Terms of Service & Privacy Policy The two documents standing between your platform and every user on it.

blue rocket ship launching in front of blue gears and a blue graph

The day your software or software-as-a-service (SaaS) platform opens to real users, two documents start doing more legal work than everything else in your business combined. Your Terms of Service define the entire relationship with every customer you will ever have, and your Privacy Policy is a legal requirement the moment you collect so much as an email address at signup.

Most founders of digital platforms or SaaS businesses handle both with a template copied from a bigger company’s site. The problem is that terms describe how a specific platform operates, and a template describes how someone else’s does. When a user dispute, a chargeback, or a privacy complaint arrives, the gap between what your documents say and what your product actually does is exactly where the liability lives.

We draft Terms of Service and Privacy Policies for SaaS platforms, e-commerce businesses, and digital products, built around how your platform actually works and aligned with the way you operate it. If you sell software, subscriptions, or access to a platform, this page is written for you.

Our approach: the waterfall

The strongest protection for a SaaS business is built in layers, so that if one layer fails, the next catches. We call it the waterfall, and we build it into every set of terms we draft. Here is what each layer actually does:

  1. A services carveout that defines exactly what you sell. Most platforms sell access rather than outcomes, and the carveout is where that gets said legally. If your SaaS connects two parties, such as customers and providers or buyers and sellers, the carveout makes their disputes theirs rather than yours, the same way Uber helps resolve rider complaints every day without being liable for a driver’s conduct. Your business practices have to match the carveout for it to hold, which is why we review your user flows alongside the drafting.

  2. Risk acknowledgements. The user agrees upfront to the realities of relying on a platform, starting with the fact that nobody can promise 100% uptime. Acknowledgements do a second job that is easy to miss: a user who has already agreed in writing that they accepted a risk is a user who thinks harder before suing over it.

  3. Disclaimers. These set the limits of what you take responsibility for, and a SaaS platform typically needs three kinds: warranty disclaimers that manage consumer-protection law, liability disclaimers for errors and omissions, and third-party disclaimers for the payment processors, integrations, and plug-ins your platform depends on but does not control.

  4. A release. The logical next step after an acknowledgement: for the risks the user accepted and the things you disclaimed, the user releases you from the resulting claims and costs. One honest caveat belongs here. None of these layers stops anyone from filing a lawsuit. What they do is give you a clean, layered defence when someone does, which is usually the difference between a nuisance and a crisis.

  5. A limitation of liability. If every layer above fails and you are actually found liable, this clause caps what you owe, typically at the amount the user paid you over some defined period. Courts scrutinize these caps, and a cap designed to be genuinely fair is a cap that survives that scrutiny; a cap designed to be clever usually does not.

  6. Insurance. Not a clause in the terms but a layer in the strategy: the goal of everything above is that when something does go wrong, a claim lands on your insurer instead of your company’s savings, and settling through insurance is almost always cheaper than paying lawyers to fight. We check that your coverage and your terms actually line up, because a gap between them is where the waterfall leaks.

  7. Dispute resolution designed with care. Arbitration can be cheaper, faster, and private. However, a one-sided clause can be worse than none. In Uber Technologies Inc. v. Heller (2020 SCC 16), the Supreme Court of Canada struck down Uber’s arbitration clause as unconscionable because it required drivers to arbitrate in the Netherlands with about US$14,500 in up-front fees, and the ruling opened the door to a class action. A dispute-resolution clause has to be fair enough to survive, or it protects nothing.

The layers only work if your platform’s real practices match them, which is why our process starts with your SaaS rather than a precedent, so we go through your user flows, your signup, your billing, and your support process, and we regularly end up improving the operations as well as the documents.

The Privacy Policy side

If your product collects personal information from users, PIPEDA applies, and your policy has to describe what you actually collect, why, where the data lives, who processes it, and how users exercise their rights. Health-related information carries its own regime (PHIPA in Ontario), Quebec’s Law 25 adds stricter requirements including a designated privacy officer, and products with EU users face GDPR. We scope the policy to the laws your real user base triggers, and we tell you which ones you can defer.

Launching a SaaS or digital product?

