data cannot access it. We do this through the following measures:
+
+1. Secure network connections with Transport Layer Security (TLS), Secure Socket Layer (SSL), or a comparable technology
+2. The access to the Personal Data is strictly limited to the employees on a ‘need to know’ basis
+
+We constantly check our security measures for effectiveness, and if necessary adjust our process. That way, your Personal Data is always protected and accessible in the event of a failure.
+
+## How long do we store your Personal Data?
+
+We shall not store your Personal Data longer than the period in which we need them for the aforementioned purposes. We delete the Personal Data after we no longer need them for the purpose we process them for. The following is a list of the categories of Personal Data and the (functionally defined) retention periods:
+
+| **Category of Personal Data**              | **Retention period**                                                                                                   |
+|--------------------------------------------|------------------------------------------------------------------------------------------------------------------------|
+| Contact Data                               | We retain your contact information for as long as necessary to provide our Services.                                   |
+| Payment Data                               | We retain your payment data for as long as necessary to meet our financial and tax requirements and obligations.       |
+| Partner and/or supplier Data               | We retain partner or supplier data for as long as it is needed to provide our Services.                                |
+| Data for marketing and promotional reasons | We retain data for marketing and promotional purposes for as long as you wish to use these Services.                   |
+| Content data related to our Services       | We retain content data for as long as necessary to provide you with our Services in an integral and continuous manner. |
+
+## With whom do we share your Personal Data?
+
+**Processors**
+
+We may share your Personal Data with data ‘processors’ within the meaning of the Relevant Legislation. We conclude a data processing agreement with these parties, which entails that they shall process your Personal Data carefully and that they shall only receive the Personal Data they need to provide their service. These parties shall only use your Personal Data in accordance with our instructions and not for their own purposes.
+
+If we have a legal obligation to share your Personal Data, we will do so. This is the case, for example, if a public authority legally requires us to share your Personal Data.
+
+**Third parties**
+
+Sometimes we share your Personal Data with other parties, who are not processors. With these parties, we agree that they shall use your Personal Data carefully. They shall only process your Personal Data for purposes compatible or in line with the purpose for which we received the Personal Data from you. For example, embed use third party integrations like Vercel for (anonymized) analytical purposes. Our example text editors can integrate with third party services such as TipTap, Y-Sweet, LiveBlocks and Partykit (CloudFlare).
+
+If you have any questions on the processing of your Personal Data of third party services, it is better to contact these services directly or consult their privacy policy.
+
+If we have a legal obligation to share your Personal Data, we will do so. This is the case, for example, if a public authority legally requires us to share your Personal Data.
+
+## Cookies
+
+A cookie is a small text file that can be sent via the server of a website to the browser. The browser saves this file to your computer. Your computer is tagged with a unique number, which enables our site to recognize that computer in the future.
+
+We use cookies to improve the user experience on our Website. Moreover, cookies ensure that the Website works faster, that you can visit our Website safely and that we can track and solve errors on our Website.
+
+You can always delete or disable cookies yourself via the browser settings. No more cookies will be stored when you visit our Website. However, please note that without cookies, our Website may not function as well as it should.
+
+## Other provisions
+
+We also process your Personal Data outside the European Economic Area (EEA). We only do so if a country provides an adequate level of protection for your Personal Data.
+
+**Websites of third parties**
+
+Our website and our App may contain links to other websites. We are not responsible for the content or the privacy protection on these websites. Therefore, we advise you to always read the privacy policy of those websites.
+
+## Your rights
+
+You have the following rights:
+
+1. **The right of access:** You can request access to your Personal Data;
+2. **The right to rectification:** You can request us to correct, limit or delete your Personal Data. In the event of fraud, non-payment or other wrongful acts, we can store some of your Personal Data in a register or on a blacklist;
+3. **The right to data portability:** You can request a copy of your Personal Data. We can provide this copy to third parties at your request, so you do not have to do so yourself;
+4. **The right to object:** You can object to the processing of your Personal Data;
+5. **The right to file a complaint:** You can file a complaint at the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you are of the opinion that we wrongfully process your data;
+6. **The right to withdraw consent:** You can always withdraw your permission to process your Personal Data. From the moment of your withdrawal, we cannot process your Personal Data anymore.
+
+## Modifications to the Privacy Policy
+
+We may modify this Privacy Policy. If we substantially modify the Privacy Policy, we shall place a notification on our Website and in our App together with the new Privacy Policy. We shall notify registered users in case of a substantial modification. If you are not a registered user, we advise you to consult the Website and this Policy regularly.
+
+## Contact
+
+In the event that you wish to exercise these rights, or in the event of other questions or remarks regarding our Privacy Policy, you can contact us via the following contact details.
+
+BlockNote (OpenBlocks B.V.)
+
+[[email protected]]([email protected])