Back to home

Privacy Policy

Last updated: March 10, 2026

Your Privacy, Powered by Trust

At Freelance OS (operated by Creative Layer Inc.), we believe that privacy is a fundamental human right. Our mission is to provide you with powerful AI tools while ensuring that your data remains yours. This Privacy Policy outlines how we collect, use, protect, and handle your personal information.

1. Information We Collect

We collect information only when it is necessary to provide you with the best possible freelance workspace experience.

1.1 Information You Provide Directly

  • Contact Details: When you register, we collect your name, email address, and account preferences.
  • Profile Information: Professional details such as your business name, logo, and professional bio.
  • Financial Data: Billing information is collected and processed through our secure payment partner, Stripe. We do not store your credit card details on our servers.

1.2 Information from Your Work

  • Project Data: Details about your clients, projects, tasks, and deadlines.
  • Documents: Content within invoices, contracts, and resumes that you generate or upload.
  • AI Interactions: Queries and inputs you send to our AI assistants.

1.3 Automated Information

  • Usage Patterns: We use PostHog to understand how you interact with our Services.
  • Device Identifiers: IP address, browser type, and operating system info to prevent fraud and ensure security.

2. How We Use Artificial Intelligence

Artificial Intelligence is at the core of Freelance OS. Here is how we handle data and AI:

2.1 Our AI Sub-processors

We utilize state-of-the-art AI models from providers like OpenAI and Anthropic. When you use an AI feature (e.g., "Help me write this contract"), the relevant data is sent to these providers for processing.

2.2 No Global Model Training

We do not allow our AI providers to use your data to train their general-purpose models. Your data is processed via private API instances meant solely for your workspace usage.

2.3 Local Optimizations

We may use anonymized usage data to optimize our platform's AI routing and performance to ensure faster and more accurate results for all users.

3. Data Sharing and Disclosure

We never sell your data. We only share information with third parties in the following scenarios:

  • Service Providers: With companies that help us run our business (e.g., AWS for hosting, Resend for emails, Stripe for payments).
  • Legally Required: To comply with a valid legal request or to protect the safety of our users.
  • Consent: At your explicit direction (e.g., if you choose to integrate with a third-party CRM via our API).

4. Data Retention and Security

4.1 Retention Period

We retain your personal data for as long as your account is active or as needed to provide you with Services. You can request deletion of your account and all associated data at any time.

| Data Type | Retention Period | |---|---| | Account information (name, email) | Until account deletion | | Profile and business data | Until account deletion | | Job matches and search history | Until account deletion | | Saved proposals and templates | Until account deletion | | Billing history | 7 years (tax/legal requirement) | | AI interaction logs | 90 days | | Analytics data (PostHog) | 12 months (anonymized) | | Email communication logs | 2 years |

Upon account deletion, all personal data is permanently removed within 30 days. Billing records are retained in anonymized form for legal compliance.

4.2 Third-Party Data Processors

We use the following third-party services to operate Freelance OS. Each is a data processor acting under our instructions:

| Processor | Purpose | Data Shared | Location | |---|---|---|---| | Vercel Inc. | Hosting & infrastructure | IP address, request data | United States | | Neon Inc. | Database hosting (PostgreSQL) | All stored user data | United States | | Cloudflare (R2) | File storage | Uploaded documents, files | Global (edge) | | OpenAI | AI features (proposals, analysis) | Prompt inputs/outputs | United States | | Anthropic | AI features (analysis) | Prompt inputs/outputs | United States | | OpenRouter | AI model routing | Prompt inputs/outputs | United States | | Tavily | Web search for AI enrichment | Search queries | United States | | Firecrawl | Job listing scraping | URLs, page content | United States | | Resend LLC | Email delivery | Email address, name | United States | | Upstash (QStash) | Background job queue | Job metadata | United States | | PostHog Inc. | Product analytics | Usage events, device info | United States | | Sentry (Functional Software Inc.) | Error monitoring | Error logs, stack traces | United States | | Polar.sh | Subscription billing | Billing info, subscription status | United States |

We require all processors to implement appropriate security measures and contractual safeguards. Data is never sold to third parties.

4.3 Security Measures

  • End-to-End Encryption: All sensitive data is encrypted during transmission using TLS/SSL.
  • Data Isolation: Each user's workspace data is logically separated in our database architecture.
  • Proactive Monitoring: 24/7 security monitoring and automated vulnerability scanning.

5. Your Rights & Global Protections

Whether you are in the EU (GDPR), California (CCPA/CPRA), or elsewhere, we provide universal data rights to all users:

  • Right to Access: You can see all the data we have about you.
  • Right to Rectification: You can correct any inaccurate information.
  • Right to Deletion: Often called the "Right to be Forgotten."
  • Right to Portability: You can export your data in a portable format (JSON/CSV).

Secure Your Data

Need a full export of your workspace data or want to exercise your privacy rights? Our team is available to assist you within 24 hours.

6. Cookies and Tracking

We use a minimal number of cookies to keep you logged in and to analyze general platform performance. You can manage your cookie preferences in your browser settings. We do not use "retargeting" or intrusive advertising cookies.

7. Changes to This Policy

We may update this policy periodically. We will notify you of any material changes via email at least 30 days before they take effect.

8. Contact Us

For any privacy concerns or legal inquiries, please reach out to our Data Protection Officer: