Overview In this role, you will serve as the primary legal partner to Product, Engineering, and Data teams, guiding privacy, data governance, AI, and regulatory compliance across the product lifecycle. You will help shape scalable, compliant product features and policies for ShopMy's global platform. You'll develop and implement AI and privacy frameworks, advise on public-facing terms and disclosures, and collaborate cross-functionally to manage legal risk. This is an opportunity to influence how technology and culture converge to power curated commerce at scale.
Compensation / Benefits- Medical & Dental Coverage at 70%
- Equity in ShopMy
- Flexible PTO
- 14 weeks parental leave
- Wellness & Social Stipend
- Technology Stipend
Responsibilities- Advise Product and Engineering on legal risk across new and existing features and initiatives
- Lead data governance efforts including data mapping, DPAs, and cross-functional data handling policies
- Ensure compliance with US and international privacy laws (CCPA/CPRA, GDPR, and emerging regulations) across platform and creator tools
- Own ShopMy's AI policy and guidance on responsible AI development and deployment
- Support product marketing, disclosures, terms of use, and privacy policies
- Provide contract and compliance advice for product integrations and tech partnerships
- Collaborate with Legal Operations, Security, and other functions to build scalable compliance frameworks and training
- Monitor regulatory developments and flag privacy, AI, content moderation, and platform regulation risks
- Contribute to risk management and safeguarding data confidentiality across systems
Key requirements- J.D. from an ABA-accredited U.S. law school; bar in good standing in at least one state
- 5+ years advising on product development, privacy, or technology compliance (in-house tech experience preferred)
- Deep knowledge of U.S. and international privacy/data protection laws (CCPA/CPRA, GDPR)
- Experience advising on AI, ML, or automated decision-making from legal/compliance perspective
- Ability to translate complex regulatory concepts into practical guidance for non-legal stakeholders
- Collaborative team player with cross-functional relationship-building skills
- Proactive problem-solver capable of independent, scalable work
- Clear communication
- Collaborative mindset
- Proactive problem-solving
- Privacy and data protection laws (CCPA/CPRA, GDPR)
- AI policy and governance
- Data mapping and data governance
