Privacy Policy

Welcome to FreLeads. FreLeads is an AI-powered Reddit lead generation and client management platform for freelancers, operated at freleads.xyz. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

1. Information We Collect

1.1 Account & Authentication Data

When you sign up or log in, we collect:

• Name (display name from Google, or derived from email for email/password accounts)
• Email address (must be a @gmail.com or @freleads.xyz address)
• Profile photo URL (from Google account, if applicable)
• Firebase Authentication user ID
• Account creation timestamp

We support two authentication methods: Google Sign-In (via Google OAuth 2.0) and Email/Password (with email verification).

1.2 Profile Information

You may provide additional information in your profile, including:

• First name and last name
• Username and custom email handle (@freleads.xyz)
• Portfolio URL
• Profile avatar image (uploaded to Firebase Storage)

1.3 Onboarding & Preferences

During onboarding, we collect:

• Freelance categories and subcategories you select
• Subreddit preferences for lead scanning

1.4 Settings Data

Your platform settings are stored, including:

• Minimum lead quality score threshold
• Auto-scan toggle preference
• Optional personal Groq API key (encrypted server-side, never stored in plain text in the database)

1.5 User-Generated Content

• CRM Data: Client records, notes, tags, and statuses you create within the platform
• Saved Leads: Leads you bookmark or interact with
• Feedback: Name, email, subject, and message submitted through our feedback form
• Reddit Inbox Messages: Outreach messages you compose and send through the platform

1.6 Automatically Collected Data

• Activity Presence: We record your last active timestamp (updated periodically when you interact with the app) to display real-time activity status in administrative dashboards
• Usage Metadata: Timestamps for actions such as onboarding completion, settings changes, and profile updates

1.7 Data We Do Not Collect

• We do not use cookies for tracking
• We do not access your personal email inbox or read your emails
• We do not collect IP addresses, device fingerprints, or browser telemetry
• We do not use any third-party analytics or advertising trackers

2. How We Use Your Information

• Provide and personalize the lead generation service based on your selected categories and subreddits
• Score and rank Reddit leads using AI (Groq/Llama models) to surface relevant freelance opportunities
• Enable CRM features for managing your client relationships
• Display your profile to administrators for account management purposes
• Track real-time presence for administrative monitoring of platform health
• Process feedback submissions and respond to support requests
• Detect and prevent abuse, fraud, or unauthorized account access

3. Third-Party Services

We rely on the following third-party services to operate the platform:

• Google Firebase — Authentication, Firestore database, and Cloud Storage for file uploads
• Google OAuth 2.0 — Secure sign-in via your Google account
• Groq API — AI-powered lead scoring and summarization (only lead text is sent; no personal data)
• Reddit Public API — Fetching public subreddit posts for lead discovery (no Reddit login required)
• Vercel — Application hosting and serverless API functions
• Google Fonts — Typography served directly by Google

Each third-party service operates under its own privacy policy and terms of service.

4. Data Sharing

We do not sell, rent, or trade your personal data to any third party. We may share data only:

• With the third-party infrastructure services listed above, solely to operate the platform
• To comply with legal obligations, court orders, or government requests
• To enforce our Terms & Conditions or protect the security of the platform

5. Data Storage & Security

• All data is stored in Google Cloud Firestore, which provides encryption at rest and in transit
• Authentication is managed by Firebase Authentication with industry-standard security practices
• Sensitive keys (e.g., personal Groq API keys) are encrypted server-side before storage
• File uploads (avatars) are stored in Firebase Cloud Storage with access controls
• API endpoints are protected with Firebase ID token verification

While we take reasonable precautions to protect your data, no system is 100% secure. We cannot guarantee absolute security against all threats.

6. Data Retention

• Your account data is retained for as long as your account is active
• Deleted accounts are cleaned up by an automated daily process that removes associated user data
• Feedback submissions are retained indefinitely for quality improvement purposes
• You may request deletion of your data by contacting us at the email below

7. Your Rights

You have the right to:

• Access your personal data stored on the platform via your Profile and Settings pages
• Update your profile information, preferences, and settings at any time
• Delete your account and associated data by contacting support
• Revoke Google OAuth access at any time through your Google Account security settings

8. Children's Privacy

FreLeads is not intended for users under the age of 18. We do not knowingly collect information from minors. If we learn that we have collected data from a user under 18, we will promptly delete their account and associated data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last Updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, data requests, or concerns, contact us at: support@freleads.xyz