Clarify privacy processors and data removal requests

Name Formspree as the processor receiving order form details. Replace
the access, correction, and deletion offer with instructions to request
data removal at support@oxpull.com. Set the last updated date to
2026-09-26.

Author: PhiLily

privacy.html

@@ -210,7 +210,7 @@
     <div class="container">
       <article class="legal">
       <h1>Privacy</h1>
-      <p>Last updated 2026-08-20.</p>
+      <p>Last updated 2026-09-26.</p>
       <p>This page says exactly what we hold about you and your company. It is short because the list is short.</p>
       <h2>What the software sends us: nothing</h2>
       <p>Oxpull Pro makes no network call to us. Not at import, not at startup, not on a schedule. There is no licence check, no telemetry and no phone-home. Your task payloads, arguments, results, database contents and queue traffic never leave your infrastructure, and we could not read them if we wanted to.</p>
@@ -242,13 +242,13 @@ <h2>How long we keep it</h2>
       <p>The rest of the row, the time, the package file and the status, has nothing personal in it, and we keep it as operational history.</p>
       <p>The licence record itself, in the section above, we keep for as long as you are a customer and afterwards for our own accounting.</p>
       <h2>Who else touches your data</h2>
-      <ul><li><strong>The payment processor</strong>, for merchant-of-record purchases: checkout, payment, invoicing and tax. It holds your billing details under its own terms. For order-form purchases, we invoice directly.</li><li><strong>The company hosting the private index</strong>, which runs the server the index and its log sit on.</li><li><strong>GitHub Pages</strong>, which serves the public website and sees ordinary web request logs that we never see.</li><li><strong>The form provider behind the waitlist form on the website</strong>, which receives the email address you type into it.</li></ul>
+      <ul><li><strong>The payment processor</strong>, for merchant-of-record purchases: checkout, payment, invoicing and tax. It holds your billing details under its own terms. For order-form purchases, we invoice directly.</li><li><strong>The company hosting the private index</strong>, which runs the server the index and its log sit on.</li><li><strong>GitHub Pages</strong>, which serves the public website and sees ordinary web request logs that we never see.</li><li><strong>The form provider (Formspree)</strong>, which receives the details you enter in the order form.</li></ul>
       <h2>The waitlist</h2>
       <p>If you gave us an email address on the website, it is used for one thing: telling you when something ships. Reply with &quot;remove&quot;, or write to support@oxpull.com, and it is deleted.</p>
       <h2>Cookies</h2>
       <p>The website sets none. The package index sets none. There is no analytics script, no tracker and no tag on either.</p>
       <h2>Your data, and asking us about it</h2>
-      <p>Write to support@oxpull.com and we will tell you what we hold about your company, correct it, or delete it.</p>
+      <p>If you want your data removed, write to support@oxpull.com and we will process the request.</p>
       <h2>Changes</h2>
       <p>If this page changes, the date at the top changes with it.</p>
       </article>