Legal Documents Small Creators Actually Need

A solo creator selling paid fan interactions needs four self-published documents: a short terms of service page, a privacy notice covering fan data, a written scope for custom work, and a refund or cancellation policy. Keep basic records of what was sold, delivered, and paid. None of the four are government filings.

Three things sit outside that list and still apply. Tax reporting is separate: the Internal Revenue Service states that a person must file an income tax return if net earnings from self-employment were $400 or more (IRS, Self-employed individuals tax center). A posted privacy policy is a legal requirement, not a nicety, for a commercial site collecting personal information from California residents. And business-license, tax-registration, and professional-licensing rules vary by city, state, and the kind of work being sold, so check the rules where you live before assuming the four-document list is complete.

Most "small business legal checklist" articles are written for someone opening a storefront, hiring staff, or shipping inventory — not a creator selling a $15 shoutout or a $40 resume review from a link in their bio. The U.S. Bureau of Labor Statistics reported that in July 2023, 11.9 million people were independent contractors on their sole or main job, representing 7.4 percent of total employment. Pew Research Center found that 16% of U.S. adults have ever earned money through an online gig platform, including 9% who had done so in the previous 12 months. Neither survey breaks out creators selling paid interactions directly to fans, so both figures describe how common solo self-employment is rather than counting creators. The list below is scoped to that reality: what protects you and your fans now, not what a lawyer would draft for a venture-backed company.

What is the minimum legal document set for a solo creator?

The minimum set is four documents a creator writes and publishes: a terms of service page, a privacy notice, a written scope for custom work, and a refund or cancellation policy. Business registration, an EIN, and forming an LLC are separate decisions. Local licensing rules vary by activity and location and sit outside the four.

None of these four require a lawyer to draft from scratch. Each one just needs to say, in plain language, what a fan should expect before they pay. What the four-document list does not cover is local permission to operate, which is genuinely location-dependent — the U.S. Small Business Administration states that licensing "requirements and fees vary based on your business activities, location, and government rules":

"Most small businesses need a combination of licenses and permits from both federal and state agencies." — U.S. Small Business Administration, Launch your business

A creator selling shoutouts from a bedroom is a different case from a licensed professional giving regulated advice, so treat the four documents as the floor and the local rules as the part you have to look up yourself.

Which document to write first, by what you sell

When the four-document floor is not enough

Some offers change the document list immediately rather than gradually. Selling advice in a licensed field, handling sensitive data, or taking requests from minors moves a creator out of the ordinary-shoutout case before volume or revenue ever grows. The current text of 16 CFR § 1.98 sets the maximum civil penalty for a COPPA violation at $53,088 per violation for penalties assessed after January 17, 2025 (eCFR, 16 CFR § 1.98, current text). The Federal Trade Commission revises that maximum for inflation under the Federal Civil Penalties Inflation Adjustment Act and publishes each revision in the Federal Register, so read the current eCFR section before relying on the dollar figure.

Do you need a terms of service page to accept fan payments?

A terms of service page is not a government filing: you write and publish it yourself, and no agency registers it. What binds a creator is the law governing what you promise — federal advertising rules, state consumer-protection law, and your payment platform's terms. Posting a short page puts price, delivery, refund, and conduct rules in writing before a dispute.

Publishing no terms page does not put a creator outside federal rules. The Federal Trade Commission's Endorsement Guides, codified at 16 CFR Part 255, require an endorser to disclose a material connection to an advertiser when that connection would not be reasonably expected by the audience (FTC) — an obligation that attaches to a creator's promotional posts whether or not a terms page exists. State law can also mandate a published page even where federal law does not: California Business and Professions Code § 22575 requires a conspicuously posted privacy policy from any commercial website or online service collecting personally identifiable information from California residents.

The full breakdown of what a terms page should cover, and how it differs from a platform's own built-in policy, lives on do you need terms of service to accept fan payments. The short version: FanBell's purchases and refunds policy covers baseline order terms for every transaction on the platform, but that policy does not cover creator-specific choices like your own conduct rules or content boundaries, which is what a personal terms page is for.

Do you need a written contract for custom work?

No federal filing or signature is needed to sell a one-off creator service such as a review or shoutout. Written-contract duties come from state and city law instead: New York State and New York City each require a written contract for freelance work worth $800 or more. A short scope covering price, deliverable, revisions, and turnaround resolves most disputes.

