Resources for insight and
inspiration
Guides
Insights
Privacy Policies for Startups: Building Trust (and Legal Compliance) from Day One
If your startup collects any personal data - like email addresses, names, payment details, or even IP addresses - you need a Privacy Policy. And not just any policy: it must be clear, compliant, and up to date. A strong Privacy Policy builds user trust and keeps your company out of legal trouble.
Active vs. Passive Terms of Service: What Your Business Needs to Know
For startup founders and entrepreneurs, implementing Terms of Service and Privacy Policies isn’t just a legal checkbox. It’s a strategic choice that affects user engagement, compliance, and protection against disputes. The way you implement these terms - active vs. passive - can significantly impact your business.
Terms of Service for Startups: What to Include and Why It Matters
If your startup has a website, app, or software platform, you need Terms of Service (ToS). These aren’t just formalities - they’re binding legal contracts that define how users interact with your product and limit your legal exposure.
Invention Assignment Agreements (CIIAAs & PIIAAs): Who Owns the IP?
Startups thrive on innovation. But unless you secure ownership of intellectual property (IP), the very assets that drive your company could walk out the door. That’s why founders use Confidential Information and Inventions Assignment Agreements (CIIAAs) and Proprietary Information and Inventions Assignment Agreements (PIIAAs).
FAQs
Open allAsset purchases, carve-outs, strong representations/indemnities, limited liability caps, escrow, and holdbacks are tools to limit exposure. But complete insulation may not be possible in stock or merger deals.
Key protections include representations and warranties, indemnification caps and baskets, survival periods, escrow or holdback amounts, earn-outs, and carveouts (e.g. for tax, IP, regulatory matters).
Yes - many agreements include conditions precedent, Material Adverse Change (MAC) clauses, break-up rights, or renegotiation triggers if due diligence uncovers issues. A poorly performing integration may also prompt adjustments.
Disclosure should be timed carefully to balance confidentiality and trust. Many deals maintain confidentiality until the signing, sharing information only under NDA and with key stakeholders, then broad communication following closing or in a controlled way.
- Asset sale: buyer chooses which assets (and some liabilities) to acquire - gives flexibility but requires consents.
- Stock sale: buyer acquires ownership interests (shares) - continuity is smoother but buyer inherits full liability.
Merger: legal consolidation of entities; often simplifies transfers but may trigger statutory rights (dissenters’ rights, shareholder votes).
The price is based on valuation methods (DCF, comparable companies, precedent transactions, asset approach) and then adjusted via negotiation, risk allocation, escrow, earn-outs, and working capital / debt adjustments.
Most deals take 6–12 months from initial negotiations to full integration. Complex deals, cross-border structures, or regulatory approvals can stretch this longer.
If you are collecting user data - even email addresses for a waitlist - yes. Privacy policies are required by laws like GDPR and CCPA and are expected by users. A simple, transparent policy early on builds trust and avoids compliance risks.
Yes - but only with caution. Permissive licenses like MIT or Apache are generally safe. Copyleft licenses like GPL or AGPL may require you to open source your entire codebase if combined improperly. Always review licenses before including open source code in your product.
It depends on your business model. Trademarks are generally a faster, cheaper way to protect brand identity and avoid conflicts. Patents are valuable for companies with novel inventions or defensible technology but are expensive and time-consuming. Many startups begin with trademarks and trade secrets, and pursue patents only if they become strategically necessary.
Not automatically. Unless a contractor signs an invention assignment agreement, they may retain ownership of what they create. Always use written agreements that explicitly assign all IP to the company.
Both give the right to purchase stock at a fixed price, but:
- Stock options are usually granted to employees as compensation.
- Warrants are often given to investors, lenders, or strategic partners as part of financing or business agreements.
Yes, but typically through NSOs, RSUs, or phantom equity rather than ISOs. International employees may require country-specific equity plans due to tax and legal differences. Always consult counsel before granting equity outside the U.S.
Not always. While founders begin with control, each financing round introduces new investors with board seats, voting rights, and protective provisions. Some founders implement dual-class stock or other structures to retain control, but most startups rely on alignment with investors rather than super-voting rights.
Dilution reduces your percentage ownership as new shares are issued, but it doesn’t necessarily reduce the dollar value of your stake. If a funding round increases valuation, your smaller percentage may still be worth significantly more in absolute terms.
It depends on the acquisition terms. Options may be assumed by the acquirer, cashed out, or accelerated. Double-trigger acceleration is common, meaning unvested shares vest if the company is acquired and the employee is terminated without cause.
At least once per year, or whenever a major event occurs (funding round, acquisition offer, significant revenue milestone). A current 409A valuation is required to set fair market value for stock option grants and to maintain compliance with IRS rules.
- RSAs (Restricted Stock Awards): Shares are issued upfront, subject to repurchase rights if unvested. Best for founders and early hires when valuation is low.
- RSUs (Restricted Stock Units): Shares are delivered only when vesting is complete. Best for later-stage hires when valuation is high.
An 83(b) election allows recipients of restricted stock to pay taxes at grant rather than as shares vest. Founders and early employees almost always benefit from filing, since share value is usually negligible at the start. Missing the 30-day deadline can create significant tax burdens later.
Yes. Even small teams benefit from reserving equity for future hires. Without a pool, you may run into hiring roadblocks or face last-minute dilution negotiations with investors. Most early-stage companies set aside 10–20% of total equity.

