Consolidate privacy and security docs into Legal

AGENTS.md

@@ -18,7 +18,7 @@ The navigation keeps Home first, then sorts the top-level sections and the pages
 - **Deployment models** - `/deployment-models`. Current availability and operating boundaries for Fluso Cloud, dedicated AWS VPC, planned Azure VNet, and scoped on-premises deployments.
 - **Features** - `/features/*`. Approvals and permissions, Apps and MCP servers, Chat, Confidential mode, Imports, Memory, Projects, Skills, and Tasks.
 - **Get started** - `/going-deeper`, `/introduction`, `/quickstart`. These pages explain the path from first setup to daily use.
-- **Reference** - `/resources/{faq, pricing, privacy, security}`. Security covers infrastructure; Privacy covers data handling; they're distinct pages.
+- **Reference** - `/resources/{faq, legal, pricing}`. Legal links to the terms of service at `https://fluso.ai/terms` and privacy policy at `https://fluso.ai/privacy`; do not duplicate the policies in the docs.
 - **Release notes** - `/release-notes`. Customer-facing changes, newest first.
 - **Remote access** - `/remote/*`. Ways to use Fluso away from the desktop app.
 - **Workflows** - `/workflows/*`. Six concrete stories: bug-to-PR, content launch, knowledge recall, meetings, morning brief, and research-to-deck.

components/mintlify.tsx

@@ -98,11 +98,13 @@ export function Card({
   title,
   icon,
   href,
+  newTab = false,
   children,
 }: {
   title: string;
   icon?: string;
   href?: string;
+  newTab?: boolean;
   children?: ReactNode;
 }) {
   const inner = (
@@ -127,7 +129,12 @@ export function Card({
 
   if (href) {
     return (
-      <Link href={href} className={cn(className, 'hover:bg-fd-accent/80')}>
+      <Link
+        href={href}
+        target={newTab ? '_blank' : undefined}
+        rel={newTab ? 'noopener noreferrer' : undefined}
+        className={cn(className, 'hover:bg-fd-accent/80')}
+      >
         {inner}
       </Link>
     );

content/docs/admin-panel.mdx

@@ -89,4 +89,4 @@ Use **Network egress** to review the origins available to egress-governed sandbo
 
 ## Next
 
-Read [Privacy](/resources/privacy) for the admin content boundary and [Security](/resources/security) for authentication, isolation, and governance logging.
+See [Legal](/resources/legal) for Fluso's privacy policy.

content/docs/deployment-models.mdx

@@ -18,7 +18,7 @@ Your deployment model decides who operates Fluso and where its runtime, durable
 
 Fluso Cloud is the standard managed service. It runs on AWS with European hosting by default. Fluso operates the application services, Agent runtimes, storage, and platform updates; you manage your workspace, users, connected Apps, and approval policies.
 
-Choose it when you want to start without operating infrastructure. See [Privacy](/resources/privacy) for data handling and [Security](/resources/security) for encryption and isolation.
+Choose it when you want to start without operating infrastructure. See [Legal](/resources/legal) for Fluso's privacy policy.
 
 ## Dedicated AWS VPC
 
@@ -45,7 +45,7 @@ Agree on these boundaries before treating the design as approved:
 | Connected Apps | Which external systems may be read or changed, and what returned data Fluso may persist |
 
 <Warning>
-  Running Fluso on-premises does not automatically keep model inference or connected-App data on-premises. External providers keep their own processing boundaries. Confirm every provider and route as part of the deployment design; [Privacy](/resources/privacy#sub-processors) lists the current sub-processors.
+  Running Fluso on-premises does not automatically keep model inference or connected-App data on-premises. External providers keep their own processing boundaries. Confirm every provider and route as part of the deployment design. See [Legal](/resources/legal) for Fluso's privacy policy.
 </Warning>
 
 ## Operational telemetry

content/docs/index.mdx

@@ -63,7 +63,7 @@ Pick a workflow that matches a problem you have right now. Each one is a story,
   <Card title="Pricing" icon="credit-card" href="/resources/pricing">
     Plans, limits, billing.
   </Card>
-  <Card title="Privacy" icon="shield-check" href="/resources/privacy">
-    What's collected, what isn't, your rights to delete.
+  <Card title="Legal" icon="scale" href="/resources/legal">
+    Read Fluso's terms of service and privacy policy.
   </Card>
 </CardGroup>

content/docs/introduction.mdx

@@ -62,7 +62,7 @@ You will see how Fluso reads context, where it finds evidence, and how much revi
 
 Your workspace runs inside a dedicated environment. Data is not used to train shared models, is hosted in Europe, and is grounded in Switzerland through Prem AI's infrastructure.
 
