Data Processing Agreement

Placeholder DPA for a pre-launch build. Replace with counsel-reviewed copy before processing EU personal data at scale.

Roles

You are the data controller for your clients' personal data. Freshlance is the processor, acting on your instructions and only to provide the service.

Scope of processing

We process the client records, project data, invoices and time entries you enter, for the purpose of operating your workspace and the client-facing pages you choose to share.

Subprocessors

A current list is maintained at /subprocessors. We will give notice before adding a new one.

Security measures

Described in detail on the security page: scrypt-hashed credentials, server-side session tokens, server-authoritative writes, and no card data on our infrastructure.

Deletion and return

Export everything as CSV at any time. Deleting your account removes your workspace data, including the client records you entered.

Breach notification

If we become aware of a personal data breach affecting your workspace, we will notify you without undue delay with what we know and what we are doing about it.