{{define "pricing"}}
<div class="hero container">
    <p class="label mb-3">Simple pricing</p>
    <h1 class="mb-4">No tiers. No per-seat. No surprises.</h1>
    <p class="lead">Two options — both get every feature.</p>
</div>

<hr class="divider">

<div class="section container">
    <div class="grid-2 price-grid">

        <div class="price-card">
            <p class="label mb-4">Self-hosted</p>
            <div class="price-amount mb-2">Free</div>
            <p class="mb-6">Forever. Elastic License 2.0. No strings.</p>
            <a href="/install" class="btn btn-ghost btn-block mb-8">Self-host guide &rarr;</a>
            <p class="label mb-4">What you get</p>
            <ul class="checklist"><li>Three-tier encryption (Vault, Credential, Identity)</li><li>WebAuthn PRF (Identity encryption via authenticator)</li><li>CLI for AI agents (encrypted delivery)</li><li>Scoped agent tokens (multi-agent)</li><li>TOTP generation via CLI</li><li>Browser extension (Chrome, Firefox)</li><li>Import from Bitwarden / 1Password</li><li>LLM-powered field classification</li><li>Unlimited entries</li><li>Full source code (ELv2)</li></ul>
        </div>

        <div class="price-card featured">
            <span class="badge recommended price-badge">Recommended</span>
            <p class="label accent mb-4">Hosted</p>
            <div class="price-amount mb-2">$12<span class="price-period">/year</span></div>
            <p class="mb-6">7-day free trial. Cancel anytime.</p>
            <a href="/signup" class="btn btn-primary btn-block mb-8">Get started</a>
            <p class="label accent mb-4">Everything in self-hosted, plus</p>
            <ul class="checklist"><li>Managed infrastructure</li><li>Daily encrypted backups</li><li>{{len .Pops}} regions across every continent</li><li>Automatic updates &amp; patches</li><li>TLS included</li><li>Email support</li></ul>
        </div>

    </div>
</div>

<hr class="divider">

<div class="section container prose-width">
    <p class="label mb-6 text-center">Common questions</p>
    <h2 class="mb-8 text-center">FAQ</h2>

    <div class="prose">
        <h3>Why so cheap?</h3>
        <p>AI agents are everywhere — and so are the security risks. We set a price that's within reach for everyone, whether you're in the US, Nigeria, or the Philippines. $12/yr for Personal, $24/yr for Family (up to 6 people), $49/yr for Pro power users.</p>

        <h3>Will my price go up?</h3>
        <p><strong>Never.</strong> Your price is locked for life. Pay $12/yr today, pay $12/yr in 2035. We may raise prices for <em>new</em> customers — but your rate never changes. Competitors raise prices on existing customers regularly — 1Password, Bitwarden, others have hiked rates 20–50%. We don't. Your price in your currency, forever, as long as you stay subscribed. Cancel and come back later? You'll pay whatever the then-current rate is. Stay with us? You're protected. Your price is locked in your currency — no exchange rate adjustments, ever.</p>

        <h3>Does self-hosted get every feature?</h3>
        <p>Yes. Every feature ships in both versions. Hosted adds managed infrastructure and backups — not functionality.</p>

        <h3>Are my Identity fields safe on the hosted server?</h3>
        <p>Yes. Identity fields are encrypted client-side with WebAuthn PRF. The server stores ciphertext it cannot decrypt. This isn't a policy — it's mathematics. We don't have the key.</p>

        <h3>Can I switch between hosted and self-hosted?</h3>
        <p>Yes. Export your vault at any time as encrypted JSON. Import it anywhere. Your data is always portable.</p>

        <h3>Can I get a refund?</h3>
        <p>Yes — three ways. <strong>Free trial:</strong> 7-day trial on all paid plans; cancel anytime during trial at no charge. <strong>Regret period:</strong> Annual subscriptions auto-renew by default. If you didn't intend to renew, you have 14 days after the renewal to cancel for full refund — no questions. <strong>First purchase:</strong> 7-day money-back on your very first purchase. Monthly plans do not carry the 14-day regret period (just cancel before next charge).</p>

        <h3>Why is auto-renewal the default?</h3>
        <p>Because a deleted vault is permanent. We'd rather refund an accidental renewal than delete your passwords because a card expired. The 14-day regret period gives you a safety net if you forget to cancel. You can disable auto-renewal anytime — your vault stays active until your billing period ends.</p>

        <h3>What if my payment fails?</h3>
        <p>You have 14 days. Our processor (Paddle) retries automatically. We'll email you immediately. Update your card in those 14 days and nothing changes. After 14 days, we send the 7-day deletion warning. Day 22: vaults permanently deleted.</p>

        <h3>What about larger teams?</h3>
        <p>Teams of 10–25 are annual-only ($249–$498/yr). Teams of 100+ can choose monthly ($149–$499/mo) or annual. All plans include a 7-day free trial.</p>
    </div>
</div>
{{end}}