[DRAFT] Privacy policy

This placeholder privacy policy must be replaced before launch. It should cover what we collect, cookies (strictly necessary only), the AI assistant provider and retention periods.