TOU can be null if user exists but has not seen TOU