Privacy policy
Last updated: 1 October 2026
This policy explains what personal data Freqo processes, why, and what your rights are. It covers three situations: visiting freqo.eu, having a Freqo account, and visiting a website that uses Freqo.
Who is responsible
Freqo is operated by HSLP, whose details are in the legal notice. For any question about your data, write to hello@freqo.eu.
1. When you visit freqo.eu
This website uses no cookies and stores nothing on your device. We measure its audience with Freqo itself, in its anonymous mode: we count page views, the page you came from, your country, your type of device and browser, without storing your IP address. To count unique visitors per day, a short fingerprint is computed from your IP address and browser with a secret that changes every day and is then deleted, so you cannot be recognised from one day to the next.
This processing is based on our legitimate interest in knowing how our website is used (article 6(1)(f) GDPR). The statistics are kept for 25 months.
2. When you have a Freqo account
What we collect
- Account details: your name, email address, organisation name and preferred language.
- Your password, stored only in a form that cannot be reversed (scrypt hash).
- Technical data: a session cookie that keeps you signed in, your login dates and the days you used the dashboard (only dates, not what you looked at).
- Your Sites, settings and goals.
- Billing details when you take a paid Plan: plan, invoices and payment status. Card numbers are handled by our payment provider and never reach our servers.
- Your messages when you contact us.
Why, and on what legal basis
- To provide the Service and manage your subscription: performance of the contract (article 6(1)(b) GDPR).
- To issue invoices and keep accounting records: legal obligation (article 6(1)(c)).
- To secure the Service and prevent abuse, such as repeated free trials or fake traffic: legitimate interest (article 6(1)(f)).
- To understand how the Service is used and to help customers who have not finished setting it up: legitimate interest (article 6(1)(f)).
- To tell you about important changes to the Service: performance of the contract. We do not send marketing emails without your consent.
How long we keep it
- Account data: as long as your account exists. When you delete your account, it is deleted immediately, and from our backups within 14 days.
- Invoices: 10 years, as required by French accounting law.
- Dates of activity on the dashboard: 13 months.
- The list of domains that used a free trial: up to 3 years, only to prevent repeated trials.
Cookies on app.freqo.eu
The dashboard uses one strictly necessary cookie, freqo_session, which keeps you signed in for up to 30 days. It also remembers display preferences (such as the selected period) in your browser's local storage. Neither is used for tracking, so no consent is required.
3. When you visit a website that uses Freqo
Websites that use Freqo decide how their audience is measured: they are the data controllers, and Freqo processes the data on their behalf as a processor, under a data processing agreement. Their own privacy policy tells you more.
- For every visitor, Freqo counts visits anonymously: the page viewed, the referring page, campaign tags, country (derived from the IP address, which is not stored), type of device, browser and operating system, screen width, language, time spent and scroll depth, and some interactions (downloads, links to other sites, and actions the site has chosen to measure). Nothing is stored on your device, and your IP address is never stored.
- Only if you accept the site's consent banner, a random identifier is stored in your browser for 13 months at most, so that your next visits to that same site can be recognised. It is never shared between sites. Your choice is stored in your browser and asked again after 6 months. You can change your mind at any time with the site's privacy settings button, or by clearing your browser data.
To exercise your rights over these statistics, contact the website concerned. We help website owners answer such requests. Note that anonymous statistics cannot be linked back to you.
Who processes the data
| Provider | Role | Location |
|---|---|---|
| OVH SAS (OVHcloud) | Hosting of the website, the dashboard and all statistics | Zurich, Switzerland |
| Postmark (ActiveCampaign, LLC) | Sending account emails, once email notifications are enabled | United States |
| Stripe Payments Europe, Ltd. | Payments for paid Plans, once online payment is enabled | Ireland, United States |
Switzerland is recognised by the European Commission as offering an adequate level of protection. Transfers to the United States are covered by the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. Visitor statistics never leave Switzerland. We never sell or rent personal data.
Security
Connections are encrypted (HTTPS). Databases are not reachable from the internet, passwords are hashed, access to servers is limited to our team, and statistics are deleted automatically after 25 months. More detail is given in the data processing agreement.
Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, and to receive it in a portable format. You can also give instructions about what happens to your data after your death. Write to hello@freqo.eu; we answer within one month. You can delete your account yourself at any time from “My account”.
If you think your rights are not respected, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the data protection authority of your country.
Changes
We will update this page if our practices change, and tell account holders by email about any important change.