New York City's Freelance Isn't Free Act requires a written contract for any freelance work worth $800 or more, whether from a single job or several jobs for the same client within 120 days (NYC Department of Consumer and Worker Protection):

"All contracts worth $800 or more must be in writing. This includes all agreements between you and the hiring party that total $800 in any 120-day period." — NYC Department of Consumer and Worker Protection

New York State extended a comparable rule statewide: the New York State Department of Labor states that on August 28, 2024, the Freelance Isn't Free Act added Article 44-A to the General Business Law to provide protections to freelance workers, including a right to a written contract (NYS Department of Labor). Both New York rules place the written-contract duty on the hiring party rather than the freelancer, so a creator is the protected side — but a creator who cannot produce a written scope is the one who loses a scope argument. The $800 New York thresholds are jurisdiction-specific rather than national, and they show why "no contract needed" stops holding once a request gets large or repeats with the same buyer. For what a working scope agreement should say, see do you need a contract to sell personalized creator services.

Do you need a privacy policy if you collect fan data?

Often yes. California Business and Professions Code § 22575 requires any commercial website or online service that collects personally identifiable information from California residents to conspicuously post a privacy policy, with no revenue or size threshold. Comprehensive state privacy laws such as California's CCPA are the separate case, applying only above thresholds a one-person creator business rarely meets.

Start with the requirement that has no threshold. California Business and Professions Code § 22575 obliges an operator of a commercial website or online service that collects personally identifiable information about California consumers to conspicuously post a privacy policy, and an operator is in violation only if it fails to post within 30 days of being notified of noncompliance. Because that rule turns on collecting data from California residents rather than on company size, a solo creator with any California fans is inside it. That is why the answer here is "post a short notice," not "wait until you are big enough to matter."

The comprehensive state privacy laws are the ones with size thresholds. California's Consumer Privacy Act applies to a for-profit business only if it has gross annual revenue over $25 million, buys, sells, or shares the personal information of 100,000 or more consumers or households a year, or derives 50% or more of annual revenue from selling or sharing personal information (California Office of the Attorney General, CCPA overview). Virginia's Consumer Data Protection Act applies only to businesses that control or process personal data of at least 100,000 consumers in a calendar year, or of at least 25,000 consumers while deriving over 50 percent of gross revenue from the sale of personal data. The Colorado Privacy Act uses the same 100,000-consumer and 25,000-consumer structure for controllers doing business in the state. Texas took a different route: the Texas Attorney General states that small businesses as defined by the federal Small Business Administration are generally exempt from the Texas Data Privacy and Security Act, except for a consent requirement on sales of sensitive data.

A creator selling shoutouts alone will not normally reach any of the three CCPA triggers, and the Virginia and Colorado consumer counts sit far above a one-person operation's fan list. Falling below every comprehensive state privacy threshold is what people mean by "those laws don't apply to you," and falling below them does not cancel the CalOPPA duty to post a privacy policy. Published counts of how many states have comprehensive privacy laws disagree, so treat any single number as a tracker's estimate rather than a settled fact. Bloomberg Law's state privacy legislation tracker states that 20 states have comprehensive data privacy laws in place. BSA | The Software Alliance writes that 22 states have enacted comprehensive consumer privacy laws. The two trackers count differently, so use either for orientation and confirm the law in your own state directly. Check your own state's attorney general page rather than a headline count. A short note — what you collect, why, and that you don't sell it — satisfies both the CalOPPA posting duty and the practical need. FanBell's own privacy policy covers data FanBell collects as the payment platform; that policy does not replace a note about anything you collect separately, like a mailing list. Fans sometimes assume a data-collecting checkout means a forced signup, so it's worth being clear that creating an account isn't required to pay a creator on most setups.

Do you need your own refund or cancellation policy?

You do not file a refund policy with any agency, but the card networks tell merchants to publish one. Visa's dispute-resolution guidance instructs businesses to state return, refund, and cancellation policies clearly at the time of transaction, and warns that failing to disclose them weakens the merchant's position in a later dispute.

"Be clear about return, refund and cancellation policies. State your policies clearly at the time of transaction." — Visa, Dispute Resolutions

FanBell already publishes a purchases and refunds policy that applies to every order, so a creator on FanBell is not starting from zero. What a creator's own note adds is specificity: how you define "not what I asked for" for a shoutout, whether a missed turnaround gets a partial or full refund, and what happens if a fan submits a request outside the scope they paid for. On FanBell, a creator can decline and refund a request directly rather than being forced to deliver outside the agreed scope. Writing that expectation down in your own words, even briefly, reduces the number of "can I get a refund?" messages you have to negotiate case by case. It also heads off a related worry fans bring to checkout — whether it's safe to enter card details on a small creator's page.

What records should you keep for taxes and disputes?

Keep records of what was sold, delivered, and paid: order confirmations, payout statements, delivery notes, and receipts for deductible expenses. No special software or formal filing system is required. The Internal Revenue Service frames retention by purpose rather than format, tying how long you keep a record to how long it may be needed as proof.

"You must keep your records as long as needed to prove the income or deductions on a tax return." — Internal Revenue Service, Recordkeeping

The Internal Revenue Service sets a general period of limitations of 3 years for keeping records that support income or deductions on a return, with longer periods in listed cases such as substantially underreported income (IRS). Order confirmations, payout records, and delivery notes double as dispute evidence: if a fan later claims they never received a shoutout or never agreed to a price, an order record settles the question faster than a memory of a DM exchange. Keeping payout records straight is easier once you know when a payout actually lands after a sale.

