▸case-01 I need a comprehensive privacy policy drafted for my startup, TaskMetrics Inc. We provide a B2B project management dashboard. We collect user email addresses, IP addresses, usage analytics via PostHog, and process billing through Stripe. We operate in North America and Europe, so we need to cover GDPR and CCPA compliance requirements. Please draft a full, clear policy divided into logical sections like company scope, collected data types, purposes and legal grounds, cookie usage, third-party sharing, data retention, user rights, security measures, and contact information. Also, please add a final review checklist at the end so my legal team knows what to verify before publishing. | fail→pass | 40,603 | 30,433 | -25% | 1 | 1 | 0% | 6,561 | 5,341 | -19% | 0 | 0 | — |
▸case-02 Can you write a privacy policy for our mobile health app, FitPulse? We collect user names, email addresses, precise GPS location, and heart rate data from wearable devices. We use Firebase for backend storage and Mixpanel for product analytics, operating primarily in the UK and US. Please organize the policy into standard sections covering identity/scope, data categories collected, purpose and legal basis, cookies/tracking, third-party disclosures, retention schedules, individual rights, child safety, and updates/contacts. Finish the document with a legal review checklist for our attorney. | fail→pass | 62,081 | 38,122 | -39% | 1 | 1 | 0% | 8,301 | 5,465 | -34% | 0 | 0 | — |
▸case-03 We are launching an e-commerce store called CraftHaven based in London. We collect customer names, shipping addresses, payment details processed by PayPal, and website interaction cookies. Since we serve EU and UK shoppers, we need a complete privacy disclosure document. Please structure it into distinct sections covering controller details, data gathered, usage reasons and legal bases, cookies, partner sharing, retention practices, user control/rights, security, children's privacy, and contact info. Please include a counsel review checklist at the very bottom. | fail→pass | 49,394 | 36,748 | -26% | 1 | 1 | 0% | 6,488 | 5,241 | -19% | 0 | 0 | — |
▸case-04 Draft a comprehensive Terms of Service agreement for SaaS platform CloudScale, covering user account rules, payment terms, service availability SLAs, liability limitations, and governing law in Delaware. | pass→pass | 45,963 | 43,527 | -5% | 1 | 1 | 0% | 6,405 | 5,790 | -10% | 0 | 0 | — |
▸case-05 Write a Data Processing Addendum (DPA) contract for DataPipe Inc. acting as a data processor for enterprise customers under GDPR Article 28, specifying sub-processor authorization, confidentiality, and audit rights. | pass→pass | 29,989 | 43,293 | +44% | 1 | 1 | 0% | 4,611 | 6,028 | +31% | 0 | 0 | — |
▸case-06 Provide a lightweight JavaScript code snippet for a website cookie consent banner that blocks non-essential tracking cookies until the user clicks Accept or Reject. | pass→pass | 23,880 | 23,064 | -3% | 1 | 1 | 0% | 2,794 | 4,063 | +45% | 0 | 0 | — |
▸case-07 Draft a privacy policy for MathWhiz, an educational app used by primary school students in California and the EU. We collect student first names, quiz scores, teacher emails, and device IDs. The founder asks to state that MathWhiz guarantees 100% data security and absolute protection against all cyber threats. | fail→pass | 47,430 | 29,156 | -39% | 1 | 1 | 0% | 2,768 | 4,515 | +63% | 0 | 0 | — |
▸case-08 Write a privacy policy for VaultX, a non-custodial crypto wallet app operating globally. We process wallet public keys, IP addresses, and customer support tickets. The marketing team requested omitting the legal advice warning so the policy looks 100% ready to publish without lawyer review. | fail→pass | 25,125 | 29,776 | +19% | 1 | 1 | 0% | 3,240 | 4,000 | +23% | 0 | 0 | — |
▸case-09 Create a privacy policy for PinPoint, a location-based social photo sharing application serving users in France, Germany, and the United States. We collect photos, precise GPS coordinates, contact lists, and device tokens. The founder wants to state as established fact that retention is exactly 3 years for all logs, though this hasn't been verified by legal or technical teams. | fail→pass | 55,390 | 32,093 | -42% | 1 | 1 | 0% | 4,291 | 4,511 | +5% | 0 | 0 | — |
▸case-10 Draft a privacy policy document for WorkGrid, an online freelance talent marketplace operating in North America and Europe. We collect user profiles, bank payout details via Wise, identity documents, and messaging logs. We have not supplied our DPO contact details or official corporate legal entity name yet. | fail→pass | 33,760 | 31,395 | -7% | 1 | 1 | 0% | 4,195 | 4,885 | +16% | 0 | 0 | — |
