Privacy policy

This policy describes how Frello processes personal data, in line with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is A. EL HAJJI, operating Frello as an individual during its beta phase (see the legal notice). Contact: support@frellocrm.com.

Dual role. Frello is the data controller for its users' account data (freelancers). For the data a user enters about their own clients (contacts, deals, invoices), Frello acts as a data processor: the user remains the controller.

2. Data we collect

• Account: email address, name, preferences (language, currency, time zone), and the profile information you provide.
• Business data: client contacts, deals, tasks, proposals, invoices and their content.
• Technical data: an authentication session identifier. Frello uses no advertising trackers and no third-party cookies (see the cookie policy).

No AI processing. As of today, Frello does not send any of your data to an AI service. If such a feature were added, this policy would be updated and you would be informed beforehand.

3. Purposes and legal basis

• Providing the service (running your freelance business) — performance of the contract.
• Security, abuse prevention, support — legitimate interest.
• Sending you a weekly activity digest and occasional service updates by email — legitimate interest. You can opt out at any time via the unsubscribe link in each email or under Profile › Your data & privacy.
• Compliance with legal obligations (e.g. accounting) — legal obligation.

4. Processors and hosting

Frello relies on the following processors, each bound by confidentiality and data-processing commitments:

Application hosting (Netlify) is located in the United States. Where personal data is transferred outside the European Union, the transfer is governed by the European Commission's Standard Contractual Clauses (SCCs). Frello's database hosting region is confirmed as the service exits its pilot phase.

5. Retention

Your data is kept for as long as your account is active. If you delete your account, it is erased (see section 7). Certain billing data may need to be retained to meet applicable accounting and tax obligations.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Two of these are available directly in the app, under Profile › Your data & privacy:

• Portability: export all of your data in JSON format.
• Erasure: permanently delete your account and your data.

For the other rights, or for any complaint, contact support@frellocrm.com. You may also lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).

7. Public profiles and contact form

A freelancer can enable a public profile page (frellocrm.com/@handle) showing their services, spoken languages and approved client testimonials. When a visitor uses the contact form on that page, Frello collects the name, email and message they provide — and, optionally, their company, phone and preferred start date — together with their explicit consent, which is recorded with a timestamp.

• Roles. For these inquiries, the freelancer whose profile received the message is the data controller; Frello acts as processor.
• Legal basis. The visitor's consent and pre-contractual steps taken at their request.
• Use & retention. The inquiry is delivered to that freelancer (in the app and by email) so they can reply. They can delete it at any time; it is also erased if their account is deleted.
• Testimonials. A testimonial is requested from a past client via a private link and is published on a public profile only after the freelancer approves it.

8. Security

Frello implements technical protection measures: per-user data isolation at the database level, encryption in transit (HTTPS), and access control. In the event of a data breach likely to create a risk to your rights, the relevant authorities and affected individuals will be informed within the legal deadlines.