Privacy Policy
Last updated: April 8, 2026
FreelanceOS (“we”, “us”, or “our”) operates the website https://freelanceoshq.com and the FreelanceOS application (the “Service”). This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.
By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
1. Who We Are
FreelanceOS is an all-in-one dashboard for freelancers and small businesses, providing tools for client management (CRM), project tracking, task management, notes, document storage, and calendar synchronization.
Data controller: Clément Seguin, operating FreelanceOS
Contact: hello@freelanceoshq.com
Website: https://freelanceoshq.com
2. Information We Collect
2.1 Account information
When you create an account we collect:
- Email address
- Display name (optional)
- Profile avatar (optional — generated or uploaded by you)
- Authentication method (email/password or Google OAuth)
2.2 Data you create
All content you create inside the Service is stored and associated with your account:
- Clients and contact information you enter
- Projects, tasks, and their associated data
- Notes and documents you create or upload
- Calendar events (local and Google-synced)
- Custom CRM fields and values
2.3 Google Calendar data
If you choose to connect your Google Calendar, we request access to your Google Calendar via the scope https://www.googleapis.com/auth/calendar. This allows us to:
- Read your existing Google Calendar events to display them inside FreelanceOS
- Create new calendar events on your behalf when you add events in the app
- Update or delete events you modify or remove inside FreelanceOS
We do not share, sell, or use your Google Calendar data for any purpose other than displaying it within your FreelanceOS dashboard. Google Calendar data is never used for advertising, analytics, or shared with third parties.
You can disconnect your Google Calendar at any time from Settings → Google Calendar → Disconnect. Upon disconnection, all Google-sourced events are permanently deleted from our database.
2.4 Usage and technical data
- IP address and browser user-agent (for security and abuse prevention)
- Pages visited and features used (aggregated, not sold)
- Error logs (to diagnose and fix bugs)
2.5 Payment information
We use Stripe to process payments. We never store your full credit card number, CVV, or banking details. Stripe handles all payment data under their own Privacy Policy. We store only your Stripe customer ID and subscription status.
3. How We Use Your Information
- To provide the Service — store and display your data across the app
- To authenticate you — verify your identity on each login
- To sync your calendar — import and push events to/from Google Calendar when you authorize it
- To process payments — manage your subscription via Stripe
- To communicate with you — send transactional emails (account creation, password reset, subscription receipts)
- To improve the Service — analyse aggregated usage patterns to fix bugs and prioritize features
- To ensure security — detect fraud, abuse, and unauthorized access
We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.
4. Data Sharing and Third Parties
We share data only with the following sub-processors, strictly to operate the Service:
| Service | Purpose | Data |
|---|---|---|
| Supabase | Database, authentication, file storage | All user data |
| Stripe | Payment processing | Email, subscription status |
| Vercel | Application hosting | Request logs (transient) |
| Resend | Transactional emails | Email address |
| Google APIs | Calendar sync (only if you connect it) | Calendar events |
We may disclose your information if required by law or to protect the rights, property, or safety of FreelanceOS, its users, or the public.
5. Data Retention
- Your data is retained for as long as your account is active.
- Completed tasks and archived projects older than 60 days are automatically deleted as part of routine cleanup.
- When you delete your account, all your data — including profile information, clients, projects, tasks, notes, documents, calendar events, and uploaded files — is permanently and irreversibly deleted within 24 hours.
- Stripe retains billing records as required by financial regulations (typically 7 years), independent of account deletion.
6. Data Security
We implement industry-standard security measures to protect your data:
- All data is transmitted over HTTPS / TLS
- Authentication is handled by Supabase Auth with JWT tokens
- Passwords are hashed using bcrypt — we never store them in plain text
- Row-level security (RLS) policies ensure users can only access their own data
- Google OAuth tokens are stored encrypted in our database
- File storage is scoped per user — cross-user access is architecturally prevented
No system is 100% secure. If you discover a security vulnerability, please contact us at hello@freelanceoshq.com.
7. Your Rights (GDPR)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access — request a copy of all data we hold about you
- Right to rectification — correct inaccurate data in your profile
- Right to erasure — delete your account and all associated data via Settings → Danger Zone → Delete account
- Right to restriction — request we limit processing of your data
- Right to data portability — export your data via Settings → Export data
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — disconnect Google Calendar at any time; this immediately revokes our access to your calendar data
To exercise any of these rights, contact us at hello@freelanceoshq.com. We will respond within 30 days.
8. Google API Services — Limited Use Disclosure
FreelanceOS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request Calendar access when the user explicitly initiates the connection
- Google Calendar data is used solely to display events in the FreelanceOS interface and to create/update events on your behalf
- We do not use Google user data to develop, improve, or train generalized AI or ML models
- We do not transfer Google user data to third parties except as necessary to provide the Service
- We do not use Google user data for advertising purposes
- Humans at FreelanceOS do not read your Google Calendar data unless you explicitly share it for support purposes
9. Cookies
We use only strictly necessary cookies to operate the Service:
- Session cookie — keeps you logged in (httpOnly, secure, SameSite=Lax)
- PKCE state cookie — short-lived cookie used during OAuth flows
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
10. Children's Privacy
FreelanceOS is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with a new “Last updated” date, and by sending an email to your registered address for material changes.
Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or your personal data:
Email: hello@freelanceoshq.com
Website: https://freelanceoshq.com
We aim to respond to all privacy-related inquiries within 30 days.