Lillup · 3 hours ago
Legal Intern (Terms & Conditions, Privacy Policy, Global Data Compliance — On-Device AI Product) - (Remote, Unpaid)
Lillup is a technology company focused on building a privacy-first, fully embedded AI product. They are seeking a Legal Intern to assist in drafting Terms & Conditions and Privacy Policy for a global launch, with a strong emphasis on compliance and user privacy.
Responsibilities
Draft, review, and iterate Terms & Conditions tailored to a consumer-facing, on-device AI application
Define and structure key clauses: eligibility, acceptable use, disclaimers/limitations, user responsibilities, IP, license scope, termination, liability limitations, arbitration/venue (if used), and support boundaries for an embedded product
Align terms with app-store distribution requirements (Apple/Google policy considerations where relevant)
Draft and refine a Privacy Policy aligned with a local-first architecture (what data is processed on-device, what is stored, what is shared—ideally minimal)
Map user permissions and device-level access (e.g., microphone for voice input) to compliant disclosures
Build “plain-language” explanations and compliance-ready sections: data categories, purposes, retention, user controls, security measures, contact channels, and update mechanisms
Research and summarize privacy and consumer protection obligations for a global, non-EU rollout (e.g., U.S. state privacy laws such as CCPA/CPRA, children’s privacy where relevant such as COPPA, and other applicable regimes depending on launch regions)
Contribute to a compliance matrix (jurisdiction → obligations → product/policy impact)
Support the definition of geo/eligibility statements and operational safeguards consistent with “no EU at launch.”
Assist with risk reviews related to an embedded AI product: disclosures, user expectations, limitation-of-advice language (where appropriate), safety framing, and misuse scenarios
Support lightweight compliance audits and documentation hygiene (versioning, redlines, policy history)
Organize templates, clause libraries, and policy artifacts
Maintain a structured repository of research notes and references for future iterations (including potential EU re-entry workstreams later)
Qualification
Required
Currently enrolled in, or a recent graduate of, law school (or a related legal program)
Strong interest in technology law, privacy/data protection, consumer product terms, and AI policy
Solid research and drafting skills; ability to translate legal requirements into clear, user-facing language
Detail-oriented, organized, and comfortable working with product/engineering
Ability to handle confidential information with discretion
Preferred
Familiarity with U.S. privacy frameworks (CCPA/CPRA), app marketplace policy constraints, and global privacy concepts (retention, data minimization, lawful bases equivalents outside EU, etc.)
Interest in monitoring the EU AI Act and EU privacy requirements for a potential future EU launch (not in launch scope, but helpful for roadmap readiness)
Benefits
Flexible work schedule compatible with academic commitments.
Mentorship and cross-functional collaboration with product and engineering.