The good news about ToS and Privacy Policies is that every company you do business with makes theirs publicly available. So find a couple companies that are similar to yours in terms of business model and/or size, and read theirs. Then put together something of your own. If you have a friend who is a lawyer or has worked on these sorts of issues at a startup (as a non-lawyer), have him/her review it. But don't stress out about this part too much, since you're not much of a target for enforcement actions when you're very small.