privacy-policy

Privacy Policy Generator

Skill Overview

An AI privacy policy generation tool designed specifically for digital products and services. It helps you quickly draft detailed privacy policies that comply with regulations such as the GDPR and CCPA, using plain, easy-to-understand language and highlighting key clauses that require legal review.

Use Cases

1. Compliance Preparation Before Product Launch

When you are about to launch a new website, mobile app, or SaaS product, use this skill to quickly generate a complete privacy policy framework. By entering your product name, types of data collected, and applicable jurisdictions, you can obtain a structured privacy policy document containing all necessary sections, ensuring that your product meets basic privacy compliance requirements before launch.

2. Updating Data Protection Documentation

When your product adds new features, changes the way it collects data, or expands into new markets, use this skill to update your existing privacy policy. The skill helps you identify new data types, applicable laws, and third-party data processing activities that need to be disclosed, ensuring that your privacy policy always reflects your actual data processing practices.

3. Cross-Regional Compliance Requirements

When your product serves multiple jurisdictions, such as the European Union, California, and other U.S. states, the skill automatically identifies applicable legal requirements, including GDPR user rights, CCPA opt-out options, and children’s privacy protections. This helps you comprehensively address the compliance requirements of different regions in a single policy.

Core Features

1. Intelligent Data Collection Mapping

Based on the product information and URL you provide, if available, the skill comprehensively analyzes and categorizes all types of data your product collects: data collected directly (information entered by users), data collected automatically (cookies and device information), third-party data sources, and special-category data (such as health, financial, and biometric data). This feature ensures that the privacy policy accurately discloses all data processing activities and avoids omitting critical information.

2. Multi-Jurisdiction Legal Adaptation

The skill automatically identifies applicable legal frameworks, including the GDPR, CCPA/CPRA, HIPAA, and COPPA, and adds the label [⚠️ LEGAL REVIEW REQUIRED] to the relevant sections. For example, for users in the European Union, the skill adds legal bases such as consent, performance of a contract, and legitimate interests; for California users, it explains the right to opt out of the sale of personal information. This ensures that your privacy policy addresses the compliance requirements of major jurisdictions.

3. Plain Language and Compliance Labels

The skill drafts privacy policies in clear, easy-to-understand language while avoiding unnecessary legal jargon. It also adds the label [⚠️ LEGAL REVIEW REQUIRED] next to each clause that requires review by a legal professional. The final output contains three sections: a quick summary for users who want a brief overview, a complete privacy policy document that can be published directly, and customization and compliance guidance explaining how to proceed with legal review and implementation.

Frequently Asked Questions

Can the Generated Privacy Policy Be Published Directly?

No. The privacy policy generated by this skill is for reference only and must be reviewed by a qualified data privacy attorney before publication. A privacy policy is a legally binding document that defines the company’s responsibilities and users’ rights. The skill marks all clauses requiring legal review with [⚠️ LEGAL REVIEW REQUIRED], ensuring that you know which sections require professional legal advice.

How Does the Skill Handle the Different Requirements of the GDPR and CCPA?

Based on the jurisdictions you provide, the skill automatically includes the relevant legal requirements in the privacy policy. For the GDPR, the skill adds a legal bases section, clearly defines user rights such as access, deletion, and data portability, and explains mechanisms for cross-border data transfers. For the CCPA/CPRA, it explains the additional rights of California residents, including access, deletion, opt-out, and non-discrimination rights. If your product serves both users in the European Union and California, the skill covers these requirements together in a single policy.

How Can I Ensure That the Generated Privacy Policy Matches My Product’s Actual Data Collection Practices?

First, you need to accurately provide the types of data your product collects ($INFORMATION_TYPES). If you provide a product URL, the skill will access the website and analyze its actual data collection practices. The generated privacy policy must be consistent with your actual data processing practices—if it is not, you will need to modify either your product or the policy. The skill also provides a compliance checklist to help you verify that the policy and your practices are consistent before publication.

Is the Skill Suitable for Handling Special-Category Data, Such as Health or Children’s Data?

Yes. The skill is specifically designed to handle special-category data. If your product collects health data, financial information, children’s data, or biometric information, the skill adds the label [⚠️ LEGAL REVIEW REQUIRED] to the relevant sections and provides additional compliance considerations, such as HIPAA, GLBA, COPPA, and the UK Children’s Code. For children’s data, the skill also specifically requires descriptions of age-verification and parental-consent mechanisms. These sensitive categories of data typically require stricter safeguards and specific legal provisions.