Privacy Policy

Template Overview

Template ID: privacy-policy-tech-companies
Version: 1.0.0

To generate this document, pass the structured data described below into the data property of the /api/v1/documents/generate endpoint.

Data Payload Schema

Field	Type	Requirement	Description & Details
`companyName`	`string`	Yes	Legal name of your company The full registered name of the entity that publishes this policy. Ex: Acme Technologies Limited
`companyType`	`string`	Yes	Type of company Options: `"Private Company limited by shares"`, `"Public Company limited by shares"`, `"Limited Liability Partnership"`, `"Business name"`
`country`	`string`	Yes	Country of incorporation Must be a valid value from the Supported Countries list.
`address`	`string`	Yes	Registered address Full street address including city and postal code. Ex: 12 Bree Street, Cape Town, 8001
`website`	`string`	Yes	Website URL Ex: https://acme.com
`contactEmail`	`string`	Yes	Contact email for legal and privacy matters Where users can reach you. Ex: legal@acme.com
`effectiveDate`	`string`	No	When does the privacy policy take effect? This is the date that the policy becomes active. Ex: 2024-01-01 (Format: `YYYY-MM-DD`.)
`lastUpdated`	`string`	No	When was the privacy policy last updated? This is the date that the policy was last revised. It's best to review and update your policy at least once a year. (Format: `YYYY-MM-DD`.)
`productName`	`string`	Yes	Product or service name Ex: Fega
`productDescription`	`string`	Yes	Brief description of the product 1-2 sentences describing what your product does. Ex: A legal-technology platform that uses AI to help businesses generate and review documents.
`audience`	`string`	Yes	Who is your product for? Options: `"B2B (businesses only)"`, `"B2C (consumers only)"`, `"Both businesses and consumers"`
`minimumAge`	`string`	Yes	Minimum user age Ex: 18 Options: `"13"`, `"16"`, `"18"`, `"21"`
`dataCategories`	`array of strings`	Yes	Which categories of personal data do you collect? Select every category that applies. Options: `"Account information (name, email, password)"`, `"Profile information (role, organisation, photo)"`, `"Uploaded documents and content"`, `"Payment information"`, `"Usage and analytics data"`, `"Device and log data (IP address, browser, OS)"`, `"Communications (support tickets, emails)"`, `"Cookies and tracking technologies"`, `"Location data"`, `"Marketing preferences"`
`collectsSpecialCategories`	`boolean`	No	Do you intentionally collect special categories of personal data? Special categories include health, biometric, racial, religious, sexual orientation, or trade union data.
`specialCategoriesDescription`	`string`	Conditional	Describe the special categories collected and why Required if `collectsSpecialCategories` is `true`.
`collectsFromMinors`	`boolean`	No	Do you knowingly collect data from minors (under 18)?
`usesAI`	`boolean`	No	Does your product use AI to process user data?
`aiProviders`	`array of strings`	Conditional	Which AI providers do you use? Select all that apply. Options: `"Google (Gemini)"`, `"OpenAI"`, `"Anthropic (Claude)"`, `"Mistral"`, `"Cohere"`, `"AWS Bedrock"`, `"Azure OpenAI"`, `"Self-hosted model"` Required if `usesAI` is `true`.
`trainsOnUserData`	`boolean`	Conditional	Do you train your AI models on user data? If 'No', your policy will state customer data is not used for training. Required if `usesAI` is `true`.
`primaryHostingLocation`	`string`	Yes	Primary hosting / storage location Where is user data primarily stored and processed? This should be the main location, even if you have additional hosting regions. Must be a valid value from the Supported Countries list.
`usesAdditionalHostingLocations`	`boolean`	No	Do you use additional hosting locations? Check this if you store, can store or process data in regions beyond your primary hosting location.
`additionalHostingLocations`	`array of strings`	Conditional	Additional regions where data may be stored Optional. Select all regions where data may be processed (e.g. for compliance or feature delivery). Options: `"United States"`, `"European Union"`, `"United Kingdom"`, `"South Africa"`, `"Nigeria"`, `"Asia Pacific"` Required if `usesAdditionalHostingLocations` is `true`.
`subprocessors`	`array of objects`	Yes	List your subprocessors (third parties that process user data) Add each vendor that handles personal data on your behalf. Ex: Google Firebase for storage and authentication. Each entry: `name` (string), `purpose` (string), `location` (string). (Minimum 1 entry.)
`jurisdictionsServed`	`array of strings`	Yes	Which jurisdictions do you serve users in? Select every region where you offer the product. This determines which data protection laws apply. Options: `"South Africa (POPIA)"`, `"Nigeria (NDPA)"`, `"United Kingdom (UK GDPR)"`, `"European Union (EU GDPR)"`, `"United States (CCPA / state laws)"`, `"Kenya (DPA)"`, `"Ghana (DPA)"`
`hasDPA`	`boolean`	No	Do you offer a Data Processing Agreement (DPA) to business customers? A DPA is a contract that outlines how you handle data on behalf of your customers. It's required under many data protection laws when processing business customer data.
`appointsDPO`	`boolean`	No	Have you appointed a Data Protection Officer or Information Officer? A DPO is responsible for ensuring your organization complies with data protection laws.
`dpoName`	`string`	Conditional	Data Protection / Information Officer name Required if `appointsDPO` is `true`.
`dpoEmail`	`string`	Conditional	Data Protection / Information Officer email Required if `appointsDPO` is `true`.
`hasUKEURepresentative`	`boolean`	No	Have you appointed a UK or EU representative (Article 27)? Required if you offer the service to UK or EU users without a local establishment.
`ukEuRepresentativeDetails`	`string`	Conditional	UK / EU representative name and address Required if `hasUKEURepresentative` is `true`.
`accountRetentionMonths`	`number`	No	Months to retain account data after closure This is the period you keep user data after they delete their account or become inactive. Ex: 12
`customerDataRetentionDays`	`number`	No	Days to retain customer data after subscription ends This is the period you keep customer data after their subscription ends. Ex: 30
`logRetentionMonths`	`number`	No	Months to retain logs and security data This is the period you keep logs and security data. Ex: 12
`usesCookies`	`boolean`	No	Does your product use cookies or similar tracking?
`usesAnalytics`	`boolean`	Conditional	Do you use analytics cookies (e.g. Google Analytics, Mixpanel)? Required if `usesCookies` is `true`.
`sendsMarketingEmails`	`boolean`	No	Do you send marketing emails?

