pf-terms-policies (v1.1)

Generate compliant privacy policies, terms of service, and cookie consent notices with deep regulatory domain knowledge — an alternative to Termly, TermsFeed, and iubenda.

Important: All documents generated by this plugin are drafts intended as starting points. Legal documents must be reviewed by a qualified attorney before execution. This plugin does not provide legal advice and output may not reflect current laws in your jurisdiction.

Why This Exists

Privacy policies, terms of service, and cookie notices are essential legal documents for any website or app. But commercial tools charge recurring fees ($100-500/year per site) that add up quickly for businesses with multiple properties.

This plugin generates legally-grounded, jurisdiction-aware legal documents included with your subscription, with full control over the output. data is processed within the Cowork environment — processed within the Cowork environment.

New in v1.1: Deep regulatory domain knowledge — every generated document now references specific articles, sections, and case law rather than generic compliance language. Includes GDPR article-by-article requirements, CCPA/CPRA section-level detail, 7 US state privacy laws, ePrivacy Directive case law, and consumer protection Directives.

Quick Start (3 Steps)

1. Initialize workspace

   /terms:terms-setup
   

   Answer questions about your business, data practices, and compliance needs. Now supports 16 jurisdictions including 7 US state privacy laws.

2. Generate documents

   /terms:terms-full-pipeline
   

   Generate privacy policy, terms of service, and cookie policy in one run. Or generate individually:

   • /terms:terms-privacy-policy — Privacy policy only
   • /terms:terms-service — Terms of service only
   • /terms:terms-cookie-notice — Cookie policy only

3. Review and publish

   • Download generated documents from outbound/
   • Customize in Word/Google Docs
   • Have attorney review before publishing
   • Publish to your website

Commands

Command	Purpose
/terms:terms-setup	Initialize workspace with business configuration (16 jurisdictions)
/terms:terms-privacy-policy	Generate privacy policy (GDPR, CCPA/CPRA, PIPEDA, LGPD, US state laws aware)
/terms:terms-service	Generate terms of service (SaaS, e-commerce, marketplace aware with consumer protection)
/terms:terms-cookie-notice	Generate cookie policy + banner code (ePrivacy Directive, GPC compliant)
/terms:terms-full-pipeline	Generate all three documents
/terms:terms-policy-review	Review existing policy for compliance gaps (51-item regulatory checklists)
/terms:terms-regulatory-kb	Show applicable regulations and article-level requirements for your business
/terms:terms-status	View workspace status

Skills

Skill	Purpose
terms-setup	Workspace initialization with expanded jurisdiction selection
terms-privacy-policy	Privacy policy generation with article-level regulatory references
terms-service	Terms of service generation with consumer protection awareness
terms-cookie-notice	Cookie policy + banner with ePrivacy and Planet49 compliance
terms-policy-review	Policy compliance audit with per-regulation checklists
terms-regulatory-kb	Centralized regulatory knowledge base — the domain intelligence layer

How It Works

1. Setup: You answer a guided questionnaire about your business, data practices, jurisdictions, and service model. Config is saved to .terms/config.json. Choose from 16 jurisdictions organized by region (International, US Federal & State, General).

2. Regulatory Analysis: The plugin's embedded knowledge base maps your business profile to specific regulatory requirements — article by article, section by section. Run /terms:terms-regulatory-kb to see exactly which regulations and articles apply to you.

3. Generation: Each document skill reads your config and asks clarifying questions, then generates a DOCX using python-docx with:

   • Professional formatting (headings, TOC, tables)
   • Article-level jurisdiction-specific compliance language (GDPR Art. 5-49, CCPA §§1798.100-1798.199, PIPEDA 10 principles, LGPD, US state laws)
   • Legal definitions section sourced from applicable regulations
   • Consumer protection references with specific Directive/Act citations
   • All required sections with no placeholder text
   • Legal disclaimer included

4. Review: Generated documents are fully editable. Customize and have your attorney review before publishing.

5. Compliance Audit: Run policy review to audit existing policies against regulations using per-regulation compliance checklists (GDPR 26 items, CCPA 18 items, PIPEDA 12 items, LGPD 10 items, US state laws 7 items) and get specific remediation recommendations.

