Privacy Policy

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Data"), including:

• Account Information: Name, email address, company name, and password when you create an account as a Freelancer.
• Client Information: Email addresses of clients entered by Freelancers to facilitate file delivery and payment notifications.
• Transaction Data: Invoice amounts, project descriptions, and payment status. Note: We do not directly collect or store credit card numbers. All payment processing is handled securely by Stripe.
• Audit Log Data (Critical for Service): To provide our core anti-fraud features, we collect detailed metrics when a Client accesses a portal, including IP addresses, browser/device user agents, access timestamps, and cryptographic hashes of downloaded files.

2. How We Use Your Information

We use your data strictly to operate and improve the Handoff Service:

• To create and manage your account.
• To host, watermark, and deliver your uploaded files.
• To generate immutable PDF Audit Logs used for payment dispute resolution.
• To send transactional notifications via our email service provider.
• To enforce our Terms of Service and prevent fraudulent activity.

3. How We Share Your Information

We do not sell your personal data. We only share information with trusted third-party sub-processors necessary to run our infrastructure:

• Cloud Infrastructure: Cloudflare (R2) and Bunny.net (CDN) for encrypted file storage and global delivery.
• Payment Processors: Stripe, to securely facilitate payments and route funds to your connected bank accounts.
• Transactional Email: Brevo, to deliver secure portal access links, system alerts, and receipts.
• Legal Compliance: We may disclose your information if required to do so by law, or in response to valid requests by public authorities.

4. Data Retention and Security

• Security: We use industry-standard administrative, technical, and physical security measures (including TLS/SSL encryption in transit and AES-256 encryption at rest) to protect your Personal Data.
• Retention: We retain account and project data as long as your account remains active or as needed to maintain access to past audit logs. Audit log data is retained permanently for Pro tier users to ensure ongoing protection against delayed chargeback claims.

5. Your Data Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request the correction of inaccurate data.
• Request the deletion of your personal data ("Right to be Forgotten"), subject to our legal, accounting, and anti-fraud retention obligations regarding past transaction records and Audit Logs.

To exercise these rights, please email us at moonshot364@gmail.com

6. Advertising and Operational Tracking

Handoff does not use tracking pixels or cookies for third-party behavioral advertising grids, persistent retargeting profiles, or cross-site identity matching. However, to validate our initial market demand, we utilize the native Reddit Pixel strictly to attribute sign-ups originating from our active validation ad campaigns. If you arrive via a Reddit advertisement, a temporary tracking token is used to measure campaign conversion rates. We also run Microsoft Clarity in a strictly cookie-less framework to analyze interface usability, mouse interactions, and scroll velocities. First-party cookies have been explicitly disabled within our tracking scripts to keep user data collection as minimal and privacy-focused as possible.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be indicated by the "Last Updated" date. We encourage you to review this page frequently to stay informed of how we protect your data.