legal

<progress_context>
**Use Read tool:** `docs/progress.md` (first 50 lines)

Check for recent feature work that might affect data collection scope.
</progress_context>

# Legal Pages Workflow

Generate comprehensive legal pages (Privacy Policy, Terms of Service, Cookie Policy) through a guided, interactive process. Combines automatic project detection with user questions to create tailored documents.

**These are starting points that MUST be reviewed by a qualified lawyer before publishing.**

---

## Process Overview

```
Step 1: Disclaimer & Scope     → Set expectations
Step 2: Project Detection      → Scan codebase for data collection
Step 3: Guided Questions       → Interactive Q&A to fill gaps (5 rounds)
Step 4: Generate Documents     → Create tailored legal pages
Step 5: Implementation         → Add to project with proper routing
Step 6: Next Steps            → Cookie consent, lawyer review, etc.
```

---

## Step 1: Disclaimer & Scope

**Always start with this disclaimer:**

> ⚠️ **Important: These are template documents, not legal advice.**
>
> I'll generate comprehensive legal pages based on your project and answers, but:
> - I am not a lawyer and this is not legal advice
> - These templates should be reviewed by a qualified attorney
> - Laws vary by jurisdiction and change frequently
> - Regulated industries (healthcare, finance, children) have special requirements
>
> These documents will give you a solid starting point that covers common requirements under GDPR, CCPA, and general best practices.

**Ask: "Do you want to proceed with generating legal pages for this project?"**

---

## Step 2: Project Detection

Perform comprehensive codebase scan for data collection signals.

### Detection Checklist

```
Search for and report on:

AUTHENTICATION
├── next-auth / NextAuth.js    → OAuth providers, session strategy
├── clerk                       → User profiles, organizations
├── supabase auth              → Email, OAuth, phone auth
├── firebase auth