-Enterprise deployments can be scoped for a dedicated AWS VPC or an on-premises environment. Azure VNet support is coming soon. Compare the current [deployment models](/deployment-models), then see [Privacy](/resources/privacy) and [Security](/resources/security) for the data and infrastructure boundaries.
+Enterprise deployments can be scoped for a dedicated AWS VPC or an on-premises environment. Azure VNet support is coming soon. Compare the current [deployment models](/deployment-models), then see [Legal](/resources/legal) for Fluso's privacy policy.
 
 ## Next
 

content/docs/resources/faq.mdx

@@ -76,7 +76,7 @@ description: The questions that come up most often. What Fluso is, how it works,
     Deleting your account deletes your dedicated sandbox and all associated data, including your files, conversations, connected-account credentials, and other records held by Fluso. We do not retain your data after account deletion.
   </Accordion>
   <Accordion title="Can it see all my emails?">
-    It reads emails when you ask it to (e.g., *"summarise my inbox"*) and as part of auto-task extraction. It does not keep a separate mailbox copy; requested content is processed under the controls described in [Privacy](/resources/privacy).
+    It reads emails when you ask it to (e.g., *"summarise my inbox"*) and as part of auto-task extraction. It does not keep a separate mailbox copy. See [Legal](/resources/legal) for Fluso's privacy policy.
   </Accordion>
   <Accordion title="Does it send mail without my permission?">
     Gmail send tools follow your effective **Allow**, **Ask**, or **Deny** policy. Use **Ask** to review each draft before it sends; **Allow** or **Don't ask permission** can continue without a per-action prompt.
@@ -95,7 +95,7 @@ description: The questions that come up most often. What Fluso is, how it works,
   </Accordion>
 </AccordionGroup>
 
-The full picture is split across [Security](/resources/security) (infrastructure, encryption, account safety) and [Privacy](/resources/privacy) (what's collected, what isn't, your rights to delete).
+See [Legal](/resources/legal) for Fluso's privacy policy.
 
 ## Pricing
 

content/docs/resources/legal.mdx

@@ -0,0 +1,21 @@
+---
+title: Legal
+icon: scale
+description: Fluso's terms of service and privacy policy.
+---
+
+## Terms of service
+
+The Fluso terms of service govern your use of Fluso.
+
+<Card title="Read the terms of service" icon="file-text" href="https://fluso.ai/terms" newTab>
+  View the full terms of service.
+</Card>
+
+## Privacy policy
+
+The Fluso privacy policy explains how Fluso collects, uses, and protects your data.
+
+<Card title="Read the privacy policy" icon="shield-check" href="https://fluso.ai/privacy" newTab>
+  View the full privacy policy.
+</Card>

content/docs/resources/meta.json

@@ -1,3 +1,3 @@
 {
-  "pages": ["faq", "pricing", "privacy", "security"]
+  "pages": ["faq", "legal", "pricing"]
 }

content/docs/resources/pricing.mdx

@@ -113,7 +113,7 @@ Obligation detection scans your connected apps for things you have committed to:
     The model depends on the feature. Fluso uses open-weight models for some workloads and proprietary model APIs for others. Agent Studio currently uses Gemini through OpenRouter.
   </Accordion>
   <Accordion title="Where is my data stored?">
-    Fluso Cloud stores workspace data in the EU by default. Model inference and connected-App processing follow the provider boundaries in [Privacy](/resources/privacy#sub-processors). Enterprise customers can scope alternative data residency. Your data is never used to train shared models.
+    Fluso Cloud stores workspace data in the EU by default. Model inference and connected-App processing have their own provider boundaries. Enterprise customers can scope alternative data residency. Your data is never used to train shared models. See [Legal](/resources/legal) for Fluso's privacy policy.
   </Accordion>
   <Accordion title="Plus vs Pro: when is Pro worth it?">
     Plus is the daily-driver tier: all apps, the Skills Marketplace, artifact generation, obligation and task automation every 12 hours. Pro raises tokens 20×, runs that automation constantly, lifts the meeting-notes cap, and adds confidential computing. Move to Pro when the 12-hour cadence or the Plus token allowance starts being the bottleneck.