Privacy Policy

1. Information We Collect

a) Account information

When you create an account we collect your name, email address, hashed password, business name (optional), avatar (optional), timezone, and any billing information you provide. We never store credit-card numbers — those are handled by our payment processor.

b) Usage data

We log every search you run (niche, city, timestamp), every lead you save, every email you draft and send through our composer, every campaign you launch, and every AI website you generate. This is used to power your dashboard, enforce plan limits, and improve the product.

c) Lead data

Business contact information (name, address, phone, website, email) we surface to you is sourced from publicly available data: Google Places, OpenStreetMap, public business directories, and what we scrape from public websites. We do not collect or process personal data of private individuals — only business contact information that is publicly listed.

d) Technical data

Standard server logs (IP address, browser, OS, request timestamps), session cookies, and CSRF tokens. Retained for 30 days for security and debugging.

2. How We Use Your Information

• To operate the service: authentication, search, audits, AI generation
• To enforce plan limits and process billing
• To send transactional emails (account, billing, security)
• To improve features through aggregated analytics (never personally identifiable)
• To prevent fraud and abuse

We do not sell your data. We do not use your account contents for AI training. We do not share lead lists between users.

3. Third-Party Processors

To run the service we rely on these sub-processors:

• Google Places API — business listing search (when configured)
• OpenStreetMap (Nominatim + Overpass) — free fallback for business search
• Anthropic Claude — AI text generation (email pitches, copy)
• Stripe — payment processing
• Hostinger — hosting + database
• Unsplash — hero images for generated AI websites

Each operates under its own privacy policy. We only share the minimum data needed for them to perform their function.

4. Cookies

We use only essential cookies for authentication (session ID + CSRF) and theme preference. We do not use tracking cookies, third-party analytics scripts, or advertising pixels.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days then permanently deleted. You may request immediate deletion at any time.

6. Your Rights

You have the right to:

• Access — request a copy of all data we hold about you
• Correction — fix any inaccurate data
• Deletion — request full erasure of your account and data
• Export — download your leads/searches as CSV
• Opt-out — unsubscribe from non-essential emails (settings → notifications)

To exercise any of these rights, email us at info@freelanceleadpro.com from the address on your account. We respond within 7 days.

7. Security

We protect your data through industry-standard measures: HTTPS everywhere, hashed password storage (bcrypt), encrypted database connections, daily backups, and access logs. No system is 100% secure — if a breach occurs, we will notify you within 72 hours.

8. Children's Privacy

Our service is intended for users 18 and older. We do not knowingly collect data from minors. If we learn that we have, we will delete it immediately.

9. International Data Transfers

Our servers are located in Pakistan (Hostinger). By using the service you consent to transferring your data to and processing it in this jurisdiction.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and on the homepage at least 14 days before they take effect.

11. Contact

Questions about this policy or your data? Email info@freelanceleadpro.com.