| name | bondery-legal |
| description | Bondery legal disclosure hygiene — subprocessor registry, policy-claims reconciliation, data-flow triggers, and escalation boundaries. Use when adding third-party vendors/SDKs, new data collection, analytics, AI tools, retention/deletion, or editing Privacy/Terms.
|
| metadata | {"version":"1.0.0","namespace":"bondery"} |
Bondery Legal
This skill reconciles product behavior with published legal claims. It does not certify regulatory compliance, draft final contractual language, or replace legal counsel. When in doubt, flag and escalate to a human owner.
When to use
- Adding a new third-party SDK, API client, or npm dependency that sends data off-platform
- Adding or changing a data-collecting feature (new PII field, tracking event, AI tool call, webhook)
- Touching account deletion, backup, retention, or log-anonymization code
- Touching analytics opt-out, cookie behavior, or
DO_NOT_TRACK
- Editing
apps/website/src/components/legal/Privacy.tsx or Terms.tsx
- Reviewing a PR that touches any of the above
Do not activate for routine UI refactors, API contract work, or technical security enforcement — use bondery-api, bondery-ux, or bondery-security instead.
Reconciliation workflow
- Classify the change — does it add/remove a vendor, add/remove a data category, or change retention/consent behavior? If none, skip this skill.
- Check the subprocessor registry — references/subprocessor-registry.md. New vendor not listed → blocking flag.
- Check the policy claims inventory — references/policy-claims-inventory.md. Does the change satisfy, contradict, or leave orphaned a claim in
Privacy.tsx / Terms.tsx?
- Classify the fix:
- Factual correction (wrong vendor name, feature now exists) → agent may propose copy diff, labeled reality-sync
- Substantive legal claim (retention window, rights language, liability, jurisdiction) → draft suggestion only; tag for human/counsel sign-off
- Update the registry in the same PR as the vendor/data-flow change.
- Complete the legal checklist before merge.
Full workflow with examples: references/data-flow-workflow.md.
Non-negotiables (ranked)
- Never assert regulatory compliance — no "GDPR/CCPA/SOC2 compliant" in code, commits, PR descriptions, or docs
- New off-platform vendor sending user or contact PII must be checked against the subprocessor registry before merge — undeclared vendor is a blocking flag
- Never edit substantive legal wording unsupervised — retention commitments, rights language, liability, jurisdiction, age minimums require human/counsel review; factual corrections (wrong vendor name) may be proposed as reality-sync only
- New data-collecting features must be checked against existing policy claims — do not ship silently when claims would be contradicted or left orphaned
- Self-host ≠ cloud — never imply the hosted Privacy Policy's subprocessors or retention commitments apply to a self-hosted deployment (references/self-host-vs-cloud.md)
- Retention/deletion claims must trace to code — flag numeric claims (30-day backup purge, 90-day IP logs) with no enforcing job as gaps, not assumed targets
- AI scope must not silently expand — disclosed use is "only when you message the AI Assistant"; new LLM paths sending contact PII require policy update
- Never guess vendor data practices — cite the vendor's own privacy policy or DPA URL
- Escalate ambiguity — surface the question to a human owner; do not adjudicate
Escalation rules: references/escalation-boundaries.md.
Legal document locations
| Document | Path | Status |
|---|
| Privacy Policy | apps/website/src/components/legal/Privacy.tsx | Published (last updated July 13, 2026) |
| Terms of Service | apps/website/src/components/legal/Terms.tsx | Draft placeholder — not final contractual terms |
| Layout helper | apps/website/src/components/legal/shared/LegalDocumentLayout.tsx | — |
| Routes | apps/website/src/app/(marketing)/(legal)/{privacy,terms}/page.tsx | — |
| App links | Webapp login, mobile settings/legal | External links to website URLs |
No docs/legal/ folder. Legal copy is English-only React components on the website.
Decision tree
Full index: references/README.md.
Cross-skill owners: technical enforcement → bondery-security; API contracts → bondery-api; UI/copy display → bondery-ux.
Legal checklist (before merge)
