diff --git a/src/pages/privacy-policy.astro b/src/pages/privacy-policy.astro
index b855810..70d3957 100644
--- a/src/pages/privacy-policy.astro
+++ b/src/pages/privacy-policy.astro
@@ -6,13 +6,13 @@ import BaseLayout from '../layouts/BaseLayout.astro';
 
   <section class="max-w-3xl mx-auto px-6 pt-32 pb-24">
     <h1 class="text-4xl md:text-5xl font-bold mb-4">Privacy Policy</h1>
-    <p class="text-text-muted text-sm mb-16">Effective: April 24, 2026 · Last updated: April 24, 2026</p>
+    <p class="text-text-muted text-sm mb-16">Effective: April 24, 2026 · Last updated: August 10, 2026</p>
 
     <div class="space-y-12 text-text-secondary leading-relaxed text-[15px]">
 
       <div>
         <h2 class="text-xl font-semibold text-text-primary mb-4">1. Introduction</h2>
-        <p>Tangle Technologies, Inc. ("Tangle," "we," "us," or "our") respects the privacy of our users ("you" or "your"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our websites (tangle.tools, app.tangle.tools, ai.tangle.tools, cloud.tangle.tools), APIs, and related services (collectively, the "Services").</p>
+        <p>Tangle Technologies, Inc. ("Tangle," "we," "us," or "our") respects the privacy of our users ("you" or "your"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use tangle.tools, id.tangle.tools, our product subdomains, APIs, and related services (collectively, the "Services").</p>
       </div>
 
       <div>
@@ -22,6 +22,7 @@ import BaseLayout from '../layouts/BaseLayout.astro';
           <li><strong>Account information.</strong> Email address, name, and authentication credentials when you create an account.</li>
           <li><strong>Payment information.</strong> Payment details processed by our third-party payment processor (Stripe). We do not store full payment card numbers.</li>
           <li><strong>Communications.</strong> Messages you send to us via support channels.</li>
+          <li><strong>Connected-service information.</strong> Authorization credentials, account metadata, and provider data needed to perform an integration action you request.</li>
         </ul>
         <h3 class="text-base font-semibold text-text-primary mt-4 mb-2">Information collected automatically</h3>
         <ul class="list-disc pl-6 space-y-1">
@@ -34,6 +35,7 @@ import BaseLayout from '../layouts/BaseLayout.astro';
           <li>We do not collect biometric data.</li>
           <li>We do not sell personal information.</li>
           <li>We do not use tracking cookies for advertising purposes.</li>
+          <li>We do not use connected-service data for advertising, sensitive-trait profiling, or AI model training.</li>
         </ul>
       </div>
 
@@ -49,42 +51,50 @@ import BaseLayout from '../layouts/BaseLayout.astro';
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">4. Data Retention</h2>
-        <p>We retain personal information only as long as necessary to provide Services and fulfill legal obligations. Account data is deleted within 30 days of an account-deletion request. Logs are retained per our Logging and Monitoring Policy.</p>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">4. Connected Services</h2>
+        <p>When you connect a third-party account, you choose the provider and review the requested permissions on that provider's consent screen. Tangle stores OAuth tokens or API keys in encrypted form. We use them only to perform integration actions requested by you or an app you authorized.</p>
+        <p class="mt-2">The Integration Hub records the connection, action, outcome, and a one-way hash of the request for security and audit. Hub audit records do not store provider response bodies. If you save or route an integration result into another Tangle feature, that feature's normal retention applies.</p>
+        <p class="mt-2">Disconnecting an account revokes Tangle's use of that connection and any Tangle access delegated through it. The third-party provider's own terms and privacy policy also apply.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">5. Data Sharing</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">5. Data Retention</h2>
+        <p>We retain personal information only as long as necessary to provide Services and fulfill legal obligations. Account data is deleted within 30 days of an account-deletion request. Logs are retained per our Logging and Monitoring Policy. Connected-service credentials and metadata are retained only as needed to operate and secure the connection or preserve required audit records.</p>
+      </div>
+
+      <div>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">6. Data Sharing</h2>
         <p>We do not sell your data. We share data only with:</p>
         <ul class="list-disc pl-6 space-y-1 mt-2">
           <li><strong>Service providers.</strong> Cloud infrastructure (Hetzner), edge security (Cloudflare), payment processing (Stripe), and email (Google Workspace), only as necessary to operate Services.</li>
+          <li><strong>Services you connect.</strong> We exchange data with a provider only to carry out an integration action you requested or authorized.</li>
           <li><strong>Legal requirements.</strong> When required by law, subpoena, or court order.</li>
         </ul>
         <p class="mt-2">See the current <a href="/sub-processors/" class="underline">Sub-processor List</a> for provider details.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">6. Security</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">7. Security</h2>
         <p>We protect your data using encryption in transit (TLS 1.2+), encryption at rest, access controls, and monitoring. See our <a href="/security/" class="underline">Security Information Page</a> for details.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">7. Your Rights</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">8. Your Rights</h2>
         <p>Depending on your jurisdiction, you may have the right to access your personal data, correct inaccurate data, delete your data, export your data, or object to processing. To exercise these rights, contact <a href="mailto:hello@tangle.tools" class="underline">hello@tangle.tools</a>.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">8. Children's Privacy</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">9. Children's Privacy</h2>
         <p>Our Services are not directed to children under 13. We do not knowingly collect data from children.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">9. Changes to This Policy</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">10. Changes to This Policy</h2>
         <p>We may update this policy and will notify users of material changes via email or in-app notice.</p>
       </div>
 
       <div>
-        <h2 class="text-xl font-semibold text-text-primary mb-4">10. Contact</h2>
+        <h2 class="text-xl font-semibold text-text-primary mb-4">11. Contact</h2>
         <p>Tangle Technologies, Inc.<br />Email: <a href="mailto:hello@tangle.tools" class="underline">hello@tangle.tools</a></p>
       </div>