The privacy policy was a red flag for me.