Privacy Policy

1. Introduction

At 7obits ("we," "our," or "us"), we respect your privacy and are committed to protecting the personal data of our users (freelancers) and their clients. This Privacy Policy explains how we collect, use, store, and share information when you use 7obits, our CRM, proposal workflows, milestone tracking, and invoicing portals.

2. Information We Collect

To provide our freelance operating system, we collect the following types of information:

• Account Information: When you register on 7obits, we collect your email address, password, and profile data including your business name, hourly rates, default currency, and GST registration details (GSTIN).
• Client Data: You may input details about your clients into our CRM, including client name, email address, company details, and project status.
• Proposals, Projects & Invoices: We store information regarding the documents you draft, including proposal text, scope items, milestones, tasks, hourly rates, time tracking logs, and generated PDF invoice reports.
• E-Signature Logs: When a client signs a proposal via our public portal, we log their typed name, timestamp, and network identifier to validate the digital contract.

3. Data Security & Tenant Isolation

We prioritize data security. 7obits is designed with strict data isolation boundaries using PostgreSQL Row-Level Security (RLS). This means:

• Your database records are associated with your unique freelancer user ID.
• No other freelancer can view, modify, or interact with your clients, projects, or invoicing records.
• Public client portals use unique cryptographic tokens in URLs to ensure only clients with the explicit link can access their designated invoice or proposal.

4. How We Use Your Information

We process your data to operate the Service, including:

• Authenticating your account and maintaining your active dashboard sessions.
• Generating GST-compliant invoices, tracking project milestones, and logging stopwatch timers.
• Sending transactional notification emails (such as proposal acceptance alerts) to you and your clients using Resend.
• Improving our application interface and troubleshooting software bugs.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We only share information with third-party service providers essential for running the platform:

• Supabase: For cloud hosting, PostgreSQL database storage, and user authentication infrastructure.
• Resend: For dispatching transactional emails (e.g., sending you a PDF copy or notifying you when a proposal is signed).

6. Cookies & Local Storage

We use standard session cookies to verify your identity and maintain secure authentication states. We also utilize browser Local Storage to cache configurations, such as your dark/light theme choice, sidebar toggle state, and active time-tracking stopwatch status.

7. Data Retention & Rights

You own your data. You may download, update, or edit your client records, invoices, and profile at any time. You can request permanent account deletion by contacting us, in which case we will delete all records associated with your account, except where we are legally required to retain invoices or financial transaction histories for tax audit compliance.