- Business Protection 101
- Posts
- Do you collect the data of your clients?
Do you collect the data of your clients?
Then steal my steps on creating the right privacy policy - SaaS Edition

You might be thinking of creating the next Netflix or Microsoft Office.
But are you taking the right steps for it...?
SaaS businesses, if created right, are a lot more profitable than any other business model.
It's also quite convenient on the customer's side.
Because ultimately they are just taking the rights and permission to access your software as a service.
But that's where issues start to happen.
Because there's data exchange.
And fines can be in MILLIONS, at least in GDPR.
So it's never a good idea to take the risk.
Now the no. 1 thing you can do to protect yourself is to have a Privacy Policy.
That's what our client did.
He knew the risks of not having a Privacy Policy for his SaaS Startup.
So he decided to reach out to us to draft him one.
But before we got started, we identified 3 challenges.
1) His company did not have a formal privacy policy to begin with.
They were not using anything. Nothing.
So there was a lack of transparency between his company and his potential users.
And that could be a red flag for many.
2) If you don't have a privacy policy, you are basically non-compliant with a lot of laws.
GDPR and CCPA for example.
And if you don't comply, you get fined.
3) Trust is an important factor when it comes to building a business.
And a lot of people nowadays are concerned about the rights they give to businesses.
And how their data is handled overall.
A good Privacy Policy typically creates that trust.
So 3 main issues were identified by us.
And now it was time to start working on the document.
(1) Comprehensive Data Collection Practices:
We worked closely with the startup to understand their data collection practices, including what data was collected, how it was used, and who had access to it.
Detailed these practices in the privacy policy to make sure there was full transparency.
(2) Ensuring Regulatory Compliance:
We also conducted a thorough review of relevant data protection laws and regulations to ensure the privacy policy met all legal requirements.
In the end, we included provisions for users' rights under GDPR and CCPA, such as the right to access, correct, or delete their data.
Mainly because those were the two main markets for the company.
(3) Clear and Accessible Policy:
The last step was to draft the policy in clear, simple language, to make it easily understandable for users.
We also structured the policy with headings and bullet points.
Because I know how much of a difference that can make when it comes to readability, while also making sure key information is easy to find.
That's all we did. Now with the help of the Privacy Policy, 3 things were achieved:
1) The startup was now able to clearly communicate its data handling practices.
2) The startup was able to build transparency and trust with users from Day 1.
3) The users were going to feel more confident in using the services of the startup, as the startup was positioned in a better way.
Now I am sure you didn't read this till the end unless:
1) You are running a SaaS Startup.
2) You plan on running one.
So in either case, if you need my help with drafting you a custom privacy policy that's made for your business.
And also makes sure you are compliant with your relevant data privacy laws.
Then pick a time here, and let's talk:
Or reply to this email “PRIVACY” and I will send you the details
See you soon.
-- Akhil Mishra
Reply