Is there a boilerplate form that works, or another resource? Don't want to spend thousands with a lawyer just yet, that can come later when we get more users.
There are no easy/cheap shortcuts, but there are lawyers and firms that are more efficient than others. As a startup lawyer focused on social media, I wrote a post on this subject; the title says it all:
"How To Do What You Really Shouldn't Be Doing: "Rolling Your Own" Website Terms of Use and Privacy Policy" - http://qr.ae/TvgyH
Happy to connect by Clarity to answer any questions or offer specific advice as appropriate. I'm a California licensed attorney, former head of legal at eHarmony.