When do these documents start to matter more?

The four-document baseline covers most solo creators selling occasional paid interactions, and matters more as volume, dollar amounts, and risk exposure grow. Business registration, an EIN, and forming an LLC are separate decisions from the four documents. Federal tax rules define narrowly when an EIN actually becomes necessary.

The Internal Revenue Service states that you need an EIN if you have employees, will need to pay employment or excise taxes, or withhold taxes on non-wage income paid to a non-resident alien (IRS, Employer identification number) — none of which describes a solo creator selling shoutouts under their own name, who reports business income on Schedule C (Form 1040) as a sole proprietor. That default is a well-trodden path: for Tax Year 2019, approximately 27.8 million individual income tax returns reported nonfarm sole proprietorship activity. FanBell likewise does not require a business entity to open a page and start selling — for the fuller picture of exactly when a creator does and doesn't need an EIN, see do you need an EIN as a creator. What is genuinely variable is local permission: the U.S. Small Business Administration states that business license "requirements and fees vary based on your business activities, location, and government rules" (SBA), and a creator giving regulated advice — legal, medical, financial, or another licensed profession — may face rules that a creator selling a birthday shoutout never encounters.

Business insurance is a separate line to watch, and the mandatory part is tied to having employees rather than to selling. The U.S. Small Business Administration's business guide says businesses with employees must carry "workers' compensation, unemployment and disability insurance" — a duty a one-person creator business with no employees does not trigger at all. Read that SBA line with a jurisdictional caveat: workers' compensation for private-sector employees is administered by state boards, not federally, and the U.S. Department of Labor directs individuals injured while employed by private companies to contact their state workers' compensation board. Statutory disability insurance is narrower still: the U.S. Department of Labor's Employment and Training Administration reports that temporary disability insurance programs operate in six jurisdictions. The practical rule for a creator is therefore that insurance duties attach only once you have employees, and then depend on the state where those employees work. Client contracts can also call for coverage, and liability insurance becomes worth evaluating as scope, dollar amounts, or advice-giving risk increase. See do you need business insurance to sell creator services for where that line tends to sit.

Final checklist: the four documents at a glance

Four self-published documents cover a solo creator selling paid fan interactions: a terms of service page, a privacy notice, a written scope for custom work, and a refund or cancellation policy. None is filed with a government agency. Only the privacy notice carries a broad statutory posting duty, and only large or repeat custom work triggers a written-contract law.

Records are the fifth habit rather than a fifth document: keep order confirmations, payout statements, and delivery notes for the Internal Revenue Service's general 3-year period of limitations (IRS).

Frequently asked questions

Do I need a lawyer to draft these documents?

No. A short terms page, privacy note, refund policy, and written scope for custom work can be written in plain language without a lawyer for most solo creators. Consider legal review once volume, dollar amounts, or complexity grow, or if a specific jurisdiction's rule applies to your situation — a licensed profession, a written-contract rule like New York's $800 threshold, or a state privacy law you have crossed the threshold for. This page is general information about US rules, not legal advice.

Does FanBell provide any of these documents for me?

Partly. FanBell's purchases and refunds policy sets baseline order terms for every transaction, and FanBell's own privacy policy covers data FanBell collects as the payment platform. A personal terms page, your own privacy note for anything you collect separately, and a written scope for custom requests are still yours to write.

Do I need an LLC or an EIN before I start selling?

Not for federal tax purposes as a solo creator with no employees. The IRS lists employees, employment or excise tax liability, and withholding on non-wage payments to a non-resident alien as the triggers for needing an EIN. Forming an LLC is a liability and structure decision, not a prerequisite to accepting a first payment, and local registration or license rules still vary by location.

Do I need different documents if I only sell Tips or Wishlist / Project Support instead of custom work?

The core set still applies, but the contract piece matters less. Tips have no reply or delivery requirement, and Wishlist / Project Support collects cash toward a goal rather than a defined deliverable, so there's no scope to negotiate the way there is for a Creator Service or Personalized Shoutout. A terms page, privacy note, and basic records are still worth having either way.

What does FanBell charge to use its own policies and payment infrastructure?

FanBell is free to start with no monthly fee and applies a 12% platform fee only when a fan pays (FanBell pricing, fanbell.link/pricing). The order terms behind that fee are published as FanBell's purchases and refunds policy, version 1.0, effective July 25, 2026. There is no follower minimum, and payments run through Stripe, whose published pricing puts typical US online-card processing at 2.9% + $0.30 per successful card charge.

Create your free FanBell page and set up the pricing, delivery, and refund terms that make one clean paid offer instead of an open-ended DM negotiation.