Privacy Policy
Last updated: May 31, 2026
1. Information We Collect
When you create a Frelo account, we collect information you provide directly: your name, email address, and any business details you enter. As you use the service, we also collect usage data automatically — including pages visited, features used, browser type, IP address, and timestamps. This helps us operate and improve the product.
2. How We Use Your Information
We use your information to provide, maintain, and improve Frelo; send transactional emails (invoices, notifications, receipts); respond to support requests; and detect and prevent fraud or abuse. We do not use your data for advertising.
3. Payment Data
All payments are processed by Stripe, Inc. Frelo never receives, stores, or has access to your full credit card number, CVV, or bank account details. When you enter payment information, it goes directly to Stripe over an encrypted connection. You can review Stripe's privacy practices at stripe.com/privacy.
4. File Storage
Files you upload to Frelo (such as contract attachments or project files) are stored on Cloudflare R2 (Cloudflare, Inc.). Access to your files is controlled by Frelo and restricted to you and the clients you explicitly share them with.
5. Email Communications
Transactional emails — such as invoice notifications, password resets, and account alerts — are sent via Resend. Resend acts as a data processor on our behalf and does not use your email address for any other purpose.
6. Cookies & Local Storage
Frelo uses cookies and browser local storage solely to manage your authenticated session. We do not use tracking cookies, advertising cookies, or any third-party analytics. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in.
7. Third-Party Service Providers
To operate Frelo, we share limited data with the following service providers, only as needed to provide their services: Stripe (payment processing), Cloudflare (file storage), Neon (database hosting), Resend (transactional email), Upstash (rate limiting), and Trigger.dev (background job processing). Each provider is contractually bound to use your data only to provide services to Frelo.
8. Data Sharing & Sale
We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers or data brokers. The only sharing that occurs is with the service providers listed above, as required to operate Frelo.
9. Data Retention
We retain your data for as long as your account is active. You can download your data or delete your account from your account settings at any time. If you delete your account, we will delete your personal data within 30 days of receiving your request, except where we are required to retain it by law (for example, for tax or billing records).
| Data type | Retention period |
|---|---|
| Contact information (name, email) | Deleted within 30 days of account deletion request |
| Financial and invoice records | Retained for 7 years (tax law requirement) |
| Stripe payment records | Per Stripe's retention policy |
| Session data | Deleted on sign-out |
10. Data Security
All data transmitted between your browser and Frelo is encrypted using TLS. Your data at rest is stored on infrastructure that follows industry-standard security practices. While we take reasonable steps to protect your data, no system is perfectly secure, and we cannot guarantee absolute security.
11. Children's Privacy
Frelo is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
12. California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, request deletion of your personal information, and opt out of the sale of your personal information. Frelo does not sell personal information. You can exercise your rights directly from your account settings, or visit our Do Not Sell page at frelo.app/do-not-sell. To make a manual request, contact us at braxtonwest3@gmail.com.
13. Your Rights (GDPR & Global)
Regardless of where you are located, you have the following rights over your personal data: the right to access the data we hold about you; the right to correct inaccurate data; the right to erasure (deletion) of your data; the right to restrict or object to how we process your data; the right to data portability (receive your data in a machine-readable format); and the right to withdraw consent at any time where processing is based on consent. You can exercise most of these rights directly from your account settings — including downloading your data and deleting your account. To make a manual request, email us at braxtonwest3@gmail.com. We will respond within 30 days. If you are in the EU or UK and believe we have not handled your request appropriately, you have the right to lodge a complaint with your local data protection authority.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Frelo dashboard at least 14 days before the change takes effect. Your continued use of Frelo after that date constitutes your acceptance of the updated policy.
15. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at braxtonwest3@gmail.com.