Privacy Policy Analysis

Read a company's privacy policy and pull out the data collected, purposes, third parties, user rights and GDPR and CCPA signals.

Pay by wallet (x402) AI-generated privacy-policy-analyze

Example

Example answer

{
  "purposes": [],
  "source_url": "https://accounts.google.com/ServiceLogin?passive=1209600&amp;continue=https://policies.google.com/privacy&amp;followup=https://policies.google.com/privacy&amp;ec=GAZAoQQ",
  "dpo_contact": null,
  "legal_basis": [],
  "user_rights": [],
  "company_name": "Google",
  "cookie_usage": null,
  "last_updated": null,
  "children_data": null,
  "third_parties": [],
  "data_collected": [],
  "missing_elements": [
    "No privacy policy content found - this is a login page only",
    "DPO contact information",
    "Data collection specifics",
    "Processing purposes",
    "Third-party sharing details",
    "Data retention periods",
    "User rights documentation",
    "Legal bases for processing",
    "International transfer mechanisms",
    "Cookie policy details",
    "Children's data handling",
    "Automated decision-making disclosure",
    "Right to lodge complaint with supervisory authority",
    "Last updated date",
    "Specific GDPR/CCPA compliance statements"
  ],
  "retention_periods": [],
  "ccpa_compliant_signals": [],
  "gdpr_compliant_signals": [],
  "international_transfers": []
}

Inputs

Field	Type	Required	What it is
`url`	string	Yes	Company website URL

Output fields

How reliably each field appears in a successful answer.

Field	Type	Appears
`purposes`	array	Always (present in every successful answer)
`user_rights`	array	Always (present in every successful answer)
`data_collected`	array	Always (present in every successful answer)
`missing_elements`	array	Always (present in every successful answer)
`gdpr_compliant_signals`	array	Always (present in every successful answer)

How to call it

The same tool through each route. MCP clients reach it through Strale’s server at https://api.strale.io/mcp; the call below is what the agent sends.

# Needs an API key. max_price_cents caps what this call may cost.
curl -X POST https://api.strale.io/v1/do \
  -H "Authorization: Bearer $STRALE_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "capability_slug": "privacy-policy-analyze",
    "inputs": {
      "url": "https://stripe.com/privacy"
    },
    "max_price_cents": 30
  }'

{
  "tool": "strale_execute",
  "arguments": {
    "slug": "privacy-policy-analyze",
    "inputs": {
      "url": "https://stripe.com/privacy"
    },
    "max_price_cents": 30
  }
}

import { Strale } from "straleio";

const strale = new Strale({ apiKey: process.env.STRALE_API_KEY! });
const result = await strale.do({
  capability_slug: "privacy-policy-analyze",
  inputs: {
    "url": "https://stripe.com/privacy"
  },
  max_price_cents: 30,
});

import os
from straleio import Strale, DoRequest

strale = Strale(api_key=os.environ["STRALE_API_KEY"])
result = strale.do(DoRequest(
    capability_slug="privacy-policy-analyze",
    inputs={
        "url": "https://stripe.com/privacy",
    },
    max_price_cents=30,
))

# No account. The first request answers 402 with the price in USDC;
# an x402 client pays it from your wallet and repeats the request.
curl -i 'https://api.strale.io/x402/v2/privacy-policy-analyze?url=https%3A%2F%2Fstripe.com%2Fprivacy'

Limitations

Analysis does not replace qualified legal review
AI-powered analysis identifies common GDPR requirements — does not replace legal review
What to do instead: Use the gap analysis output to brief your legal counsel on specific sections requiring human review
Separate policies need separate requests
Analyses the linked privacy policy page only — separate cookie policies or terms may not be included
What to do instead: Pass each policy URL (privacy, cookies, terms) as separate requests and combine the results
Output size cap per call
Structured output is limited to about 2000 output tokens per call; requests exceeding this limit are refused rather than returned truncated. Requests with large results can exceed this limit, and repeating the same request does not help.
What to do instead: Read the original policy directly for details that exceed the output limit.

Bundled checks that include it

Website GDPR Audit €1.00