Privacy Policy

1. Who We Are

Freelax is a tax dashboard service for freelancers (OSVČ) in the Czech Republic. We are based in Prague, Czech Republic.

Operator: Jan Piskač
IČO: 23968290
Address: Jugoslávských partyzánů 1602/25, 160 00, Praha 6 - Dejvice
Contact: privacy@freelax.cz

2. What Data We Collect

We collect the following personal data when you sign up for our waitlist or complete our survey:

Waitlist Signup

• Email address
• GDPR consent status and timestamp
• Source information (how you found us)

Survey Responses

• Your freelancer status and experience
• Current pain points with tax management
• Pricing preferences
• Feature priorities
• Optional free-text feedback

Technical Data

• IP address (used only for rate limiting, not stored permanently)

3. Why We Collect Your Data

We process your personal data based on your consent (GDPR Article 6(1)(a)). You provide this consent when you check the GDPR consent checkbox during signup.

We use your data to:

• Add you to our waitlist for product launch notifications
• Understand freelancer needs to build a better product
• Send you updates about Freelax (you can unsubscribe anytime)
• Protect our service from spam and abuse

4. How Long We Keep Your Data

We retain your data until our product launches and you either become a customer or request deletion. You can request deletion of your data at any time by contacting us at privacy@freelax.cz.

5. Who We Share Your Data With

We use the following third-party services to operate our website:

• MongoDB Atlas (database hosting) - Your data is stored securely in MongoDB's cloud infrastructure
• Resend (email delivery) - Used to send you waitlist confirmation and updates
• Vercel (hosting) - Our website is hosted on Vercel's infrastructure

We do not sell your personal data to third parties.

6. Your Rights

Under GDPR, you have the following rights:

• Right of access - Request a copy of your personal data
• Right to rectification - Request correction of inaccurate data
• Right to erasure - Request deletion of your data ("right to be forgotten")
• Right to data portability - Receive your data in a machine-readable format
• Right to withdraw consent - Withdraw your consent at any time

To exercise any of these rights, contact us at privacy@freelax.cz.

7. Cookies

We use only essential cookies that are necessary for our website to function. These cookies do not track you or collect personal information for advertising purposes.

Essential cookies we use:

• Session cookies for authentication (when applicable)
• Cookie consent preference storage

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Secure database hosting with encryption at rest
• Rate limiting to prevent abuse
• Input validation to prevent injection attacks
• Security headers (CSP, HSTS, X-Frame-Options)

9. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ):

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@freelax.cz