Solo
39 € incl. VAT
- Six documents
- Your own service
- Markdown, HTML, and App Router ZIP
Indie SaaS · GDPR · one-time payment
A GDPR pack whose DPA names Vercel, Stripe, and Clerk.
A one-off generator sells legal notices, terms of use, terms of sale, and a privacy policy — not an Article 28 DPA with named sub-processors. A subscription product bills every year. A lawyer drafts the DPA on a quote. StackLégal: you check your stack, and the six documents cite them. Annex 3 is your list. Markdown files and App Router pages, ready for a git add.
This is not legal advice. StackLégal is not a law firm. The texts are templates to review, to adapt to your business, and to have checked when the stakes warrant it (health, finance, minors, enterprise). No compliance guarantee, and no “12-month label”.
- Vercel Inc. · US
- Stripe Payments Europe · IE
- GitHub, Inc. · US
- Clerk, Inc. · US
- Supabase, Inc. · US
- Resend, Inc. · US
- PostHog · US/EU
- Plausible Insights OÜ · EE
- Google Ireland · IE
- OpenAI Ireland · IE
- Anthropic, PBC · US
- Cloudflare, Inc. · US
Sourced sheets (DPA, data location, Data Privacy Framework): GDPR for your stack · Vercel · Stripe · Supabase · Clerk · Resend · Next.js · check your stack.
Why a generic generator is no longer enough the week a B2B customer arrives
An indie selling a SaaS in Europe needs a privacy policy, terms, and a legal notice before a business customer asks for the Article 28 agreement and the sub-processor list. General-purpose generators stop at those pages, often with a generic “our providers”. That list is not your stack.
StackLégal does not invent ISO or SOC 2 clauses. It issues vendor paragraphs only for the boxes that are checked. If you do not use OpenAI, OpenAI does not appear.
The six files
Legal notice
Publisher, a contact, and the host (Vercel prefilled). Written for the GDPR in general. It is not a national imprint: add what your country requires.
Terms of use
Access, accounts, IP, reversibility, and a DSA baseline if there is UGC.
Terms of sale
Price, trial, renewal, and a 14-day withdrawal for consumers under Directive 2011/83/EU. No French flat-rate indemnity.
Privacy
Roles, purposes, retention periods, named sub-processors.
DPA
Article 28: subject matter, instructions, an honest security statement, breach without undue delay, audits, deletion, transfers. Annex 3 = stack.
Public list
Sub-processors, plus a 30-day objection for business customers.
Three ways to obtain the pages
| One-off generator | Subscription product | Lawyer's quote | StackLégal | |
|---|---|---|---|---|
| Price | A low one-off fee | A yearly subscription | A quote for the DPA | From 39 € incl. VAT |
| Legal notices / terms of use / terms of sale / privacy | Yes | Yes | Yes | Yes |
| Article 28 DPA | No | Separate module, subscription | Yes | Included |
| Named sub-processors (your stack) | Rarely | Generic / cookie-first | On a quote | Checkboxes |
| Git export (md + App Router) | Copy-paste | Script / widget | Word | Ready ZIP |
| Account / subscription | Varies | Yes | Case file | None |
Before you pay
What the pack is, and what it is not
Refund details are on the page Refund. Sourced vendor sheets are on GDPR for your stack.
What is in the pack?
Solo (39 € incl. VAT): a privacy policy, terms of use, terms of sale, a legal notice, an Article 28 DPA, and a public sub-processor list, drafted here for the GDPR in general. The same six documents in French follow the LCEN and CNIL guidance instead. Pro (89 € incl. VAT) adds the DPA and the sub-processor list in English. Agency (179 € incl. VAT) includes the Pro tier and allows an unlimited number of client projects. The ZIP contains the Markdown, App Router pages, and an HTML version. Only the tools that are checked are named.
Who is it for?
For an indie who sells a SaaS and must publish the legal pages before a business customer asks for the Article 28 agreement. Not for a cookie banner, a site scanner, or a health, finance, or minors file.
Is this legal advice?
No. StackLégal is not a law firm. The texts are dated templates, to be reviewed and adapted. No compliance guarantee.
What if I want a refund?
One-time payment on Gumroad: 39 €, 89 €, or 179 € incl. VAT, depending on the offer. A consumer has 14 days to withdraw, so long as the ZIP has not been downloaded with a waiver of that right. Failure to deliver: a full refund within 14 days, by email or from the Gumroad receipt. The fact that the templates must be reviewed does not give rise to a refund.
One-time payment
Three offers
No account. No subscription. The Gumroad key on the receipt opens the ZIP for the tier purchased.
Pro
89 € incl. VAT
- Everything in the Solo tier
- DPA in English
- Sub-processor list in English
Agency
179 € incl. VAT
- Everything in the Pro tier
- Unlimited client projects
- License in the ZIP
Before the pack: the record of processing activities (Article 30), 19 € incl. VAT, one row per tool checked. Check your stack