Privacy Policy

1. Introduction

Welcome to Freddys.io ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at freddys.io.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

2. Information We Collect

We collect information you voluntarily provide when using Freddys.io, including:

• Account information: Name, email address, and password when you register.
• Profile data: Work experience, education, skills, certifications, and other career information you enter to generate CVs and cover letters.
• Payment information: Billing details processed securely through Stripe. We do not store your full credit card number on our servers.
• Usage data: Information about how you interact with our service, including pages visited, features used, and CVs generated.
• Device information: Browser type, IP address, and operating system for security and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our CV and cover letter generation services.
• Process payments and manage your subscription.
• Send transactional emails (account confirmation, password resets, receipts).
• Improve and personalise your experience on Freddys.io.
• Respond to customer support requests.
• Detect and prevent fraud, abuse, or violations of our Terms of Service.
• Comply with applicable legal obligations.

4. AI Processing

To generate your CV and cover letter content, we send relevant portions of your profile data (work history, skills, job description) to Anthropic's Claude AI API. This data is used solely to generate your documents and is not used to train AI models. Anthropic's privacy policy applies to data processed through their API. We do not sell your data to Anthropic or any other AI provider.

5. Third-Party Services

We use the following trusted third-party services to operate Freddys.io:

• Supabase — Database and authentication hosting.
• Stripe — Payment processing. Stripe's privacy policy governs how payment data is handled.
• Anthropic (Claude API) — AI-powered CV and cover letter generation.
• Vercel — Website hosting and deployment.
• Google OAuth — Optional sign-in via Google account.

These third parties only receive the data necessary to perform their specific function and are contractually obligated to protect your data.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: Trusted vendors listed above who help us operate our service.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice.
• Protection of rights: To protect the rights, safety, and security of Freddys.io, our users, or the public.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymise your data within 30 days, except where we are legally required to retain it (e.g., payment records for tax purposes).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to the processing of your data for certain purposes.

To exercise any of these rights, contact us at privacy@freddys.io.

9. Cookies

We use essential cookies and similar tracking technologies to maintain your session and remember your preferences. We do not use advertising or tracking cookies. You can control cookie settings through your browser, but disabling essential cookies may affect the functionality of our service.

10. Children's Privacy

Freddys.io is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

11. Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, and access controls to protect your personal data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date, and where appropriate, by email. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: