Website policies and privacy compliance tools
Write privacy, cookie, refund and terms pages, check GDPR, DPDP and POSH duties, assess an AI system under the EU AI Act and prepare breach notices and DPIAs.
- 21 tools
- No upload
- Free previews, no sign-up
All 21 tools here need a pass: Premium unlocks all 21 · See passes
Go to the 21 toolsThe policies a website or a company has to publish and keep
For website owners, online shops, app makers, startups and the people in a company who answer for data protection, workplace harassment rules or AI. The tools write the pages visitors read, check a business against the duties of the GDPR, India’s DPDP Act, the POSH Act and the EU AI Act, and prepare the records and notices those laws ask for.
How to choose
Start with what you need to have in place:
Pages for your website: Privacy Policy Generator, Cookie Policy Generator with Cookie Consent Banner Generator, Terms and Conditions Generator, Refund & Return Policy Generator, Disclaimer Generator and AI Use Disclosure Generator.
Checking where you stand: GDPR Compliance Checklist, DPDP Act Compliance Checklist, Privacy Policy Gap Checker and EU AI Act Risk Checker.
Records a regulator can ask for: Record of Processing (ROPA) Generator, DPIA Generator, Data Retention Schedule Generator and Data Processing Agreement (DPA) Generator.
When something goes wrong: Data Breach Notification Letter Generator, and PII Data Scanner for Files to find the personal data in a file first.
The workplace in India: POSH Policy Generator, POSH Act Compliance Checklist and POSH Annual Report Generator.
Products on sale in India: Legal Metrology Declaration Generator.
A generated policy is only true if it matches what your site or company really does, so describe your actual practices when you fill one in.
The main tools, compared
| Tool | When to pick it | What you give it | What you get | Works offline | Stays on your device |
|---|---|---|---|---|---|
| Privacy Policy Generator Premium tool | Asks what your site actually collects and which services it uses, then writes a policy that names them and the laws that apply. | Nothing — start blank | Free preview: every page with your details, the first part of the wording readable and the rest hidden, marked “not for use”, and the first lines of the HTML | Yes | Yes |
| EU AI Act Risk Checker Premium tool | Places an AI system in the Act’s risk tiers from your answers and lists the articles, duties and the dates from which each applies. | Text | Free preview: the category, the reasons and the dates for your own answers, with the first of your duties (up to 10) | No | Yes |
| DPDP Act Compliance Checklist Premium tool | Goes through every duty a Data Fiduciary has under India’s DPDP rules, scores what is in place and names the penalty for each gap. | Text | Free preview: your checklist with its counts and checks, and every page of the gap report with your entries and the first part of the wording readable, marked “not for use” | Yes | Yes |
| GDPR Compliance Checklist Premium tool | Takes a business through the GDPR article by article and produces a list of what is done, partly done and still missing. | Text | Free preview: your checklist with its counts and checks, and every page of the action plan with your entries and the first part of the wording readable, marked “not for use” | Yes | Yes |
| Terms and Conditions Generator Premium tool | Writes the terms for a shop, an app or a service of your kind, and warns about clauses that consumers could have struck out. | Nothing — start blank | Free preview: every page with your details, the first part of the wording readable and the rest hidden, marked “not for use”, and the first lines of the HTML | Yes | Yes |
| Data Breach Notification Letter Generator Premium tool | From what happened, when and to whose data, drafts the regulator’s notification, the message to affected people and the incident log entry. | Nothing — start blank | Free preview: every page with your details, the first part of the wording readable and the rest hidden, marked “MySmartCoPilot preview · not for use” | No | Yes |
| PII Data Scanner for Files Premium tool | Searches files for names, contact details, ID and card numbers and other personal data, so you know what they hold before they move anywhere. | Camera, mic or screen | Free preview: every count of the personal data in one of your files, with the first rows of its inventory (up to 10); of several files, the first ones (up to 3) | No | Yes |
| POSH Policy Generator (India) Premium tool | Drafts a workplace policy under India’s POSH Act with its Internal Committee and the notices to display, in English or Hindi. | Nothing — start blank | Free preview: every page with your details, the first part of the wording readable and the rest hidden, marked “MySmartCoPilot preview · not for use” | No | Yes |
Worked example: an AI tool that ranks CVs for employers, under the EU AI Act
A company sells an AI assistant that reads job applicants’ CVs and ranks them for employers in the EU, and answers the checker’s questions as its provider.
Ranking candidates for recruitment is one of the uses listed in Annex III, so under Article 6(2) the system is high-risk.
As the provider, the company must run a risk management system, govern its training, validation and test data, and draw up technical documentation.
It must also build in automatic logging, give deployers instructions for use, design for human oversight and make the system accurate, robust and secure.
Before sale it needs a quality management system, a conformity assessment, the EU declaration with the CE marking and registration in the EU database, with the documentation kept for 10 years.
Questions
Does a small website need a privacy policy?
If it collects any personal data, even through analytics, a contact form or ads, most data protection laws, including the GDPR and India’s DPDP Act, expect it to say what it collects and why.
Is a cookie banner enough for the GDPR?
Only if non-essential cookies wait for the visitor’s consent and refusing is as easy as accepting. The banner and cookie policy generators prepare the banner and the page that explains each cookie.
When does the EU AI Act treat an AI system as high-risk?
When it is a safety part of a regulated product, or used in an area listed in Annex III, such as recruitment, education, credit or essential services. The risk checker asks the questions that decide it.
Who needs a POSH policy in India?
Every employer with ten or more workers must form an Internal Committee and adopt a policy under the POSH Act; the policy generator and the compliance checklist cover those duties.
For general information only; check the official source before you file, sign or apply.
Start with these
- EU AI Act Risk Checker Free preview: the category, the reasons and the dates for your own answers, with the first of your duties (up to 10)
- POSH Annual Report Generator (India) The Internal Committee’s annual report, the employer’s report and the Board’s figures.
- Terms and Conditions Generator Terms of use, sale or service — with the clauses a court may not enforce flagged.
More tools here
- Privacy Policy Generator A privacy policy that matches what your site really does — and the laws that apply.
- Disclaimer Generator The disclaimer your site needs — and the short disclosures your posts need too.
- PII Data Scanner for Files Find the personal data in your files before you share, migrate or delete them.
- Refund & Return Policy Generator Returns, refunds, cancellations and shipping — written the way the law expects.
- Data Breach Notification Letter Generator The authority notice, the letter to the people affected and the record, from your facts.
- DPDP Act Compliance Checklist Every Data Fiduciary duty, the penalty for missing it, and a countdown to the deadline.
- GDPR Compliance Checklist Every GDPR duty a small business has, with its article — and a plan for what is left.
- POSH Policy Generator (India) Your POSH policy with its Internal Committees and notices, in English or Hindi.
- Privacy Policy Gap Checker Find what your privacy notice leaves out, item by item, with the provision behind each.
- Cookie Policy Generator Find out what your cookies do, list them properly and explain the choices visitors have.
- Cookie Consent Banner Generator A cookie banner you host yourself: fair choices, scripts that wait, no third-party CMP.
- AI Use Disclosure Generator (Chatbot Notices & AI Labels) Tell people when they meet AI: chatbot notices, content labels and policy text.
- POSH Act Compliance Checklist (India) The Internal Committee, the policy, complaint time limits and annual reports — checked.
- Legal Metrology Declaration Generator Every declaration an Indian package must carry: MRP, net quantity, unit price, address.
- Data Processing Agreement (DPA) Generator Every Article 28 term, the annexes, the right transfer clauses and India’s DPDP duties.
All 21 tools
Every tool here by name, grouped by what it is for.
Show the full listHide the full list: All 21 tools
Website policies & terms
6 toolsPrivacy & data protection (GDPR, DPDP)
9 tools- Data Breach Notification Letter Generator Premium tool
- Data Processing Agreement (DPA) Generator Premium tool
- Data Retention Schedule Generator Premium tool
- DPDP Act Compliance Checklist For India Premium tool
- DPIA Generator Premium tool
- GDPR Compliance Checklist Premium tool
- PII Data Scanner for Files Premium tool
- Privacy Policy Gap Checker Premium tool
- Record of Processing (ROPA) Generator Premium tool
AI rules & disclosure
2 toolsOther tools here
4 toolsNo tools here match these filters.
Choose “Anything” or “Any price” in a filter, or look across every category on All tools.
Inside this hub
Good to know
- All 21 tools run in your browser: what you open or paste is not uploaded.
- 9 of 21 keep working without a connection once loaded.
- Results are estimates for planning and learning, not legal advice. Check the method and assumptions on each tool’s page.
What a pass opens here
21 Premium tools here need a pass.
- Premium pass opens all 21 ₹799 / $19.99 for 30 days