Privacy Policy

Last updated October 6, 2026 · version 1.12

This Privacy Policy explains how Brandflow, LLC, doing business as Freelance Mentors ("Freelance Mentors," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you use our website at https://freelancementors.com and the products, tools, and services we make available through it (collectively, the "Services").

We provide community, coaching, courses, and a suite of online tools ("toolkits") that help freelancers and independent professionals build and grow their businesses.

By creating an account or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

Questions? If you have any questions or concerns about this policy or how we handle your information, contact us at [email protected].

Summary of key points

This summary highlights the most important points. You can find more detail in the full policy below.

What we collect. Account details you provide (name, email), the inputs you enter into our toolkits, files you upload, what you tell us when you ask for help (including diagnostic details about the page and device you were using), and limited technical information collected automatically (such as your IP address and basic device/usage data).
No passwords. We use passwordless sign-in (email "magic links"), so we do not collect or store account passwords.
How we use it. To create and operate your account, deliver the toolkits and their outputs, communicate with you, keep the Services secure, comply with the law, and - with the appropriate basis - send you marketing about our tools and programs.
AI features. Some toolkits send the inputs you provide to third-party AI providers to generate results for you. We do not log or store the prompt or response content of those AI requests as part of our system logs.
Who we share with. We share information with the service providers ("sub-processors") that host and operate the Services on our behalf - for example our database/auth, hosting, email, AI, storage, audience-research, and analytics providers. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Marketing email. When you create an account you agree to receive marketing email from us, sent through our email provider Loops. You can unsubscribe at any time; this does not affect transactional or account messages.
Your choices. You can update your account at any time, and you can delete it whenever you like - a deletion is held for a short cancellation window (7 days) before it becomes permanent, so an accidental request can be undone. You can also email us to exercise privacy rights available under your local law.
Children. The Services are for adults; we do not knowingly collect information from anyone under 18.

Who we are
What information we collect
How we use your information
Legal bases for processing (EEA/UK)
How AI features use your information
When and with whom we share information
Cookies and analytics
Marketing communications
How long we keep your information
How we protect your information
Anonymous and guest sessions
Children's privacy
Your privacy rights
U.S. state privacy rights
Do-Not-Track signals
Changes to this policy
How to contact us

1. Who we are

The Services are operated by Freelance Mentors, LLC. We are the controller responsible for your personal information described in this policy.

Contact: [email protected]

Mailing address:

Freelance Mentors
2261 Market St, STE 82789
San Francisco, CA 94114
United States

2. What information we collect

2.1 Information you provide to us

Account information. When you sign up, we collect your first name, last name, and email address. You may also choose a public profile handle (a "slug") used in your profile URL. We use passwordless authentication, so we do not collect a password.
Profile and calibration details. As you use the Services, you may provide information about your freelance work that personalizes the toolkits, such as your freelance role, experience level, industry background, areas of interest, business structure and state, county, household size, your primary niche, and your standard working hours. You choose what to provide; some of these details are used to tailor tool outputs and AI results.
Toolkit inputs and content. Our toolkits let you create and save content - for example, niche and positioning descriptions, pricing inputs and strategies, service packages, profile bios, portfolio case studies, workflow blueprints, and client reviews. This content is stored under your account and is visible only to you unless a particular feature is expressly designed to publish it (for example, a public profile or a pseudonymous review you choose to submit).
Uploaded files. You may upload images and documents - such as a profile avatar, portfolio media, or supporting documents for a business claim. Some uploads are public (e.g., a profile avatar) and some are private (e.g., claim documents); this is indicated where you upload them.
Reviews and pseudonymous content. If you submit a client review through our directory feature, you do so under a pseudonym. The link between your account and your pseudonym is kept private and is not shown publicly with the review.
Support requests and other communications. If you contact us - through the in-app "Get help" form, the "Report this problem" button on an error page, our contact form, or by email - we collect what you include in your message and any screenshots you attach. If you aren't signed in, we also collect the email address you give us so we can reply. When you use the in-app form or button, we attach diagnostic details about the page and device you were using (see Section 2.2). If you email us about a problem, we may add your message to your support requests in your account so the whole conversation is in one place.
Consent records. When you accept our legal documents (such as this Privacy Policy and our Terms of Service), we record which document and version you accepted and when. For audit and fraud-prevention purposes we also record the IP address and browser user-agent associated with that acceptance (see Section 9 for how long).

