Privacy Policy Generator

Act as a privacy compliance specialist. Write a privacy policy that matches my actual data practices.

Business: [NAME] — [WHAT WE DO] · website [URL] · located in [COUNTRY/STATE] · users located [WHERE]
Data audit: analytics [TOOLS] · forms [WHAT DATA] · payments [PROCESSOR or none] · email marketing [TOOL or none] · cookies [TYPES or none] · third-party tools [LIST] · user accounts [YES/NO, what data] · data sharing [LIST or none]
Practices: retention [HOW LONG EACH DATA TYPE IS KEPT] · security [MEASURES ACTUALLY IN PLACE] · children [DO WE KNOWINGLY COLLECT FROM CHILDREN: YES/NO] · rights requests [HOW A USER ASKS TO SEE, CORRECT OR DELETE THEIR DATA] · privacy contact [NAME OR ROLE, EMAIL, ADDRESS]

First state which regulations apply (GDPR, CCPA/CPRA, others) given my location and user base, in one short paragraph.

Then the policy: what we collect · how · why · how we use it · who we share with · cookies · retention · user rights (GDPR and CCPA sections) · children · security · changes · contact. Plain English. End with an effective date and an AI-drafted disclaimer recommending legal review.

For retention, security, children, how users exercise their rights, and contact, write only what I supplied in the practices line. Where I supplied nothing, put "TO BE CONFIRMED" in that section with the question I need to answer, and write no standard wording in its place: a policy that describes a practice we do not follow misleads our users.

Success means the policy names only the tools and data types in my audit — nothing generic added, nothing I listed omitted.

Match the tone I specified above exactly; where I gave none, write plainly and warmly, the way a good operator talks to a customer — no corporate filler, no hedging phrases.

Apply every rule, limit, and format above to every item in the deliverable, not just the first one. Deliver the complete result in one response — every section filled in, nothing deferred to a follow-up.

If a required input is missing, ask for it once before starting; otherwise proceed and label any assumption you made.

Notes: R40 refresh; tuned to vendor prompting guidance