Privacy Policy

1. Introduction

Welcome to FreelancerKit ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our freelancer toolkit: AI-powered proposals, scripts, scope of work documents, follow-up emails and client summaries, a client CRM, invoicing, time tracking, free tools, and (on the Agency plan) shared team workspaces.

2. Information We Collect

2.1 Account Information

When you sign up for FreelancerKit, we collect:

• Email address (via Google OAuth)
• Name and profile information from your Google account
• Profile details you provide (full name, role/title, signature)

2.2 User-Generated Content

Depending on which features you use, we store:

• Job descriptions you paste for analysis, generated proposals, and job analysis results
• Generated ad scripts, scope of work documents, follow-up emails, and client summaries
• Client records you add to your CRM (name, company, contact details, status, budget, notes, and follow-up reminders)
• Invoices, line items, and project/gig details you create
• Time entries (client, task description, date, and duration) if you use the time tracker
• Custom templates and your action history
• If you create or join a team workspace, the workspace name and member email addresses (see Section 4.4)
• Payment and subscription details when you upgrade to a paid plan (processed by Cashfree; we never see your card number)

2.3 Invoice E-Signatures

If a freelancer shares an invoice with you and you choose to sign it, we store the typed name you enter, the date and time of signing, and, solely as evidence that the signature is genuine in the event of a dispute, the IP address, browser/device information, and a non-identifying device fingerprint derived from ordinary browser signals (such as screen size and timezone). This evidence is never shown to the client and is only visible to the freelancer who owns the invoice and to us. We do not use it for tracking, advertising, or any purpose beyond dispute resolution. Freelancers can disable e-signatures for their invoices entirely in their account settings.

2.4 API Keys

You provide your own API keys for third-party AI services (OpenAI, Google Gemini, or Groq). These keys are encrypted and stored securely in our database. We never use your API keys for our own purposes.

2.5 Usage Data

We automatically collect:

• Browser type and version
• Device information
• IP address
• Pages visited and features used
• Time and date of visits

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Generate AI-powered proposals using your chosen AI provider
• Store and retrieve your proposals and templates
• Authenticate your account via Google OAuth
• Improve our service and user experience
• Send important service updates (if necessary)
• Provide customer support

4. Third-Party Services

4.1 AI Providers

When you use an AI-powered feature, the relevant content (such as a job description or client notes) is sent to an AI provider (OpenAI, Google Gemini, or Groq) to generate a response. This happens either using an API key you provide yourself, or, if you haven't provided one, using FreelancerKit's own account with that provider, counted against your plan's monthly AI generation allowance. Each provider has its own privacy policy:

• OpenAI Privacy Policy
• Google Privacy Policy
• Groq Privacy Policy

4.2 Supabase

We use Supabase for authentication and database services. Your data is stored securely on Supabase servers. Read Supabase's Privacy Policy.

4.3 Google OAuth

We use Google OAuth for authentication. When you sign in with Google, we receive basic profile information as permitted by Google's OAuth consent screen.

4.4 Team Workspaces

If you create or are invited to a workspace on the Agency plan, your clients, projects, and invoices marked as part of that workspace become visible to other active members of the workspace, and an invited member's email address is visible to the workspace owner until the invite is accepted or removed.

4.5 Payments

Paid plan checkout is processed by Cashfree. We do not store your card or bank details; Cashfree handles payment data directly. Read Cashfree's Privacy Policy.

4.6 Analytics and Advertising

We use Google Analytics (to understand traffic and usage) and Google AdSense (to show ads) across the site, including the logged-in dashboard. Both use cookies and may collect data such as your IP address, device, and browsing behavior across sites. See Section 8 below and Google's Privacy Policy for details, including how to opt out via your browser or Google Ads Settings.

5. Data Storage and Security

We implement industry-standard security measures:

• All data is encrypted in transit using HTTPS/TLS
• API keys are encrypted at rest in our database
• Database access is restricted and monitored
• Regular security audits and updates
• Secure authentication via Google OAuth

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Control

You have the right to:

• Access: View all your stored data at any time
• Rectify: Correct inaccurate profile information and settings
• Delete (erasure): Delete your proposals, templates, and account data
• Export (portability): Receive a copy of your data in a portable format
• Restrict or object: Limit or object to certain processing of your data
• Withdraw consent: Where processing is based on consent (e.g. analytics cookies), withdraw it at any time

To exercise these rights, use the settings page in your account or contact us at the email below. We respond within 30 days.

6.1 EU/EEA and UK Users (GDPR)

For users in the EU, EEA, or UK, FreelancerKit acts as the data controller for your account data. We process your data on the legal bases of contract performance (providing the Service), legitimate interests (security, service improvement), and consent (analytics and advertising cookies, which you can decline via the cookie banner). You also have the right to lodge a complaint with your local supervisory authority. Payment data is processed by Cashfree as an independent controller; we never receive your card details.

6.2 Users in India (DPDP Act)

For users in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023. You may request access, correction, or erasure of your personal data, nominate another individual to exercise these rights on your behalf, and raise a grievance at the email below; we aim to acknowledge grievances within 48 hours and resolve them within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We also use Google Analytics and Google AdSense site-wide, including on the logged-in dashboard, both of which set their own cookies and may collect information such as your IP address, device, and pages visited to measure traffic and serve ads. You can block or delete cookies in your browser settings, and opt out of personalized ads via Google Ads Settings.

9. Children's Privacy

FreelancerKit is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.