Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and a hashed version of your password. We never store plaintext passwords.

When you use Handoff, we collect data you voluntarily provide — including project names, messages, uploaded files, invoices, and client information. We also collect usage data such as page views, feature interactions, and device/browser metadata to improve the product.

2. How We Use Your Information

• To provide, maintain, and improve the Handoff platform.
• To send transactional emails (e.g. invoice reminders, weekly briefings, password resets).
• To process payments through our payment processor (Stripe).
• To respond to support inquiries.
• To detect and prevent fraud or abuse.

We do not sell your personal information. We do not use your data to train AI models.

3. Data Storage & Security

Your data is stored on servers hosted in the United States via our infrastructure provider (Vercel and PostgreSQL). All data is encrypted in transit (TLS) and at rest.

Uploaded files are stored in secure cloud storage with access-controlled URLs. Files are only accessible to workspace members and invited clients.

4. Third-Party Services

We share limited data with the following third-party services to operate Handoff:

• Stripe — for payment processing. Stripe receives billing details necessary to process transactions.
• Resend — for transactional email delivery. Resend receives recipient email addresses and email content.
• Vercel — for application hosting and custom domain management.
• Cloudflare R2 — for file storage.

Each third-party service operates under its own privacy policy. We only share the minimum data required.

5. Cookies

Handoff uses essential cookies for authentication (session tokens). We do not use advertising or tracking cookies. No third-party trackers are loaded on the platform.

6. Client Portal Data

When a freelancer shares a Pass link with their client, the client may access the portal without creating an account. We record limited activity data (e.g. when the portal was opened, files downloaded) to provide read receipts to the workspace owner. This data is only visible to the workspace.

7. Data Retention & Deletion

You may delete your account at any time from your Settings page. When your account is deleted, all associated data — including workspaces, passes, messages, files, and invoices — is permanently removed within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Export your data.

To exercise any of these rights, contact us at privacy@usehandoff.app.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of Handoff after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy, contact us at privacy@usehandoff.app.