Regulatory Coverage (v1.1)

International Frameworks

Regulation	Coverage
GDPR (EU/EEA)	Articles 5-22, 25, 30, 33-35, 44-49 — full article-level requirements
UK GDPR	Separate from EU GDPR, ICO-specific guidance
CCPA/CPRA (California)	§§1798.100-1798.199 — all consumer rights and business obligations
PIPEDA (Canada)	All 10 Fair Information Principles with substantive descriptions
LGPD (Brazil)	Articles 7, 11, 18, 33, 41 — legal bases, rights, sensitive data, transfers
ePrivacy Directive	Article 5(3) cookie consent, Planet49 ruling, CNIL/ICO guidance
POPIA (South Africa)	Core principles and data subject rights
APP (Australia)	Australian Privacy Principles
PDPA (Singapore)	Core obligations and consent framework

US State Privacy Laws

State Law	Key Differentiator
VCDPA (Virginia)	Sensitive data opt-in, DPA required
CPA (Colorado)	Universal opt-out (GPC) recognition required
CTDPA (Connecticut)	Universal opt-out, sensitive data opt-in
UCPA (Utah)	Most business-friendly — no correction right, opt-out for sensitive data
TDPSA (Texas)	Broadest US scope — no revenue/consumer thresholds
OCPA (Oregon)	Right to specific third-party list, expanded sensitive categories
MCDPA (Montana)	Lowest threshold (50K consumers), universal opt-out

Consumer Protection (Terms of Service)

Framework	Scope
EU Unfair Terms Directive (93/13/EEC)	Mandatory consumer rights that cannot be waived
EU Consumer Rights Directive (2011/83/EU)	14-day withdrawal right for online purchases
EU Digital Content Directive (2019/770)	Conformity requirements for digital services
UK Consumer Rights Act 2015	Fairness requirements, digital content quality
US FTC Act Section 5	Unfair/deceptive practices prohibition
DMCA (17 U.S.C. §512)	protective language patterns for UGC platforms

What It's An Alternative To

Feature	pf-terms-policies	Termly	TermsFeed	iubenda
Privacy policy generation	✓	✓	✓	✓
Terms of service	✓	✓	✓	✓
Cookie policy	✓	✓	✓	✓
Multi-jurisdiction (16)	✓	✓	✓	✓
US state privacy laws (7)	✓	Partial	—	Partial
Article-level references	✓	—	—	—
Regulatory knowledge base	✓	—	—	—
Existing policy review	✓	—	—	—
Compliance checklists (51 items)	✓	—	—	—
Consumer protection awareness	✓	—	—	—
Cookie consent banner	Partial*	✓	—	✓
Auto-update on law changes	—	✓	—	✓
Cookie scanning	—	✓	—	✓
Data stays local	✓	—	—	—
No recurring fees	✓	—	✓	—
Editable DOCX export	✓	—	—	—
Annual cost	Included	$120-480	$14-140	$108-324

*Banner generates text + implementation code for WordPress, Shopify, and custom HTML. You implement on your site.

Context & Performance Guide

Each skill operates independently on your configuration, minimizing context usage:

Skill	Estimated Tokens	Duration
terms-setup	3,000	2-5 min
terms-privacy-policy	14,000	3-5 min
terms-service	14,000	3-5 min
terms-cookie-notice	10,000	2-3 min
terms-policy-review	12,000	3-5 min
terms-regulatory-kb	5,000	1-2 min
Full pipeline	50,000	10-20 min

AI-Powered Features

• Regulatory Knowledge Base: Maps business practices to specific law articles (GDPR Articles 5-49, CCPA §§1798.100-1798.199) for targeted compliance
• Jurisdiction-Aware Language: Generates policy text referencing specific regulatory sections rather than generic compliance boilerplate
• Policy Gap Analysis: Reviews existing documents with 51-item per-regulation checklists and assigns severity ratings to gaps
• Consumer Protection Integration: Automatically includes mandatory user rights (EU 14-day withdrawal, DMCA protective language patterns, GPC compliance)
• Article-Level References: Embeds legal citations throughout documents for faster attorney review and stronger legal grounding
• Multi-Regulation Synthesis: Harmonizes conflicting requirements across 16 jurisdictions into coherent policy language

Estimated Cost per Use

Disclaimer: Token estimates are approximate and based on typical usage patterns measured from skill prompt sizes. Actual costs vary with input data size, conversation length, and complexity. Estimates use Claude Sonnet 4.6 pricing ($3/1M input, $15/1M output). Cowork and Claude Desktop subscription users (Pro/Max/Team) are not charged per-token — these estimates apply only to direct Anthropic API usage. Running stages individually in fresh sessions uses fewer input tokens than running the full pipeline sequentially, because pipeline mode accumulates conversation history across stages.

