We are a digital product holding operating AI-powered applications in the App Store and Google Play, with planned expansion into web products. Our portfolio includes AI companion apps operating in the high-risk / 18+ segment. We are looking for a hands-on compliance consultant on a long-term retainer — not a theorist, but a practitioner who has done this work operationally.
Scope of Work
1. Mobile Apps (App Store / Google Play)
Ongoing compliance with Apple App Review Guidelines and Google Play AI Policy
Pre-development legal assessment of new features
Drafting and maintaining: ToS, Privacy Policy, Content Policy, EULA, consent screen copy
Review of screenshots, icons, store listings for compliance and visibility risks
Responding to app suspensions and developer account bans; preparing and managing appeal submissions
2. Web Products
Supporting web expansion: GDPR, DSA, UK Online Safety Act, US state laws
Age verification architecture and documentation
Cookie consent implementation, legal structure for conversion funnels
DMCA agent setup and takedown procedures on aggregators
3. Advertising & Media Buying
Review of creatives and landing pages for ad platform policy compliance
Legal framework and process documentation for cloaking operations
Legal aspects of tracking and advertising infrastructure
4. Partner & Affiliate Relations
IOs and contracts with content providers
Templates and review of incoming partner documents
Agreements with traffic partners and platforms (BD side)
5. Corporate Structure
Jurisdiction assessment for developer accounts and new business lines
Support for entity setup, maintenance, and wind-down
Substance requirements, banking locality nuances, nominee solutions
Responding to tightening KYC requirements from stores and acquirers
6. Payments & Payouts — Legal Side
KYC and due diligence for high-risk payment providers
Legal aspects of crypto settlements with contractors and partners
Payout wording and jurisdiction-specific nuances
Legal counsel alongside finance — not an accountant or CFO
7. Internal Contracts & Policies
Employee and contractor agreements: IP assignment, NDA, confidentiality, access policy
Internal policies including AI-generated content use in marketing
8. Compliance Infrastructure & Incident Response
Internal playbook for key scenarios: app ban, cease & desist, processor warning, law enforcement request, developer account rejection
Pre-launch compliance checklist for new products and new verticals
Regular monitoring of regulatory and platform policy changes
Incident response framework
Required Experience
Hands-on compliance work with AI, adult content, or UGC platforms — mandatory
Proven experience with App Store / Google Play review processes and account recovery
Working knowledge of high-risk payment processors: CCBill, Segpay, Vendo, Nuvei
GDPR, DSA, UK Online Safety Act, CCPA — operational (not just theoretical) experience
Corporate structuring across multiple jurisdictions
Affiliate and partner agreement experience in digital / performance marketing
Nice to Have
CSAM detection infrastructure (Thorn, PhotoDNA, Hive) and NCMEC/IWF reporting
EU AI Act familiarity (Art. 50 deepfake disclosure, Art. 5 prohibited systems)
Prior experience advising on cloaking operations from a legal standpoint
Not a Fit
Corporate or banking lawyers without digital / adult industry experience
Theoretical legal expertise without operational track record
No experience with App Store policies and reinstatement processes
First 3-Month Deliverables
Compliance audit across all 8 areas — risk map
Incident response playbook for the operations team
Updated legal document package (ToS / PP / Content Policy / EULA)
Pre-launch checklist for new products and verticals
Scope of Work
1. Mobile Apps (App Store / Google Play)
Ongoing compliance with Apple App Review Guidelines and Google Play AI Policy
Pre-development legal assessment of new features
Drafting and maintaining: ToS, Privacy Policy, Content Policy, EULA, consent screen copy
Review of screenshots, icons, store listings for compliance and visibility risks
Responding to app suspensions and developer account bans; preparing and managing appeal submissions
2. Web Products
Supporting web expansion: GDPR, DSA, UK Online Safety Act, US state laws
Age verification architecture and documentation
Cookie consent implementation, legal structure for conversion funnels
DMCA agent setup and takedown procedures on aggregators
3. Advertising & Media Buying
Review of creatives and landing pages for ad platform policy compliance
Legal framework and process documentation for cloaking operations
Legal aspects of tracking and advertising infrastructure
4. Partner & Affiliate Relations
IOs and contracts with content providers
Templates and review of incoming partner documents
Agreements with traffic partners and platforms (BD side)
5. Corporate Structure
Jurisdiction assessment for developer accounts and new business lines
Support for entity setup, maintenance, and wind-down
Substance requirements, banking locality nuances, nominee solutions
Responding to tightening KYC requirements from stores and acquirers
6. Payments & Payouts — Legal Side
KYC and due diligence for high-risk payment providers
Legal aspects of crypto settlements with contractors and partners
Payout wording and jurisdiction-specific nuances
Legal counsel alongside finance — not an accountant or CFO
7. Internal Contracts & Policies
Employee and contractor agreements: IP assignment, NDA, confidentiality, access policy
Internal policies including AI-generated content use in marketing
8. Compliance Infrastructure & Incident Response
Internal playbook for key scenarios: app ban, cease & desist, processor warning, law enforcement request, developer account rejection
Pre-launch compliance checklist for new products and new verticals
Regular monitoring of regulatory and platform policy changes
Incident response framework
Required Experience
Hands-on compliance work with AI, adult content, or UGC platforms — mandatory
Proven experience with App Store / Google Play review processes and account recovery
Working knowledge of high-risk payment processors: CCBill, Segpay, Vendo, Nuvei
GDPR, DSA, UK Online Safety Act, CCPA — operational (not just theoretical) experience
Corporate structuring across multiple jurisdictions
Affiliate and partner agreement experience in digital / performance marketing
Nice to Have
CSAM detection infrastructure (Thorn, PhotoDNA, Hive) and NCMEC/IWF reporting
EU AI Act familiarity (Art. 50 deepfake disclosure, Art. 5 prohibited systems)
Prior experience advising on cloaking operations from a legal standpoint
Not a Fit
Corporate or banking lawyers without digital / adult industry experience
Theoretical legal expertise without operational track record
No experience with App Store policies and reinstatement processes
First 3-Month Deliverables
Compliance audit across all 8 areas — risk map
Incident response playbook for the operations team
Updated legal document package (ToS / PP / Content Policy / EULA)
Pre-launch checklist for new products and verticals