AT&T rewrites privacy policy