Private preview. Groundwork is invite-only while we finish building — join the waitlist for an invite.
LegalFoundational

Privacy Policy

Think through what data you collect, how you use it, and who you share it with — and produce a privacy policy tailored to your product, not a generic paste job.

Created by the Groundwork teamGCreated by the Groundwork team

What you walk away with

A real document, built from everything you worked through — then critiqued the way a tough reviewer would and polished round by round. Plus a project summary that shows your work.

18 steps in the full journey.

Who this is for

Founders about to launch, or already live and aware that the policy they pasted in doesn't describe what their product does.

What you'll actually decide

What you actually collect, why, who you share it with, and how long you keep it — which is a product inventory before it is a legal document.

What first-time founders get wrong here

Copying a policy from a product with a different data model, so it promises things you don't do and omits things you do — analytics, an AI subprocessor, a support tool that stores messages. A policy that misdescribes your product is worse than none: it's a public statement you're already not complying with.

The first 10 questions

This is where the conversation starts. Each answer shapes what gets asked next.

  1. 01What is your product, and what does it do for users?
  2. 02Who are your users — consumers, businesses, or both?
  3. 03What countries or regions are your users primarily in?
  4. 04What stage is the product at — pre-launch, in beta, or live with real users?
  5. 05What personal data does your product collect — name, email, payment info, usage data, location, device info, anything else?
  6. 06What third-party services handle user data on your behalf — analytics, payments, email, support tools, cloud infrastructure?
  7. 07Do you share user data with any other parties — partners, advertisers, or data resellers?
  8. 08Can users access, correct, export, or delete their data? What's the current answer, even if it's 'email us'?
  9. 09What is the legal name of your company and the product name?
  10. 10What is the primary purpose for collecting user data — to provide the service, improve the product, send marketing, or a combination?

+ 6 more questions across discovery, validation, and the creative brief — each one adapting to what you've already said.

Related legal project types

Ready to work through it?

The first five questions of any project are free — no card required.

Join the waitlist →
Privacy Policy | Groundwork