Example JSON Payload

Here is an example of a properly formatted data object for the Privacy Policy template.

{
  "templateId": "privacy-policy-tech-companies",
  "data": {
    "companyName": "Acme Technologies Limited",
    "companyType": "Private Company limited by shares",
    "country": "Nigeria",
    "address": "12 Bree Street, Cape Town, 8001",
    "website": "https://acme.com",
    "contactEmail": "legal@acme.com",
    "effectiveDate": "2024-01-01",
    "lastUpdated": "2026-06-01",
    "productName": "Fega",
    "productDescription": "A legal-technology platform that uses AI to help businesses generate and review documents",
    "audience": "B2B (businesses only)",
    "minimumAge": "18",
    "dataCategories": [
      "Account information (name, email, password)",
      "Profile information (role, organisation, photo)"
    ],
    "collectsSpecialCategories": false,
    "collectsFromMinors": false,
    "usesAI": true,
    "aiProviders": [
      "Google (Gemini)",
      "OpenAI"
    ],
    "trainsOnUserData": false,
    "primaryHostingLocation": "Nigeria",
    "usesAdditionalHostingLocations": true,
    "additionalHostingLocations": [
      "United States",
      "European Union"
    ],
    "subprocessors": [
      {
        "name": "Google LLC",
        "purpose": "Hosting, storage, authentication",
        "location": "United States and European Union"
      }
    ],
    "jurisdictionsServed": [
      "South Africa (POPIA)",
      "Nigeria (NDPA)"
    ],
    "hasDPA": true,
    "appointsDPO": false,
    "hasUKEURepresentative": false,
    "accountRetentionMonths": 12,
    "customerDataRetentionDays": 30,
    "logRetentionMonths": 12,
    "usesCookies": true,
    "usesAnalytics": false,
    "sendsMarketingEmails": false
  },
  "format": "pdf"
}