2.2 Information we collect automatically

When you use the Services, we and our service providers automatically collect limited technical information, including:

IP address and basic device/connection information (such as browser type), used to operate and secure the Services, prevent abuse, and as part of our consent and security records.
Usage and analytics events describing how you move through key flows (for example, when a sign-up screen is shown, submitted, or completed). See Section 7.
Support diagnostics. When you send a request through the in-app "Get help" form or the "Report this problem" button, we attach technical details to help us understand the problem: the address and title of the page you were on; the toolkit or lesson; your browser, operating system, device type, and screen and window size; your light or dark theme setting, time zone, and language; which version of the site you were using; recent technical errors on that page (the error message and where it occurred) and an error's reference code; the addresses of the last few pages you visited on our site; and your analytics session reference, which lets us look up the product events from that visit (see Section 7). If you are signed in, we also record which of our plans or programs your account had at the time, and we record the IP address and browser user-agent the request came from. The form shows you this list before you send. We do not capture what you have typed into a toolkit, the contents of the page, or a recording of your screen.

2.3 Payment information

We do not currently process payments or operate paid subscriptions for general users. If and when we offer paid plans, payment processing will be handled by a third-party payment processor (such as Stripe), and we will not store full payment card numbers on our systems. We will update this policy before payment processing becomes active.

2.4 Sensitive information

Some information you choose to enter into certain toolkits - for example, financial or business figures, or details about your clients - may be considered sensitive. We process such information only to provide the relevant tool's output to you, and only with the inputs you choose to provide.

3. How we use your information

We use the information described above to:

Create and manage your account and authenticate you (including sending sign-in "magic links").
Provide the toolkits and generate the outputs you request, including assembling documents and results from the inputs you enter.
Personalize your experience, such as pre-filling tools with details you've already shared and tailoring recommendations.
Communicate with you, including sending transactional and service messages (such as sign-in links, security notices, and messages about activity in your account) and - where permitted - marketing about our tools and programs (see Section 8).
Help you when you ask, including answering your support requests, investigating and fixing problems you report, and following up until a request is resolved.
Maintain security and prevent abuse, including spam and bot protection, rate limiting, and fraud prevention.
Operate, analyze, and improve the Services, using aggregated and event-level usage data.
Comply with law and enforce our legal terms, including maintaining consent and acceptance records.
Understand who our audience is, in aggregate (for example, which professional fields and career stages are represented), so we can build the right toolkits and write the right material.

4. Legal bases for processing (EEA/UK)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

Performance of a contract - to create your account and provide the Services you request.
Legitimate interests - to secure the Services, prevent abuse and fraud, understand how the Services are used and who our audience is, and improve them, in a way that does not override your rights.
Consent - for marketing communications and for any optional processing that requires it; you may withdraw consent at any time.
Legal obligation - where we must process information to comply with applicable law.

5. How AI features use your information

Some toolkits use third-party artificial-intelligence providers to generate results for you (for example, niche suggestions, pricing guidance, or drafted text). When you use one of these features:

The inputs you provide for that feature are sent to the AI provider to generate a response. Depending on the tool, these inputs may include details such as your role, experience, business information, or text you've written.
We do not include your prompt or the AI's response content in our system logs. Our internal records of AI usage store only operational metadata - such as which tool and template were used, the model, token counts, timing, and cost - never the text you entered or the text generated.
Some AI results that you choose to keep (for example, an adopted pricing recommendation) are saved under your account so the tool can show them to you again.
AI output is suggestive, not authoritative. We do not treat AI-generated content as a statement of fact about you, and you should review any AI output before relying on it.

Our current AI providers are listed among the sub-processors in Section 6.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described here.

