Privacy policy

Draft for review. Commercial policy approval is still required.