Placeholder: add GDPR-compliant privacy details, lawful basis, retention, and how uploads are handled.