Free privacy policy & terms generator

1. Answer the questions about the data you collect, your business details, and your jurisdiction.
2. Generate the documents - a privacy policy and terms of service tailored to your answers.
3. Review and customize so the wording matches what you actually do with data.
4. Have it reviewed by an attorney for regulated industries or high-risk use.
5. Publish and link it in your footer and at every point you collect data.

A complete privacy policy covers a predictable set of disclosures. At minimum it should state:

• What you collect - names, emails, payment data, analytics, cookies, IP addresses.
• How and why you use it - to deliver the service, marketing, analytics, legal compliance.
• Who you share it with - processors like payment providers, analytics, and email tools.
• How long you keep it and how you secure it.
• User rights - access, deletion, correction, and opt-out, plus how to exercise them.
• Contact details and the policy's effective date.

The two most-cited privacy laws take different approaches. GDPR (EU/UK) is consent-first: you generally need a lawful basis to process personal data, must let users access and delete their data, and must obtain opt-in consent for non-essential cookies. CCPA/CPRA (California) is opt-out: you must disclose what you collect and sell/share, and give consumers a way to opt out (the "Do Not Sell or Share My Personal Information" control). If you serve users in either region, your policy needs the matching rights section - which this generator adds based on your selected jurisdiction. This is general information, not legal advice.

• Copying a competitor's policy. It describes their data practices, not yours - and may be inaccurate or out of date.
• Listing tools you don't use (or omitting ones you do). The policy must match reality.
• Burying or omitting the link. It should be in your footer and at signup/checkout.
• Never updating it. Revisit whenever you add a new tool, integration, or data use.