The pre-launch legal work, as a working checklist: IP ownership, the Terms of Service liability layers, what your Privacy Policy actually has to say, and the regulated-space checks most founders skip. Built for Ontario founders rather than US boilerplate.

Free. We’ll email it to you right away.

Two ways to engage us

  • The lighter option: core liability terms only. The waterfall, built into your terms, without the full business-alignment pass. Enough to launch responsibly while the product finds its footing, with a fuller engagement planned for when you scale.

  • The comprehensive option: Terms of Service and Privacy Policy, aligned end to end. We review the front and back of your platform, align the documents with your user flows and business practices, walk you through every section so you understand your own terms, and support your team through implementation.

Neither option is the default for everyone. Most pre-launch products start lighter; products handling payments, sensitive data, or regulated activity usually need the full package from day one. On your first call, we will tell you clearly which one fits.

The lighter optionThe comprehensive option
What you getThe liability waterfall, built into your termsTerms of Service + Privacy Policy, aligned end to end with your product
The processFocused drafting around your core risksPlatform review (front and back), strategic deep dive, section-by-section walkthroughs, implementation support
Business-practice alignmentYour responsibility to maintainReviewed and tuned as part of the engagement, because we regularly improve the operations, not just the documents
Right forPre-launch products finding their footing, with a fuller pass planned at scaleProducts handling payments, sensitive data, two-sided marketplaces, or anything regulated
The honest trade-offCheaper and faster now; the staged path usually costs more in totalMore upfront; one process instead of two

When to do this, relative to launch

  1. Product built, no users yet: the ideal moment. Terms cannot retroactively govern someone who signed up before they existed. Engaging here means the documents and the user flows grow up together.

  2. Beta or first paying users: still good, move quickly. Every new user is joining under whatever defaults currently govern, and switching terms later has its own legal rules about notice and acceptance.

  3. Live and growing: the review-and-replace path. We review what you have (often a borrowed template), map it against what your product actually does, and replace it properly, including the mechanics of migrating existing users onto the new terms without a court later severing the change.

  4. After something has gone wrong: the expensive moment. A dispute, a chargeback pattern, a privacy complaint. Still fixable, and the fix now happens under pressure with an incident attached. Every founder we meet here wishes they had booked the call at stage one or two.

How much do Terms of Service cost?

Terms of Service and Privacy Policy work is clearly-scoped, so both options above are flat-fee, and you will have the exact number in writing after a free discovery call, before you commit to anything. That is our no surprise billing policy. Learn how our fees work.

Frequently Asked Questions

Do I legally need Terms of Service?

No law forces you to publish terms, and operating without them means the default rules of contract and consumer-protection law govern every user relationship, and those are rules written by nobody with your business in mind. Terms of Service exist to replace those defaults with a relationship you actually chose.

Do I need a Privacy Policy in Canada?

If your product collects personal information from users, including just an email address at signup, PIPEDA applies and you need a policy that reflects your real data practices. A template copied from another site describes someone else’s practices, and describing someone else’s practices protects nobody.

Can I just use a template?

For a simple site that collects nothing and sells nothing, sometimes. For a product that takes payments, stores user data, or connects two sides of a marketplace, the template’s silent gaps are the risk, namely the clauses it does not have for the things only your product does.

When should I get this done, before or after launch?

Before users, before payments, and before data. Terms cannot retroactively govern a user who signed up before they existed, and changing published terms has its own legal rules. The cheapest time to do this properly is before the first real user.

Reviewed by Sukhi Hansra, Business and Franchise Lawyer at Hansra Law.

Free discovery call

Tell us about your situation. We will tell you clearly what it needs and what it does not.

Book your free discovery call

or call 416-580-0345

No surprise billing

Written quotes on everything. Flat fees where the scope is clear.

See how our fees work →

SaaS Legal Launch Checklist

The legal items that need to exist before your product takes real users, as a free checklist.

Get the checklist

Related Services

Hansra Law We help business owners reduce uncertainty and rapidly grow their business

Schedule a FREE discovery call before you sign your next deal, contract or agreement.

Most owners deal with the legal side only after something goes wrong. By that time, you could spend tens of thousands of dollars unwinding what a quick conversation could have prevented. It doesn’t have to be that way if you have the right lawyer in your corner!