Look at ToS and privacy policy from existing, respectable companies in your market (or just use Google, Facebook, LinkedIn etc). Pick one that you agree with/wo

Look at ToS and privacy policy from existing, respectable companies in your market (or just use Google, Facebook, LinkedIn etc). Pick one that you agree with/works for your business, mark up with modifications you think you need (but honestly, you probably don't) then give it to your attorney to review. Don't have an attorney draft it from scratch (they will just copy from Google/LinkedIn/Facebook and charge you an hourly rate for cutting and pasting). This was the advice we got from our attorney when it came time to put this stuff together.