Privacy Policy

1. Who We Are (Data Fiduciary)

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), FY Freelancing Solutions (OPC) Private Limited ("FreeYou", "we", "us") is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.

• Platform: freeyou.co.in
• Registered Office: Bangalore, Karnataka – 560001, India
• Data Protection Contact: freeyouforever@outlook.com

2. Data We Collect

2.1 Data You Provide Directly

2.2 Data Collected Automatically

3. How We Use Your Data

We will not use your personal data for purposes beyond those listed above without your explicit consent.

4. Legal Basis for Processing

Under the DPDP Act 2023, we process your personal data on the following lawful bases:

• Consent: Where you have provided explicit consent (e.g., for marketing communications, KYC);
• Contract Performance: Where processing is necessary to fulfil our services to you (account management, payments, matching);
• Legal Obligation: Where required by applicable Indian law (e.g., GST invoicing, law enforcement requests);
• Legitimate Interest: For fraud prevention, platform security, and product analytics — balanced against your privacy rights.

You may withdraw consent at any time for consent-based processing. Withdrawal of consent does not affect the lawfulness of processing done before withdrawal.

5. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• Service Providers: Third-party processors listed in Section 6, acting on our behalf;
• Client Introductions: Your verified profile information (name, skills, city, KYC badge) may be shown to prospective Clients as part of the matching process — this is the core purpose of the Platform;
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity — we will notify you in advance;
• Legal Requirements: When required by court order, government authority, or applicable Indian law;
• Consent: With any other party when you have given explicit consent.

6. Third-Party Data Processors

We engage the following third-party processors, each of whom has agreed to process data only as instructed and in compliance with applicable law:

7. KYC and Identity Data

Identity verification is conducted by Didit, an independent third-party provider. During KYC, you will be required to share:

• A government-issued photo ID (Aadhaar, PAN Card, Passport, or Driving Licence);
• A real-time selfie for liveness detection.

You may request information about your KYC session data directly from Didit at any time. KYC data is retained by Didit for a period specified in their terms, typically to support regulatory audits and re-verification requests.

8. Analytics and Tracking

We use PostHog for product analytics to understand how Users interact with the Platform. PostHog is configured to:

• Capture anonymised page views, click events, and feature usage;
• Not collect personally identifiable information unless you are signed in (in which case, a user ID may be linked to your events);
• Respect browser-level do-not-track signals.

We do not use Google Analytics, Facebook Pixel, or any cross-site advertising trackers. We do not serve targeted ads on the Platform.

9. Cookies and Local Storage

The Platform uses cookies and browser local storage for the following purposes:

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We do not use advertising cookies or cross-site tracking cookies.

10. Data Retention

At the end of the retention period, data is securely deleted or anonymised. You may request early deletion where legally permissible (see Section 11).

11. Your Rights Under DPDP Act 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

To exercise any of these rights, email freeyouforever@outlook.com with the subject line "DPDP Data Request — [Your Name]". We will acknowledge within 48 hours and respond within 30 days. We may ask you to verify your identity before fulfilling any request.

12. Data Security

FreeYou implements appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS enforced via Cloudflare);
• Access controls: Only authorised personnel with a need-to-know basis can access personal data in our CRM;
• API security: Our Cloudflare Worker API uses HMAC-SHA256 signature verification for all webhook communications;
• Payment security: Payment card data is handled entirely by Razorpay's PCI DSS Level 1 certified infrastructure — FreeYou never stores card numbers or CVV;
• Incident response: In the event of a data breach, we will notify affected Users and the Data Protection Board of India as required under the DPDP Act.

No method of transmission over the internet is 100% secure. While we use commercially reasonable measures, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

13. Children's Privacy

The FreeYou Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If you believe a child under 18 has provided personal data to us, please contact freeyouforever@outlook.com and we will promptly delete the data.

14. Cross-Border Data Transfers

FreeYou primarily stores and processes data within India. Our primary service providers (Zoho CRM India) operate within India. However, some processors (Cloudflare, PostHog) may process data on servers outside India.

Where data is transferred outside India, we ensure that adequate safeguards are in place in accordance with the DPDP Act, 2023 and any rules notified by the Central Government regarding cross-border data transfers. We will update this section as applicable rules are notified.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email to registered users at least 14 days before they take effect.

Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

16. Grievance Officer (DPDP Act / IT Rules 2021)

In accordance with the DPDP Act 2023 and IT (Intermediary Guidelines) Rules 2021, our Grievance Officer is:

17. Contact Information

• Privacy Requests: freeyouforever@outlook.com
• Grievances: freeyouforever@outlook.com
• General: freeyouforever@outlook.com
• Website: freeyou.co.in

This Privacy Policy was last updated on 25 June 2026. © 2026 FY Freelancing Solutions (OPC) Private Limited. All rights reserved.