Privacy Policy
Last updated: 2025-08-31
This Privacy Policy describes how FreelanceHustle.ai ("we", "our", "us") collects, uses, discloses, and safeguards information when you use our web application, browser extension, and related services (collectively, the "Services"). We are not affiliated with Fiverr. Our browser extension and app integrate with third‑party platforms (e.g., Fiverr) at your direction to help you manage communications and workflows.
By using the Services, you agree to the practices described here. If you do not agree, please discontinue use.
Who We Are (Controller) and How to Contact Us
- Data Controller: FreelanceHustle.ai
- Email: privacy@freelancehustle.ai
- EU/UK Representation: If and when appointed, we will update this Policy. Until then, you can contact us directly.
Scope and Covered Products
- Web application and backend API
- Browser extension: “FreelanceHustle.ai – AI Assistant & CRM for Freelancers”
- Serverless functions supporting AI and subscription features
Definitions (summary)
- Personal Data: Information that identifies or can reasonably be linked to an individual.
- Processing: Any operation performed on personal data (e.g., collection, use, disclosure, storage).
- Services: Our web app, browser extension, and related infrastructure.
Information We Collect
- Account and Profile Data: information you provide to create and manage your account and profile (for example, contact details and optional preferences you choose to add).
- Authentication and Security Data: information necessary to authenticate your account, maintain sessions, and protect access to the Services.
- Subscription and Billing Information: information necessary to manage your subscription and billing (e.g., plan, status, renewal dates). Payments are processed by our payment provider; we do not store full payment card details.
- Communications and CRM Data (user‑provided): content you choose to submit or process (for example, instructions, notes, categories, or issues). If you enable the extension on supported sites at your direction, it may read on‑page content to help generate replies. We do not store buyer usernames, inbox history, or order details in our database unless you explicitly add that information to your CRM or otherwise submit it. If you add a buyer to your CRM, we may capture that buyer’s last messaged date to help you track follow‑ups. This timestamp is recorded solely for your workspace to support your use of the Services and is not used for our own purposes.
- Extension Audio Input (optional): if you use voice features, short audio snippets are sent directly to OpenAI for transcription. We do not store audio, OpenAI does not store audio, and generated replies are not stored.
- Google OAuth / Identity (optional): if you choose to sign in with Google (web or extension), we may receive your email and basic profile information.
- reCAPTCHA Data: tokens and server‑side verification results (Google may receive IP/device information during verification).
- Customer Support and Engagement: support communications and product engagement interactions (for example, messages, emails, and in‑app prompts).
- Logging and Diagnostics: application and infrastructure logs and diagnostics (e.g., IP address, timestamps, URLs, user agent) necessary for reliability, security, and troubleshooting. Operational alerts may be generated.
- Telegram Integration (optional): Telegram user ID, username, and invite link metadata to manage group membership and onboarding.
Sources of Personal Data
- Directly from you when you create an account, log in, submit forms, or use features in the app or extension.
- Automatically from your browser/extension when you interact with supported sites and trigger features.
- From third parties: payment processors (billing events), Google (reCAPTCHA/OAuth), AI service providers (AI processing results), support providers (support chats), engagement providers (product messaging), Telegram (webhooks you interact with).
How We Use Information
- Provide and secure the Services (authentication, sessions, CSRF‑safe flows, fraud prevention via reCAPTCHA).
- Enable product functionality (AI‑generated replies, grammar/translation, CRM, workspaces, dashboards, onboarding).
- Process subscriptions and billing via payment processors (checkout sessions, webhooks, trial eligibility).
- Transcribe optional voice snippets and generate AI outputs via AI service providers.
- Send system emails (verification, password resets, invitations) and product communications.
- Provide support communications; improve reliability via monitoring and diagnostics; handle operational alerts.
- Analyze aggregate usage to improve features and performance.
Legal Bases (EEA/UK)
Where applicable under GDPR/UK GDPR, we process data based on:
- Contract: to provide the Services you request.
- Legitimate Interests: security, fraud prevention, product improvement, logging and diagnostics, internal analytics, service quality.