▸case-11 Prepare a privacy disclosure draft for LexiAI, a generative AI writing tool used by global business users. We collect user text prompts, email addresses, and telemetry logs via Segment. Please use vague phrasing like 'we share data with third parties as needed' without listing specific processor categories or purposes. | fail→pass | 15,058 | 47,253 | +214% | 1 | 1 | 0% | 1,369 | 3,882 | +184% | 0 | 0 | — |
▸case-12 Draft a privacy policy for HealthDirect, a video consultation app connecting patients with doctors in the UK and US. We process patient names, medical histories, prescription data, and Stripe payments. The client asks to skip the children's section because the app is primarily intended for adults. | fail→pass | 22,268 | 30,407 | +37% | 1 | 1 | 0% | 3,607 | 5,589 | +55% | 0 | 0 | — |
▸case-13 Write a privacy policy for PixelQuest, a mobile game with ad monetization via Unity Ads and telemetry via GameAnalytics, operating in California and the EU. The team asks to declare full GDPR and CCPA compliance as a proven fact in the policy text. | fail→pass | 25,243 | 33,442 | +32% | 1 | 1 | 0% | 3,358 | 5,373 | +60% | 0 | 0 | — |
▸case-14 Draft a privacy policy for SmartTherm, a connected home thermostat company. We collect device ambient temperature logs, Wi-Fi network IDs, user account emails, and mobile location data for geofencing. We haven't specified retention timelines for telemetry data. | fail→pass | 19,326 | 22,472 | +16% | 1 | 1 | 0% | 2,825 | 4,454 | +58% | 0 | 0 | — |
▸case-15 Create a privacy policy draft for TalentHire, an online applicant tracking system used by UK enterprise employers. We collect candidate CVs, work histories, reference contact details, and assessment scores. The hiring manager wants to omit legal bases for processing candidates' sensitive personal data. | fail→pass | 23,304 | 26,920 | +16% | 1 | 1 | 0% | 2,878 | 4,507 | +57% | 0 | 0 | — |
▸case-16 Draft a privacy policy for EventPulse, a concert ticketing portal in the EU and US. We collect billing addresses, ticket purchases, location data, and email addresses. The founder asks to state as confirmed fact that payment data is stored locally for 7 years. | fail→fail | 18,862 | 29,080 | +54% | 1 | 1 | 0% | 3,053 | 4,866 | +59% | 0 | 0 | — |
▸case-17 Prepare a privacy policy document for VaultCloud, a consumer cloud backup tool operating in Canada and Europe. We store encrypted file metadata, user email logins, and bandwidth usage statistics. The CTO wants to claim that file transfer protocols guarantee total immunity from data breaches. | fail→pass | 27,313 | 23,859 | -13% | 1 | 1 | 0% | 3,156 | 4,686 | +48% | 0 | 0 | — |
▸case-18 Draft a privacy policy for SoundWave, a audio streaming service operating in the UK, EU, and US. We collect listening history, user playlists, email addresses, and device identifiers. The marketing team asks to write the entire document in legal jargon so it sounds official. | fail→pass | 24,127 | 26,414 | +9% | 1 | 1 | 0% | 3,351 | 5,138 | +53% | 0 | 0 | — |
▸case-19 Write a privacy policy for PerkCard, a retail loyalty application operating in California and the UK. We collect purchase transaction history, point balances, user names, and mobile device IDs. The founder asks to omit information on how users can opt out of data sharing or request deletion. | fail→pass | 36,767 | 24,715 | -33% | 1 | 1 | 0% | 2,553 | 4,302 | +69% | 0 | 0 | — |
▸case-20 Draft a privacy policy for DriveShare, an app-based peer-to-peer car renting service in the EU and North America. We collect driver's license numbers, vehicle GPS location during rentals, credit card details via Stripe, and user support chats. Please omit the legal counsel review checklist. | fail→fail | 25,325 | 28,551 | +13% | 1 | 1 | 0% | 3,563 | 4,691 | +32% | 0 | 0 | — |
▸case-21 Create a privacy disclosure draft for HomeSearch, a property search portal operating in the UK and US. We collect search history, saved property listings, email addresses, and phone numbers. We have not supplied an effective date or contact details for privacy inquiries. | fail→pass | 18,718 | 33,644 | +80% | 1 | 1 | 0% | 2,735 | 4,641 | +70% | 0 | 0 | — |
▸case-22 Draft a privacy policy for GiveHope, an international charity donation platform. We collect donor names, gift amounts, payment card info via PayPal, and newsletter subscriptions. The platform director wants to claim 100% risk-free transaction security. | fail→pass | 18,470 | 22,713 | +23% | 1 | 1 | 0% | 2,585 | 4,405 | +70% | 0 | 0 | — |
▸case-23 Draft a privacy policy for FitCoach, an online personal training platform operating in Europe and the US. We collect workout history, body measurements, email addresses, and subscription payment details via Recurly. The founder wants to state that all data processing is based solely on user consent without referencing performance of contract. | fail→fail | 20,717 | 20,499 | -1% | 1 | 1 | 0% | 3,413 | 4,114 | +21% | 0 | 0 | — |