Policy check · Oct 7, 2026

Privacy Policy

old-privacy-policy.txt· 136 words · 5 tools

Check another document

out of 100

Grade

Missing most of what’s needed

Covered

Partly

Missing

Tools you use

0 of 5 named in your privacy policy.

Supabase
Stripe
PostHog
Intercom
OpenAI

What to fix

Most important first.

GDPR: legal bases
Law
Not found.
Add: For each purpose, state the GDPR legal basis (consent, contract, legitimate interests, legal obligation).
GDPR: international transfers
Law
Not found.
Add: Some of your tools process data outside the EEA. Say where, and the safeguard used (e.g. Standard Contractual Clauses or the EU-U.S. Data Privacy Framework).
Who is responsible
Section
Not found.
Add: State the company’s legal name and address and that it is the controller of personal data.
GDPR: full set of rights
Law
Missing: portability, objection, restriction, withdrawing consent.
Add: Add the rights to data portability, to object, to restrict processing and to withdraw consent.
US state privacy notice
Law
Not found.
Add: Add a section for US state privacy laws (CCPA/CPRA and others): categories collected and residents’ rights.
AI features
Section
Not found.
Add: Explain that content submitted to AI features is sent to an AI provider, and whether it’s used for training.
Security
Section
Not found.
Add: Describe the measures you take to protect personal data.
Children
Section
Not found.
Add: State the minimum age for your service and what happens if a child’s data is collected.
GDPR: right to complain
Law
Not found.
Add: Tell users they can complain to their local data protection authority.
User rights and how to use them
Section
Missing: correction.
Add: Explain users’ rights (access, correction, deletion) and how to make a request.
Changes and last-updated date
Section
Missing: a last-updated or effective date.
Add: Add a “Last updated” date and explain how you’ll tell users about changes.
Supabase
Tool
Not mentioned.
Add: Name Supabase (Supabase, Inc.) and describe what data it receives and why.
Stripe
Tool
Only described as a category (“payments”), not by name.
Add: Name Stripe (Stripe, Inc. and Stripe Payments Europe, Ltd.) and describe what data it receives and why.
PostHog
Tool
Not mentioned.
Add: Name PostHog (PostHog, Inc.) and describe what data it receives and why.
Intercom
Tool
Not mentioned.
Add: Name Intercom (Intercom R&D Unlimited Company) and describe what data it receives and why.
OpenAI
Tool
Not mentioned.
Add: Name OpenAI (OpenAI, L.L.C. / OpenAI Ireland Ltd) and describe what data it receives and why.

Already covered7Show

What data is collected
Describes the personal data collected.
Why it’s used
Explains the purposes of processing.
Who it’s shared with
Explains who receives data.
How long it’s kept
Covers data retention.
Contact details
Gives a way to contact you.
Cookies
Mentions cookies.
US: sale or sharing
States whether personal information is sold or shared.

Get a Privacy Policy that covers all of this

Start a project with your 5 tools pre-selected. Drafting and previewing are free.

Draft it now

This is an automated check that looks for disclosures and sections by keyword. It can miss wording it doesn’t recognise and can’t tell whether statements are accurate. It isn’t legal advice.