MVP vs Red Tape
I've just started a live beta of a project I'm working on. A techy friend immediately told me about GDPR, Ts&Cs, compliance issues etc. that I need to include on the site. I'm doing is processing user-uploaded pdfs, and letting users download the result. I realize that there are potential privacy concerns and deletion policies, but it's not rocket science and feels like I need a lawyer.
How do you handle all the red tape at the MVP stage?
Are you charging money for this service?
I think for now you should focus on ensuring that users information doesn't get into other users hands. Either by cross contamination or hacking.
I am sure you're deleting the PDFs once processed, best practice would be to keep user files for as short a time as needed.