Privacy policy first draft

Write what you actually do,
one item at a time.

Turn your real data practices into a first-draft privacy policy: what you collect, why, how long you keep it, who receives it, and how a user exercises their rights. Retention periods and third-party lists stay as placeholders, and no compliance judgement is made.

Facts onlyPurposes unweakenedBlanks not guesses
01

Describe your data practices

0 / 12,000 charactersMinimum 80

Content is used only for this AI request and is not intentionally stored by this site.

02

Review the draft

Your result will appear here

We list collection items, purposes, retention, recipients, and user rights, leaving anything only you can confirm as a placeholder.

SAMPLE OUTPUT

Here is exactly what you receive.

This is the complete output for the source text in the demo above: a completeness score, itemised drafting notes, information for you to confirm, and the privacy policy draft. It is a demonstration, not a customer case.

SAMPLE

Draft result (sample)

Completeness score88/100
+50
01

Replace reassurance with a list of collection items

The source was entirely importance-of-privacy and strict measures, with nothing checkable. It becomes five sections: what, why, how long, who, and your rights.

02

Keep the purpose as stated

“Optimise the product experience” is ambiguous and may include advertising targeting. The rewrite preserves the original wording and flags it rather than choosing a lighter phrase.

03

Leave periods and recipients as placeholders

Retention periods and partner names are absent from the source, so they become TODO slots listed for confirmation — yours to complete and stand behind.

Privacy policy draft
# Privacy policy (first draft)

## What we collect
- Account data: email address, used to sign you in and reset your password.
- Submitted content: text you paste into the workspace, processed for the single request and not intentionally stored.
- TODO: confirm whether device information, IP address, or cookies are collected.

## Why
- To operate and maintain the service, bill usage, and prevent abuse.
- TODO: the source mentions “optimise the product experience”; confirm whether this includes advertising targeting. If it does, state it plainly here.

## How long
- Account data: TODO retention period
- Submitted content: TODO retention period

## Sharing
- Payments are handled by Paddle, which acts as Merchant of Record.
- TODO: list every recipient (the source's “partners” need names and purposes).

## Your rights
- Access, correction, deletion, export: TODO route and response time

**Note**: this draft does not assess whether GDPR, CCPA/CPRA, or PIPL apply and makes no compliance claim. Have legal counsel review it before publishing.

WHAT THE DRAFT DOES

Not a template of reassurances. Your practices, laid out.

01

List the collection items first

Email, uploaded content, usage records — each stated with where it comes from and why it is needed. No list, no policy.

02

Keep each purpose at full strength

If the source says advertising, write advertising, not “improving the experience”. A weakened purpose reads as no purpose.

03

Leave retention and recipients blank

How long you keep data and who receives it are yours to confirm. They become named placeholders, never plausible values.

WHY IT IS WORTH DOING

If it is not written down, it was never disclosed.

01

Omissions matter more than wording

Miss one data category or one recipient and that item was never disclosed. Ten reassuring sentences do not repair it.

02

Purposes get softened most easily

“Advertising targeting” becomes “improving the experience” and the meaning changes. It is the most common distortion in privacy policies.

03

A compliance line makes teams skip review

Write “compliant with GDPR” and the team may conclude counsel is unnecessary. We never write it and never judge applicability.

Note: most jurisdictions require privacy notices to cover collection items, purposes, retention, and recipients, with specifics depending on user location and business type (GDPR, CCPA/CPRA, PIPL, and others). This site does not determine which apply to you and provides no legal advice. Have legal counsel or a qualified professional review the draft before publishing.

REWRITE DEMO

One description, two ways of writing it.

Before

We attach great importance to your privacy. To provide a better service, we may collect some of your personal information and share it with partners when necessary, in order to optimise the product experience. We take strict security measures to protect your data.

Rewritten
# Privacy policy (first draft)

## What we collect
- Account data: email address, used to sign you in and reset your password.
- Submitted content: text you paste into the workspace, processed for the single request and not intentionally stored.
- TODO: confirm whether device information, IP address, or cookies are collected.

## Why
- To operate and maintain the service, bill usage, and prevent abuse.
- TODO: the source mentions “optimise the product experience”; confirm whether this includes advertising targeting. If it does, state it plainly here.

## How long
- Account data: TODO retention period
- Submitted content: TODO retention period

## Sharing
- Payments are handled by Paddle, which acts as Merchant of Record.
- TODO: list every recipient (the source's “partners” need names and purposes).

## Your rights
- Access, correction, deletion, export: TODO route and response time

**Note**: this draft does not assess whether GDPR, CCPA/CPRA, or PIPL apply and makes no compliance claim. Have legal counsel review it before publishing.

Demo sample: reassurance becomes an itemised list, the purpose stays at full strength, and retention plus recipient names stay as placeholders. Paste your description to get your version (sign-in required; one credit per run).

WHY YOU CAN TRUST IT

We put “no compliance judgement” into our product principles.

We never write “compliant with X”

We do not assess which regimes apply and will not write “compliant with GDPR” or similar. Applicability is counsel's call.

Purposes are never weakened

If the source says advertising, the output says advertising. A softened purpose is an undisclosed purpose — the most dangerous failure here.

Retention and recipients stay blank

Retention periods and recipient lists are yours to confirm, so they stay placeholders rather than plausible values.

Content is not stored

Submitted text is used for this single AI request and is not intentionally persisted. See the Privacy Policy.

FAQ

Ask these before you pay.

Can I publish the output directly?

No. It is a first draft that legal counsel or a qualified professional must review. We make no claim that it satisfies any regulation.

Will you fill in retention periods and third-party lists?

No. Only you can confirm those, so they remain placeholders. An invented period is far more dangerous than a blank.

Will you soften how the data is used?

No. If the source says advertising, the output says advertising. Weakening a purpose is the same as not disclosing it, and we forbid it.

What does one draft cost?

One credit per run, usually done in seconds, returning the draft, drafting notes, and items to confirm.

Do credits expire?

No. Credits never expire — whatever you do not use carries over to the next cycle instead of resetting.

Is there batch processing or an API?

Not yet. Each run processes one document and consumes one credit; there is no bulk upload or API today. Email us with your use case and we will assess it.

Is my content stored?

Not intentionally. Text is used for this single AI request only. See the Privacy Policy.

Which businesses fit?

SaaS tools, mini-programs, content sites, e-commerce — any team that needs a privacy policy grounded in what it actually does. You supply the facts; we supply the structure.

SIMPLE PRICING

Prove the value before you upgrade.

Starter

$9/ month

For an occasional publishing cadence, with a focused monthly credit allocation.

  • 50 optimization credits per monthly renewal
  • Complete GEO analysis
  • Chinese and English output
  • Markdown export

Advanced

$79/ month

Our largest monthly credit allocation, for the heaviest continuous usage.

  • 1,000 optimization credits per monthly renewal
  • Complete GEO analysis
  • Chinese and English output
  • Markdown export
Loading localized prices

Credits never expire: unused credits carry over instead of resetting. Credits apply to this site only and are not shared with other sites.

Prices shown are USD baselines; final currency, taxes, and discounts are determined by Paddle for the checkout location.