Privacy

TODO: the privacy text is not written yet. It ships before the first invite goes out.