@joseph-benguira , yep, that was it.
I didn't even know I had sections.
But yes, those bottom 3 bullets are all in a section and when I set that to none, my Privacy Policy and Terms and Conditions links worked.

Thank you!

@joseph-benguira - thank you, thank you!

@joseph-benguira - given that appdrag doesn't support .it.com, I'd like to change the domain for this project
From toolk.it.com
To swaysmarts.com

How and where would I do that?

Thanks!

@joseph-benguira , thanks.
I'm glad to get resolution on this.

@joseph-benguira ,
I thought it might simplify matters to transfer my domain to appdrag.
I'm getting this

@joseph-benguira , thanks for your help
I've spent about 2 1/2 hours in chat with Namecheap trying to get this work.
And I'm having no luck. I'm trying to go back to basics and I'm getting this error on appdrag.

@joseph-benguira ,
OK, toolk.it.com is up and discoverable, I believe.
I'm not sure where the SSL is coming from. I have SSL from Namecheap.
Should I be using that?

@joseph-benguira , if this issue comes down to - who provides SSL for my website
why don't I just use SSL from NameCheap? They give me SSL when I buy a domain.

Questions:

1. Can I turn on the SSL at Namecheap and use that even though they won't be hosting my website?
2. If I do turn on the SSL at NameCheap, can I still use connect to Appdrag?
3. If I'm not using SSL from Amazon, then
   Do I still need the CNAME record for AWS?
   Do I still need the CAA Records?

@joseph-benguira, yes, I get that the CAA record hasn't propagated. I check it every day, a couple of times a day.
What's my next step?
How do I get it to propagate?

Hey Joseph, I think I have it all set up.
And the site isn't showing at all.

What needs to happen?

I did what you suggested. There's a reply from me waiting in your queue.
I came back to this site and it said it was waiting to post the certificate.
I came back 15 minutes later and got this:

You need to add this CNAME in your domain provider to validate the SSL certificate
CNAME Key: _d561c9638c05688b1795fa9aa1bd438d
CNAME value: _3e06a47c5dda9fa14e0778be51a41984.xlfgrmvvlj.acm-validations.aws.

which again is already in my CNAME.

@joseph-benguira ,
Thanks for the advice.

I added them:
CAA Record toolk.it.com 0 issue "amazon.com"

CAA Record toolk.it.com 0 issuewild "amazon.com"