Privacy Policy

1 Who processes your data

The controller is Freeliq B.V., registered with the Dutch Chamber of Commerce (KVK) under number 42145158, VAT identification number NL869917286B01. Where “we” or “us” appears below, that is Freeliq B.V.

The registered address can be looked up in the Dutch business register using that KVK number. Questions about your data, or a request to exercise a right, go to info@freeliq.com; we respond within one month.

2 What we process

We keep the data footprint small and purpose-bound.

• Account details — your name, email and a password stored only as a bcrypt hash.
• Company & billing details — KVK number, VAT number and bank details shown on your invoices.
• Work data — the hours, engagements and projects you log.
• Contacts you invite — the clients who review and approve your hours.
• Integration tokens — credentials for the tools you connect, encrypted at rest.

3 Your bookkeeping stays the source of truth

Freeliq holds hours and rates, not your books. Your connected bookkeeping system (Moneybird or Exact Online) stays the system of record for all financial data — Freeliq only reads back totals and writes the invoice lines you authorise.

We never sell your data and never use it for advertising.

4 Where your data is stored

Your data is hosted within the EU on a server in Germany (Hetzner). Database backups are encrypted (AES-256) and kept in the EU; file attachments are stored in AWS S3 in the EU. Each organisation's data is isolated at the database level, so one customer can never see another's.

5 Who we share it with

We use a small set of processors, each only for the task named and bound by a data-processing agreement:

• Hosting & database — Hetzner (Germany).
• File storage — AWS S3 (EU).
• Transactional email — Resend.
• Payments — Stripe (only when you subscribe).
• Error & performance monitoring — Grafana Cloud.
• AI coach — Anthropic, only for what you submit when you use it.
• Company verification — the Dutch KVK register.
• Website analytics — Google Analytics, on this website only and only with your consent.
• Advertising measurement — Google Ads, on this website only and only with your consent.

6 How long we keep it

We keep your data while your account is active. When you request deletion, your account and associated data are permanently removed within 30 days, except where we must retain limited records to meet a legal obligation.

7 Your rights

Under the GDPR you stay in control of your data at all times.

• Access, correct or export your data — your hours export to Excel at any time.
• Delete your account and associated data on request.
• Object to or restrict processing, and withdraw consent.
• Withdraw integration access by disconnecting a provider.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).