Privacy Policy

This Privacy Policy describes what data Freehold collects, how we use it, and the choices you have. Freehold is operated by Freehold. We collect the minimum data needed to run the service and do not sell your information to anyone.

1. Information We Collect

Account information

When you register, we collect your email address and a hashed password. If you sign in via GitHub OAuth, we receive your GitHub username and email.

Billing information

Payment is handled by Stripe. We never store raw card numbers. We receive and store a Stripe customer ID and payment method metadata (card last 4 digits, expiry). Your full card details are held solely by Stripe and governed by Stripe's Privacy Policy.

App and infrastructure data

We store metadata about the apps you deploy: app name, image, environment variable names (values are encrypted at rest), resource allocation, and deployment history. We do not read the data inside your applications.

Usage and log data

We collect API request logs and container runtime logs for operational purposes. Logs are retained for 14 days by default. IP addresses in logs are used for rate limiting and security monitoring.

Cookies and sessions

We use a single session cookie to keep you logged in. We do not use advertising cookies or tracking pixels.

2. How We Use Your Data

• To operate the service: provision compute, route traffic, issue TLS certificates
• To send transactional email: account confirmation, password reset, billing receipts
• To enforce our Acceptable Use Policy and investigate abuse
• To improve the service: aggregate usage metrics, performance monitoring

We do not use your data to train AI models. We do not show ads.

3. Third-Party Services

• Stripe — payment processing (privacy policy)
• Cloudflare — DNS and TLS certificate issuance for wildcard domains (privacy policy)
• Resend — transactional email delivery (privacy policy)

We do not share your personal data with any other third parties except as required by law.

4. Data Retention

We retain your account data for as long as your account is active. After account deletion, personal data is purged within 30 days. Log data is purged after 14 days. Stripe retains billing records as required by financial regulations.

5. Security

Environment variable values are encrypted at rest with AES-256-GCM. All traffic between you and Freehold is encrypted via TLS. We follow responsible security practices and investigate reports promptly — email hello@haven.roy.it.com to report a vulnerability.

6. Your Rights

You may access, export, or delete your data at any time from your account dashboard. To request data deletion or a full data export, email hello@haven.roy.it.com. We will fulfill requests within 30 days. If you are located in the EU/UK, you have additional rights under GDPR/UK GDPR including the right to restrict processing and the right to lodge a complaint with your supervisory authority.

7. Children

Freehold is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

8. Changes to This Policy

We will notify registered users by email before making material changes to this policy. The effective date at the top of this page reflects the most recent update.

9. Contact

Questions or requests? Email hello@haven.roy.it.com.