Privacy Policy

Account and sign-in

Your name, email address (you can attach more than one and mark which is primary), and however you choose to sign in: a password (stored as a salted, one-way hash — we never see or store it in plain text), a passkey, or a magic-link email. If you turn on two-factor authentication, we store your TOTP secret and backup codes, both encrypted. We keep a record of your active sessions and devices so you can review and revoke them, and we log the IP address behind security-relevant events, like a sign-in, for audit purposes.

Profile

Whatever you choose to add: a bio, your general location or market, the roles you work (camera operator, gaffer, and so on), your education — school, degree, graduation year, which is also what determines your student-pricing timeline, see the Pricing page — a headshot, and how you want to be paid: a payee name, address, and instructions you write yourself, shown on your invoices. That's text you compose. It isn't a connection to a bank account.

The business records you create

Clients and contacts, rate rules, bookings, jobs, daily logs (in/out times, mileage, expenses, notes — including ones logged on your phone with no signal, which sync once you're back in range), invoices and estimates, and payments you record by hand: the method (check, Zelle, wire, cash, and so on) and the amount. That's you telling the app you got paid — not the app processing a payment; see Payments, today below. Also anything you upload as media (images, video links) and the visibility you set on it, and any calendar blocks you add.

Documents you upload

Two different paths, handled two different ways:

• W-9s, in Settings → Documents, are encrypted before they ever touch storage — a fresh key per file, wrapped by a master key we hold separately — and never parsed. There is no field in our database shaped like a Social Security Number or tax ID, anywhere, for anyone's W-9. Reading or sending a stored W-9 requires you to re-prove your two-factor code first, and every access is logged.
• Imported documents — old invoices, résumés, CVs, spreadsheets — go through a separate tool meant to turn your history into usable records. The original file is stored privately, exactly as you uploaded it, so it's always yours to re-download or export. Before any text from it is turned into a client, job, or invoice in the app — or sent to Anthropic, if you've turned on AI-assisted extraction — we strip anything shaped like a Social Security Number, ITIN, EIN, bank account number, or routing number out of that extracted text. A file that looks like a W-9 or other tax form is refused by this tool outright and pointed at the encrypted vault above instead. AI-assisted extraction is off by default; with it off, extraction runs entirely on our own server. Either way, this only ever reads text — a scanned or photographed document has no text layer to redact, so those aren't read yet.

What other people enter about your work

If someone submits an inquiry through your public booking page, we store what they typed — name, contact info, job details — so it reaches you as a booking request. If you send a client a link to view or pay an invoice, or view an estimate, they can act on it without ever creating an account; the link itself is a single-purpose, expiring token, and we only ever store a one-way hash of it, never the working link itself, so even we can't reconstruct it after it's issued.

Security records

Sign-ins, W-9 access, exports, and similar security-relevant actions are kept in an append-only log we use to investigate account issues and abuse. It's never edited after the fact.

Export

Every entity you create — clients, jobs, daily logs, invoices, payments, bookings, and more — can be exported as CSV or JSON at any time from inside the app. A full-account export bundles everything into one JSON file, which can also be re-imported, so your data is never trapped here by file format.

Correction

Edit anything directly in the app — there's no separate request process for fixing your own data.

Deletion

Free-Lance is early enough that there isn't a self-serve “delete my account” button yet. Email support@free-lance.app and we'll delete your account and the data tied to it directly. One narrow exception: security log entries (see Security records above) stay on file with the account reference removed rather than the row itself deleted — the same way a sign-in record behaves if an account is ever removed at the database level. That's a deliberate security-integrity choice, not an oversight.

Two-factor / step-up

If you enable TOTP, viewing or sending a stored W-9, or changing how you get paid, requires a fresh code within the last few minutes — not just an active session.