Privacy Notice

AI Freelancer (www.aifreelancer.app) is an AI-powered SaaS platform for freelancers and online businesses based in Algeria. We are the data controller for personal information collected through this platform.

If you have any questions about this Privacy Notice or our data practices, contact us at support@aifreelancer.app.

We collect the following categories of personal data:

Account Data: Full name, email address, avatar photo (optional), and plan information when you register.

Usage Data: The tools you use, generation history, number of AI generations consumed, login timestamps, and approximate device/browser information.

Payment Data: Transaction IDs, payment method type, and billing status. We do not store full card numbers or sensitive banking credentials — these are handled by our payment processors (Chargily, BaridiMob, Lemon Squeezy).

AI-Generated Content: Images, text, and audio content you generate through our tools, stored temporarily or permanently depending on the feature.

WhatsApp Agent Data: QR session tokens and conversation metadata required to operate your WhatsApp AI agent. Message content is processed in real-time and is not permanently stored on our servers.

Referral & Earning Data: Referral links used, earnings credited, and bonus generation records.

We use your personal data to:

• Provide Services: Operate, maintain, and improve the AI Freelancer platform and all its features.
• Authentication: Verify your identity and manage your session securely via Supabase.
• Billing: Process payments, manage subscriptions, and handle generation credits.
• Communication: Send transactional emails (account verification, receipts, important updates) via Resend. We do not send marketing emails without your explicit opt-in.
• Safety: Monitor for fraud, abuse, and violations of our Terms of Service.
• Analytics: Understand usage patterns to improve the platform (using anonymized aggregate data where possible).
• Legal Compliance: Fulfill legal obligations and respond to lawful requests from authorities.

Storage Locations: User profile and authentication data is stored securely on Supabase (PostgreSQL). AI generation history, community posts, and operational data are stored on our Replit-hosted PostgreSQL database. Generated media files are stored via third-party AI providers (fal.ai, OpenAI) and may be cached on our servers temporarily.

Security Measures: We implement industry-standard measures including:
• HTTPS/TLS encryption for all data in transit.
• Bcrypt password hashing and Supabase's built-in Row Level Security (RLS).
• HMAC-signed tokens for administrative operations.
• Environment variable protection for all API keys and secrets.

Despite our efforts, no system is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password.

We integrate with the following third-party services that may process your data:

• Supabase — Authentication and user database (GDPR-compliant).
• fal.ai — AI image and video generation. Prompts and outputs may be processed on their infrastructure.
• OpenAI — GPT-4o for text generation. Inputs are sent to OpenAI's API per their data usage policies.
• ElevenLabs — AI voiceover generation. Text inputs are sent to their servers.
• Chargily / BaridiMob — Payment processing for Algerian users.
• Lemon Squeezy — International payment processing.
• Resend — Transactional email delivery.

Each third party is governed by its own privacy policy. We encourage you to review them. We are not responsible for the data practices of third-party services.

We use minimal, essential cookies and local storage to:

• Session Management: Maintain your authenticated session using Supabase's secure cookie-based auth tokens.
• Preferences: Remember your language preference (Arabic/English) and UI settings.

We do not use third-party advertising cookies, cross-site tracking, or sell your data to advertisers. You can clear cookies at any time through your browser settings, though this may log you out of your account.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain types of data processing.

To exercise any of these rights, email us at support@aifreelancer.app. We will respond within 30 days. We may need to verify your identity before processing your request.

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until account deletion is requested.
• Generation History: Retained for up to 12 months, then archived or deleted.
• Payment Records: Retained for 5 years for legal and tax compliance.
• WhatsApp Session Data: Cleared upon agent disconnection or account deletion.

Upon account deletion, we will delete or anonymize your personal data within 30 days, unless retention is required by law.

We may update this Privacy Notice from time to time. We will notify you of significant changes by email or through a prominent notice on the platform. The "effective date" at the top of this notice indicates when it was last updated.

Continued use of AI Freelancer after changes take effect constitutes acceptance of the revised notice.