Privacy policy on non-US website targeting US clients
Hi all,
I'm Brazilian and I'm building a project targeting US clients/customers, charging in USD, etc...
While visiting websites that generate privacy policy (like freeprivacypolicy.com), I found a number of acts like CalOPPA and CAN-SPAM and I'm unsure if I can get in trouble if I cannot guarantee all that stuff, for example, if my website is hacked and steals my users' emails database.
For payment, I plan to use those popular gateways and not store credit cards in my database.
Also, legally, is there any difference between hosting my website in AWS Brazilian datacenter and AWS US datacenter?
In summary, should I just generate a generic privacy policy and not really worry much about that?
Thanks.
How can they sue you if you are not in the US? I wouldn't worry about it.
What they can do is close your payment processor account or Google AdSense account for violating their ToS that require you have a privacy policy page. But I don't think anyone checks it, unless someone has a grudge against you and start reporting you.
That's what I would do
Nice to hear your opinions, thanks!