6.1 Service providers (sub-processors)

We rely on third-party providers to host and operate the Services. They process personal information on our behalf, under contract, and only as needed to provide their service:

Provider	Role	Information processed
Supabase	Database and authentication	All account data and content you store with us, including name, email, and toolkit data
Vercel	Application hosting	Processes requests to operate the Services, including IP address
Loops	Marketing email	Email address, name, and marketing tags/events used to send and segment marketing email
Resend	Transactional email	Recipient email address and message content for service emails (such as sign-in links and replies to your support requests)
Notion	Internal task tracking	The text and diagnostic details of a support request that needs engineering work - never your name or email address
Anthropic, and where applicable OpenAI and Google	AI features	The inputs you submit to an AI-powered tool (see Section 5), and, when we investigate a support request, its text and diagnostic details - never your name or email address
Cloudflare	File storage (R2) and bot/abuse protection (Turnstile)	Files you upload; for abuse protection, a challenge token and your IP address at the time you submit certain forms
Amazon Web Services (S3)	Backup file storage / failover	Files you upload, when our primary storage provider is unavailable
PostHog	Product analytics	Usage events and an analytics identifier (see Section 7)
Upstash	Rate limiting (optional)	Short-lived rate-limit identifiers (such as user or IP keys)
Stripe	Payment processing (not yet active)	Will process payment information only if and when we introduce paid plans
SparkToro	Audience research	Email address, processed transiently to produce aggregate audience insights and deleted when processing completes

Public features you choose to use. Information you intentionally make public - such as a public profile or a review you submit - will be visible to others as described in that feature.
Legal and safety. We may disclose information where we believe it is necessary to comply with the law, enforce our terms, or protect the rights, property, or safety of our users, the public, or us.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change as required by law.

7. Cookies and analytics

We use a small number of cookies and similar technologies, primarily to operate the Services and understand how they are used:

Authentication cookies. When you sign in, our authentication provider (Supabase) sets cookies that keep you logged in and maintain your session. These are essential to using your account.
Analytics. We use PostHog to understand how people use the Services so we can improve them. PostHog records product events (such as when key screens are viewed, submitted, or completed) and uses an analytics identifier stored in a cookie. We configure PostHog so that a personal analytics profile is created only after you sign in (it is set to "identified-only"); before that, activity is associated with an anonymous identifier. We do not use these analytics for third-party advertising.

We do not use Google Analytics or third-party advertising/retargeting cookies.

Most browsers let you control or remove cookies through their settings. Blocking essential authentication cookies will prevent you from staying signed in.

8. Marketing communications

When you create a Freelance Mentors account, you agree to receive email from us about our tools, programs, and resources, in addition to the transactional and service messages required to operate your account.

You can opt out of marketing email at any time using the unsubscribe link in any such message. Opting out of marketing email does not affect transactional or account-related messages (for example, sign-in links, security notices, and messages about activity in your account), which we send as needed to operate the service.

Marketing email is sent through our email service provider, Loops. Every marketing message includes our mailing address and a working unsubscribe link, and we honor unsubscribe requests promptly.

9. How long we keep your information

We keep your personal information for as long as your account is active or as needed to provide the Services, and afterward only as long as necessary for the purposes described in this policy or as required by law.

