Security and your data

FreelanceOS holds your clients, invoices, bank details and receipts, so here is exactly where that data lives, how it's protected and which services handle it.

Last updated 30 September 2026

Where your data is kept

Your account, business records and uploaded files are stored with Supabase in their EU region in Stockholm, Sweden. The app itself is served by Vercel, and our server code runs in Vercel's Stockholm region, next to the database.

Encryption

• In transit: every page, app screen and file transfer uses HTTPS. Browsers are told to refuse any unencrypted connection to freelanceos.org.
• At rest: the database and file storage are encrypted on disk by Supabase (AES-256).

Your data is kept separate

Every record carries the account it belongs to, and the database checks that on every read and write (row-level security). This is enforced by the database, not just by the app, so a fault in the app still can't show you someone else's jobs, clients or invoices.

The only other person who can see your account is a collaborator you add yourself in Settings, and you can remove them at any time.

Files you upload

• Job documents (purchase orders, crew packs, production books) are private. They open through a link that stops working after five minutes.
• Receipt images and job photos are stored in your account's own folder under a long random address. Only your account can list or delete them.

Signing in

You sign in with Google or with an email and password. Passwords are stored as one-way hashes by Supabase, never as plain text, so nobody at FreelanceOS can see them. If you forget yours, you can reset it from the sign-in screen.

Payments

Subscriptions are paid through Stripe. Card details are entered on Stripe's own checkout page and are never sent to or stored by FreelanceOS.

AI features

Some features use AI from Anthropic to read documents for you. Only what that feature needs is sent, and only when you use it:

• Receipt photos you scan, and receipt emails you forward, to pick out the supplier, date and amount.
• Work emails you forward, with their attachments and any shared files they link to, to set up and update jobs. This is off until you switch it on in Settings.
• Files you choose to read into a job from Google Drive.
• Messages you send to support, so we can answer faster.

Anthropic does not use this data to train its AI models. What the AI finds is saved to your own account like anything else you enter, and you can change or delete it.

Google

• Sign-in: if you sign in with Google, we receive your name and email address.
• Google Calendar (optional): used to add your jobs to your calendar and show your existing events alongside them.
• Google Drive (optional): FreelanceOS can only open files you pick yourself in Google's file picker, never the rest of your Drive.

You can remove FreelanceOS's access to your Google account at any time in your Google account settings.

Every service that handles your data

Some of these providers are based in the United States, so some data is processed there.

Your data belongs to you

• Export: Settings > Export all data downloads your jobs, clients, invoices, expenses and mileage as a file.
• Delete: email us and we'll delete your account and its data within 30 days, apart from anything the law requires us to keep.
• No selling, no advertising: we never sell your data or use it for advertising.

More detail on your rights is in our privacy policy.