<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <url>
    <loc>https://www.syncup.in/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>

  <url>
    <loc>https://www.syncup.in/privacy-policy</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>

  <url>
    <loc>https://www.syncup.in/terms-and-conditions</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>

  <!--
    These are the only static, publicly indexable pages that currently exist
    in the app (verified against apps/syncup-web/src/app). Everything else
    behind /dashboard, /settings, /messages, etc. requires login and is kept
    out of both this sitemap and robots.txt on purpose.

    There IS real public, indexable content beyond these three pages — job
    listings (/findjobs/<jobId>), post permalinks (/post/<postId>), and
    public profiles (/user/<id>, /user/cv/<id>) are all served without an
    auth wall. They can't be hand-listed here since the set changes per job
    posting/profile/post. The correct fix is a dynamic sitemap route (e.g.
    Next.js app/sitemap.ts pulling live IDs from the DB, or a sitemap index
    pointing at generated sub-sitemaps) rather than static entries — worth
    adding as a follow-up.
  -->

</urlset>