Account and content. Retained while your account exists. When you ask to delete your account, we schedule the deletion and hold your account for 7 days before permanently erasing it. During that period your account is deactivated and no longer visible to others, and you can cancel the deletion at any time by signing back in. After the 7 days pass, we delete or anonymize the personal information associated with your account, except where we must retain certain records to comply with the law, resolve disputes, prevent fraud, or enforce our agreements.
Community contributions. If you post to shared community spaces - for example notes or questions left on a lesson or tool, answers you give, or feedback you offer another member - those contributions become part of a lasting, communal knowledge record that helps other members. If you delete your account, we may keep these contributions but remove your name and any link to your identity, so the shared knowledge remains while your personal information does not. Work that is personal to you, such as your own material submitted for feedback, drafts, and private files, is deleted or anonymized as described above.
Ban records. If we ban an account for breaking our Terms of Service, we keep a ban record to prevent that account holder from creating a new account or otherwise circumventing the ban. The record contains a one-way, keyed fingerprint of the account's email address, the general reason for the ban (for example, "abuse or harassment"), and the dates of the ban, of any later account deletion, and of any attempts to create a new account with a matching address. We keep this record after the account itself is deleted, for as long as the ban remains in effect.
Support requests. We keep your support requests and their conversations until we delete them or you delete your account. Screenshots you attach are deleted 6 months after the request is resolved. The IP address and browser user-agent recorded with a request are removed after 365 days, as with our other audit records. A request sent without signing in is also deleted if an account using the same email address is deleted.
Audit and security records. For records that capture an IP address and browser user-agent - such as legal-acceptance/consent records, certain review and abuse-protection records, and contact-form submissions - we automatically remove the IP address and user-agent after 365 days, while preserving the underlying record (for example, the fact and version of a consent).
Marketing event records. Personal fields in our internal marketing event logs (such as an associated email address) are automatically removed after 365 days.
Exports. Files generated by a data-export feature are automatically deleted after they expire.
Audience research. When we share email addresses with an audience-research provider, the provider deletes them as soon as processing completes. We retain only the aggregate, anonymized result.

When we no longer have a legitimate need to process your personal information, we delete or anonymize it.

10. How we protect your information

We use appropriate technical and organizational measures designed to protect personal information, including access controls, row-level security on user data in our database, encryption in transit, sanitization of uploaded files, and bot/abuse protections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Anonymous and guest sessions

Some of our free tools let you begin using them before you create an account. In that case we create a temporary, anonymous session so the tool can save your progress. If you later provide your email to create an account, that anonymous session is upgraded to your account so your work carries over - we do not create a separate record. If you never create an account, the anonymous session data is not associated with your identity.

If you ask for help without signing in, we ask for your email address so we can reply, and we email you a private link to your request. Anyone with that link can read and reply to the conversation, so please don't share it. Links stop working 14 days after the request is resolved. A request sent this way is not added to any account, even one that uses the same email address.

12. Children's privacy

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

13. Your privacy rights

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or obtain a copy of it, and to object to or restrict certain processing.

In-app controls. You can review and update your account information at any time in your account settings, and you can delete your account. We hold a deletion request for 7 days before it becomes permanent - you can cancel it by signing back in during that window - after which we delete or anonymize the personal information associated with it (subject to the limited retention described in Section 9). You can also download a copy of the personal information in your account, including your support requests, from your account settings.

Contacting us. To make a formal privacy request - including access, correction, deletion, a copy of your data, or to withdraw consent - email us at [email protected]. We will respond as required by applicable law. We may need to verify your identity before acting on your request, and we will not discriminate against you for exercising these rights.

Marketing opt-out. You can unsubscribe from marketing email at any time using the link in any marketing message (see Section 8).

Audience research opt-out. If you'd prefer your information not be included in aggregate audience research, email us at [email protected] and we'll exclude you. This has no effect on your account or your access.

If you are in the EEA or UK and believe we have processed your information unlawfully, you also have the right to lodge a complaint with your local data protection authority.

14. U.S. state privacy rights

Depending on your state of residence, U.S. state privacy laws (such as those in California, Colorado, Connecticut, Virginia, and other states) may give you the right to know what personal information we collect, to access and obtain a copy of it, to correct or delete it, and to opt out of certain processing.

We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not use sensitive information to infer characteristics about you.

To exercise any of these rights, use the in-app controls or email us as described in Section 13. If we decline a request, you may appeal by replying to our decision. California residents may also request information about disclosures for direct-marketing purposes under California's "Shine the Light" law.

15. Do-Not-Track signals

Because there is no common industry standard for how to respond to "Do Not Track" browser signals, we do not currently respond to them. If a standard is adopted, we will update this policy.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, if the changes are material, provide a more prominent notice. We encourage you to review this policy periodically.

17. How to contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

Freelance Mentors, LLC
[email protected]
Freelance Mentors
2261 Market St, STE 82789
San Francisco, CA 94114
United States