Privacy policy
Last updated: 1 October 2026
This policy explains how Freeleads SAS (“Freeleads”, “we”) processes personal data, in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. It covers two groups of people: our customers (freelancers who use Freeleads) and professionals listed as decision-makers in the opportunities we deliver.
1. Data controller
Freeleads SAS, To be completed. Contact for any privacy matter: contact@freeleads.fr (subject “Privacy”).
2. Data we process about customers
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, password hash, preferences | Provide your account and the service | Contract | Life of the account |
| Pipeline, notes, templates, ratings | CRM features, improving lead quality | Contract | Life of the account |
| Billing details (handled by Stripe) | Payments and invoicing | Contract, legal obligation | 10 years for accounting records |
| Security logs (IP address, browser, sign-in events) | Protect accounts, prevent fraud | Legitimate interest | 12 months |
| Contact form messages | Answer your request | Legitimate interest | 3 years |
3. Data we process about listed decision-makers
Freeleads identifies, for each qualified job listing, the professional most likely to be responsible for the need (for example a CTO or marketing director) and makes their professional contact details available to our customers so they can propose their services.
- Data: name, job title, employer, professional email address, professional phone number, public professional profile URL.
- Sources: publicly available job listings and company information, and specialised B2B data providers.
- Purpose: enabling relevant B2B service proposals related to your professional role.
- Legal basis: our and our customers’ legitimate interest in B2B prospecting (Art. 6(1)(f) GDPR). We limit processing to professional data and to messages relevant to your role.
- Retention: contact details are kept for a maximum of 12 months after collection unless refreshed.
- Your right to object: you can object at any time, without justification, using our removal form. We erase your contact details immediately and add a one-way hash of your email to a suppression list so you are never added again.
4. Recipients and processors
We never sell personal data. We share data only with service providers acting on our instructions, under data-processing agreements:
- Hosting provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (EU hosting)
- Payments: Stripe Payments Europe Ltd.
- Transactional email delivery provider
- AI qualification of job listings: Anthropic (listing text only — no customer data)
- Contact enrichment providers (for decision-maker data)
When a processor is located outside the European Economic Area, transfers are protected by the European Commission’s Standard Contractual Clauses or an adequacy decision.
5. Security
We apply industry-standard measures described on our security page, including encryption in transit, argon2id password hashing, encryption of authentication secrets, access controls, and audit logging.
6. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to define instructions about your data after death. Customers can export or delete their data directly from Settings → Data & privacy. For anything else, email contact@freeleads.fr. We answer within one month.
You can also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
7. Cookies
We only use cookies that are strictly necessary for the service. See our cookie policy.
8. Changes
We will notify customers by email of any material change to this policy at least 30 days in advance.