Per skill (run individually in a fresh session):

Stage	Skill Prompt	User Input	Total Input	Output	Est. Cost
terms-regulatory-kb	~8.3K	~800	~11.9K	~6.0K	~$0.13
terms-cookie-notice	~7.5K	~800	~11.7K	~6.0K	~$0.13
terms-policy-review	~7.9K	~800	~12.2K	~6.0K	~$0.13
terms-service	~7.8K	~800	~11.8K	~6.0K	~$0.13
terms-privacy-policy	~8.4K	~800	~12.3K	~6.0K	~$0.13
Standalone total			~60.0K	~30.0K	~$0.63

Full pipeline (all stages in one session — context accumulates):

Stage	Base Input	+ History	Total Input	Output	Est. Cost
terms-regulatory-kb	~12.8K	0	~12.8K	~6.0K	~$0.13
terms-cookie-notice	~11.9K	~6.8K	~18.7K	~6.0K	~$0.15
terms-policy-review	~12.3K	~13.6K	~25.9K	~6.0K	~$0.17
terms-service	~12.2K	~20.4K	~32.6K	~6.0K	~$0.19
terms-privacy-policy	~12.9K	~27.2K	~40.1K	~6.0K	~$0.21
Pipeline total			~130.1K	~30.0K	~$0.84

Running the full pipeline once typically costs $0.59–$1.09 in API tokens (Claude Sonnet 4.6).

Known Limitations & Workarounds

Limitation	Impact	Workaround
No real-time regulation monitoring	Can't auto-update when laws change	Run /terms:terms-policy-review periodically
No cookie scanning	Can't detect cookies automatically	Use browser DevTools or cookie scanner tool
No consent banner deployment	Can't deploy banner directly	Use generated code with WordPress, Shopify, or custom HTML
LLM knowledge cutoff	May miss very recent regulations	Documents note knowledge date; review skill accepts updates
English only	No multi-language support	Planned for v1.5
No industry-specific templates	HIPAA, GLBA, FERPA not yet covered	Planned for v1.2

Requirements

• Python 3.7+ (pre-installed in Cowork VM)
• python-docx library (auto-installed by setup skill)
• Basic text editor (for reviewing DOCX files)
• Word processor (Microsoft Word, Google Docs, LibreOffice for customization)

Installation

This is a Cowork plugin. To use:

1. Install the plugin in Cowork
2. Run /terms:terms-setup to initialize
3. Follow the prompts

Getting Started

New to legal policies?

• See USER-GUIDE.md for plain-language explanations

Want to understand what regulations apply?

• Run /terms:terms-regulatory-kb for article-level regulatory summary

Want to customize templates?

• See templates/README.md for customization guidance

Need policy review?

• Run /terms:terms-policy-review with your existing policy

Version History

• v1.1 (2026-03-15) — Deep regulatory domain knowledge: new regulatory KB skill, article-level GDPR/CCPA requirements, 7 US state privacy laws, per-regulation compliance checklists, consumer protection awareness, ePrivacy case law
• v1.0 (2026-03-02) — Initial release: privacy policy, terms of service, cookie policy, policy review, full pipeline

Important Disclaimers

• AI-Generated Content: This plugin uses AI (LLM) technology which can produce inaccurate or incomplete outputs. All content should be treated as a starting point and reviewed for accuracy before use.
• Not Professional Advice: Outputs do not constitute legal, financial, tax, medical, or other professional advice. Consult qualified professionals before making decisions based on generated content.
• No Compliance Guarantee: References to industry standards, regulations, or guidelines are for informational purposes only. This plugin does not guarantee compliance with any law or regulation. Users are responsible for verifying all outputs meet their specific regulatory requirements.
• No Endorsement or Affiliation: Mention of third-party products, standards, or organizations does not imply endorsement, partnership, or certification by those entities.
• Not Legal Advice: This plugin does not provide legal services or legal advice. All legal documents and analysis should be reviewed by a licensed attorney before use.