Privacy Policy

1. Introduction

Unbound Frequencies, Inc ("we", "us", "our") operates the freqlab platform. This policy describes how we collect, use, and protect your personal information when you use our services.

2. Information We Collect

Account information: Email address, name, and authentication credentials (via social OAuth, magic links, or passkeys).

Payment information: Billing details processed by Stripe. We do not store credit card numbers.

Usage data: Build submissions, download counts, and general platform usage for analytics and service improvement.

Plugin source code: Uploaded temporarily for cloud builds. Source files are stored in EU-jurisdiction object storage (Cloudflare R2) and deleted after build completion.

Waitlist (pre-launch): If you join the waitlist, we collect the email address you enter. We use it only to tell you when freqlab opens and to share occasional launch news. We keep it until you unsubscribe or ask us to remove it, or until the waitlist has served its purpose after launch.

3. How We Use Your Information

We use your information to provide and improve the Platform, process payments, send transactional emails (build notifications, account alerts), and comply with legal obligations. We do not sell your personal data.

4. Data Storage and Security

Data is hosted on servers in the EU (Hetzner, Germany). All traffic is routed through Cloudflare with no public IPs exposed. Signing credentials are encrypted at rest using OpenBao Transit encryption. We use industry-standard security practices to protect your data.

5. Third-Party Services

We use the following third-party services:

• Stripe - Payment processing and marketplace payouts
• Cloudflare - CDN, security, and object storage
• Resend - Transactional email delivery
• Loops - Stores and sends email for the pre-launch waitlist
• Plausible Analytics - Website analytics, self-hosted on our own infrastructure. It sets no cookies, does not track you across sites, and records only aggregate figures such as page views and referring sites.

6. Cookies

Essential cookies keep you signed in, hold your cart, and remember preferences you set. These cannot be turned off because the site does not work without them.

When you begin a purchase, Stripe sets cookies to process the payment and check for fraud. This happens only on a payment page and only once you have asked to pay, so it is required rather than optional. Declining cookies does not prevent you from buying anything.

Everything else is optional and off unless you choose it. Enhanced fraud prevention lets Stripe watch for stolen cards from the moment you arrive rather than only at checkout; turning it off does not affect your ability to buy, and your payment is still checked for fraud when you pay.

Your choice applies across freqlab.co and its subdomains, and you can change or withdraw it at any time using the Cookie preferences link in the footer of any page.

7. Your Rights

You have the right to access, correct, export, or delete your personal data. You can edit your profile and delete your account from your account settings, and account deletion includes a 14-day grace period during which you can cancel it. To request a copy of your personal data, email us at legal@freqlab.co and we will respond within one month.

8. GDPR Compliance

We comply with the EU General Data Protection Regulation. Data is hosted in the EU. You may request data export or deletion at any time. For GDPR inquiries, contact our data protection contact at legal@freqlab.co.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

10. Contact

For privacy-related questions, contact us at legal@freqlab.co.