Remember, your policy needs to accurately describe your specific Action, so not everything in this guide may be applicable and you may need to disclose practices not described here. If you handle information outside of the Google Assistant, such as through an app or website, your policy should consider all the ways the user could interact with your service and disclose the collection, use, and sharing for those interactions.
What information do you collect?
In your policy you should disclose all the information your Action collects. This includes information that you may collect automatically, such as server and HTTP logs, data transmitted by the Actions on Google API to you, and usage information. This also includes information that you get from the user, either directly or via the permissions API. You should also disclose whether you collect any persistent identifiers (like the Google ID).
How do you use the information?
In your policy, you should disclose how you use the information you collect. For example, you may use the information to provide certains services to users, to recognize them the next time they use your Action, or to send them promotional emails.
What information do you share?
In your policy, you should disclose the circumstances when you share information. For example, you may share information with third parties as part of the service (like a restaurant reservation Action), with other users (like a social network or forum), with marketing partners, or with service providers that assist with your service (like hosting companies or technology platforms).
Go to Google Sites and create a new site.
Click Publish and give your site a name.