Privacy Policy and Terms of Service, written for your actual product.
Policies that match how the product really works. Drafted quickly against your real data flows, then reviewed and signed off by a lawyer — not published straight out of a template describing somebody else’s company.
Caret drafts and reviews Privacy Policies, Terms of Service and related documents for startups and SMEs. We use AI for the drafting and a lawyer for the review and sign-off, working from a short discovery call about what your product actually collects. Usually a few working days.
What the Privacy Policy and Terms work covers
A short discovery on what you actually collect
What data, from whom, where it goes, which processors touch it, how long you keep it. Most policy problems start with a description that was never accurate in the first place.
Drafted fast, reviewed properly
We use AI for the drafting work it is genuinely good at, then a lawyer checks it against your setup and signs it off. The speed belongs to the tool; the responsibility stays with us.
Terms that fit your commercial model
Subscription, marketplace, usage-based or free tier — the terms follow how you actually charge and what you actually promise, including what happens when you change either.
A note on what will make these wrong
Which changes to your product or stack would put the policy out of date, so you know when to come back rather than finding out from a complaint.
How we draft your Privacy Policy and Terms
A short call about your data flows
Half an hour, usually with whoever knows the system rather than whoever owns the problem.
We draft, then a lawyer reviews
Draft against what you told us, checked against what the law requires where you operate.
You publish; we flag when to revisit
With a plain note on the changes that would mean these need another look.
Privacy Policy and Terms of Service: common questions
What is the difference between a Privacy Policy and Terms of Service?
A Privacy Policy explains what personal data you collect, why you collect it, who you share it with and what rights people have over it — it is a legal requirement almost anywhere you process personal data. Terms of Service are the contract between you and your users: what you promise, what you explicitly do not, how you charge, and how either side ends the relationship. You generally need both, and they are not interchangeable.
Can we not just use a policy generator?
You can, and the output will describe a company that is not yours. A privacy policy that misdescribes your actual processing is worse than a short accurate one: it is a published, signed statement that you did not know what your own product does.
You use AI too — how is that different from a generator?
A generator hands you the output and the risk. We use AI for drafting, then a lawyer checks it against your real data flows and puts their name to it. The tooling overlaps; the difference is who is accountable when it is wrong.
Do we need a DPA as well?
If you process personal data on behalf of your customers, yes — a privacy policy addresses your users, a DPA addresses your customers. We will tell you which documents you actually need rather than selling you the full set by default.
How long does it take?
Usually a few working days from the discovery call, depending on how complicated the data flows turn out to be once someone asks about them properly.
What if we operate in several countries?
The policy is written to the strictest standard that applies to you rather than produced in several variants, which is almost always simpler to maintain and easier to defend. Where a specific market genuinely requires its own wording, we will say so.
Other things Caret does
We work with startups and SMEs on fixed-scope legal matters, with scope and fee agreed in writing before anything begins.
Due diligence simulator
We run legal DD on you exactly as a fund will at your round, and hand you the findings while there is still time to fix them.
Second opinion on AI drafts
Your model wrote it and it reads beautifully. Before it goes out, a lawyer checks which parts it got confidently wrong.
SAFE & convertible review
The instrument you’re about to sign, explained line by line: what converts, when, at what price, and what it does to your next round.
Trademark registration
One EU application covers all 27 member states. We pre-check, choose the classes and file — and refund our fee if the check says you would be refused.