Each product, its own policy

They handle different data in different places, so they are written separately rather than merged into one document that is vague about both.