privacy liability digital-contract
Can I make a privacy policy on my own for free?
<p>I have the Problem that I want to start a web application which has access to the users files on dropbox and co. This involves saving some of the data local, e.g. the directory structure, access token, email addresses...</p>

<p>I know that I have to provide detailed information which data I save and how I use it. But I am a poor student who don't want invest money into a lawyer to write me a privacy policy (this is just a simple project which I want to share, I do not plan to get paid for it)</p>

<p>Is there any way I can do this privacy policy on my own?</p>

<p>Is it possible to just create some “I save all your data“ policy which would of course be to much but it would include all data I save and so I would not miss anything in my policy?</p>

<p>Does such a policy have to be in a specific form?</p>

<blockquote>
  <p>I know that I have to provide detailed information which data I save
  and how I use it.</p>
</blockquote>

<p>Yes, you should, if you are getting access to users' Dropbox accounts, which will contain all sorts of private data, copyrighted (and illegally copied copyrighted files), etc. You provide the detailed information to your users through a click-through Privacy Policy - TOS (Terms of Service) in your App, like any other App out there. <a href="https://en.wikipedia.org/wiki/Click_wrap" rel="nofollow noreferrer">Click wrap (Wikipedia)</a> user agreements are legally binding in many jurisdictions.</p>

<p>Even if you don't access files and information - such as personal information or files - you still need a clear TOS for your App, for both your users' and your own legal protection.</p>

<blockquote>
  <p>But I am a poor student who don't want invest money into a lawyer to
  write me a privacy policy ... I do not plan to get paid for (this
  app)...</p>
</blockquote>

<p>Being a free or paid App doesn't make a difference when it comes to the TOS, if you need one, and if you need to pay for one to be drafted.</p>

<p>But not investing money in a lawyer can be a critical mistake if your App will be distributed on the popular App directories like Google Play and iTunes and your TOS does not clearly and legally outline all possible usage and data polices. Lawyers have experience in covering all the bases.</p>

<blockquote>
  <p>Is there any way I can do this privacy policy on my own?</p>
</blockquote>

<p>Sure, you can: <a href="https://www.google.com/search?q=privacy+policy+generator" rel="nofollow noreferrer">https://www.google.com/search?q=privacy+policy+generator</a>  But you run considerable legal liability not having a TOS that correctly and legally addresses all users' privacy concerns and clearly outlines what you do to insure security. That's what lawyers are for.</p>

<blockquote>
  <p>Is it possible to just create some “I save all your data“ policy which
  would of course be to much but it would include all data I save and so
  I would not miss anything in my policy?</p>
</blockquote>

<p>Sure, you can simply say <em>I save all your data.</em> But how can you be sure that you've haven't missed important policy details and scenarios that could result in legal action against you? Like <em>how long do you save data? When will you delete it? How secure is it? Can the user ask for deletion? What happens if you get hacked? What about users in countries other than the US? Users under 18 years old? You must use arbitration for any disputes?</em> And on and on.</p>

<p>The considerable legal liability of using a non-professionally drafted TOS means you run the risk of getting sued. You have to decide if it is worth the risk.</p>
