Ask HN: MVP vs Red Tape

I've just started a live beta of a project I'm working on. A techy friend immediately told me about GDPR, Ts&Cs, compliance issues etc. that I need to include on the site. I'm doing is processing user-uploaded pdfs, and letting users download the result. I realize that there are potential privacy concerns and deletion policies, but it's not rocket science and feels like I need a lawyer.

How do you handle all the red tape at the MVP stage?