- Consent: running the extension on third‑party sites at your direction, optional voice features, certain marketing communications.
- Legal Obligations: tax, accounting, and compliance.
Cookies and Local Storage
- Web App Cookies: cookies necessary to operate and secure the Services (for example, authentication and fraud prevention).
- Local/Extension Storage: minimal data and settings necessary to operate features you enable.
- We do not use cookies for advertising.
Sharing and Disclosures (Vendors/Subprocessors)
We share data with service providers to operate the Services:
- Payment processors: payments/subscriptions.
- AI service providers: AI processing (chat completions, transcription).
- Bot protection providers: reCAPTCHA or similar.
- Support and engagement providers: in‑app support chat and product messaging.
- Monitoring and alerting providers: error/performance monitoring and operational alerts.
- Cloud hosting providers: hosting/infrastructure and logs.
- Email providers: transactional emails.
We may disclose information to comply with law, protect rights and safety, or as part of mergers, acquisitions, or asset transfers.
Browser Extension Specifics
- Host Permissions: https://www.fiverr.com/* and our APIs to access pages at your direction. We are not affiliated with Fiverr.
- Content Access: when you use extension features, it can read certain on‑page content (for example, message threads, order history, page metadata, and your typed input) to generate replies and CRM updates. We do not store this information in our database unless you explicitly save or submit it (e.g., by adding it to your CRM).
- Voice Features (optional): if you record audio, snippets are sent directly to OpenAI for transcription. We do not store audio, OpenAI does not store audio, and generated replies are not stored.
- Authentication: the extension uses secure methods to authenticate with our services. Minimal local storage may be used only as necessary for operation.
Security
We implement administrative, technical, and organizational measures appropriate to risk, including HTTPS, HTTP‑only session cookies, access controls, environment isolation, least‑privilege credentials, logging and monitoring, and vendor reviews. No method is 100% secure. If we become aware of a data incident affecting your information, we will notify you and regulators when required by law and take steps to remediate.
International Transfers
We and our vendors may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses and UK Addendum) and implement additional measures as appropriate.
Data Retention
- Account/profile data: while the account is active and a reasonable period thereafter.
- Subscription/billing records: per legal/tax requirements.
- Logs/diagnostics: limited operational periods consistent with security and troubleshooting needs.
- Support chats: while needed for support history and product improvement.
You may request deletion; we may retain limited data as required by law or for legitimate interests (e.g., security, fraud prevention, audit).
Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your data; object to or restrict processing; and withdraw consent. To exercise rights, email privacy@freelancehustle.ai. We will verify your request and respond within statutory timelines. You may also have the right to lodge a complaint with your supervisory authority.
California and U.S. State Privacy Notices
- We do not sell or share your personal information for cross‑context behavioral advertising.
- We collect categories such as identifiers (e.g., email), internet activity (logs), and inferences you provide (CRM notes). Sources include you, your devices/extension, and service providers. Purposes are described above. Disclosures are to service providers.
- California/CPRA and other state laws may grant rights to know/access, correct, delete, portability, and to opt out of sale/share/targeted advertising and certain profiling. To exercise, contact privacy@freelancehustle.ai. We will process opt‑out preference signals to the extent required by law.
- We do not use or disclose “sensitive” personal information for purposes that require a “limit use” link under CPRA.
- We will not discriminate against you for exercising your rights. Virginia residents may appeal a refusal by contacting us with “Appeal” in the subject line.
Children’s Privacy
The Services are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children.
Automated Decision‑Making
We use AI to generate content suggestions and assist workflows. We do not make decisions with legal or similarly significant effects solely by automated means. Human review and judgment remain essential.
Third‑Party Links and Platforms
Our Services may link to or integrate with third‑party platforms (e.g., Fiverr, Telegram). Their privacy practices are governed by their own policies. We are not responsible for their practices.
Changes to This Policy
We may update this Policy from time to time. The “Last updated” date reflects the latest revision. Material changes will be communicated as appropriate.