Home
Privacy Policy
Last updated: October 2026
The short version
AbsoluteOne helps freelancers find work, write proposals, deliver client work, and get paid. We collect only what's needed to provide those features, we never sell your data, and our AI keys stay on our servers. The browser extension reads only the single job page you're actively viewing, when you ask it to. It never scrapes job listings and never submits anything on your behalf.
What we collect
- Account info: email and authentication, via Supabase.
- Profile you provide: your offer/services, portfolio, brand voice, and writing-style samples used to ground proposals and deliverables.
- Work data you create: opportunities, proposals, clients, deliverables, invoices.
- Extension: the content of the freelance job page you are viewing, only at the moment you click to draft or score, so we can produce a fit score and proposal for that job.
- Basic usage counts (e.g. AI generations used) to enforce plan limits.
- We use Google Analytics and store signup source and UTM parameters on your account.
How we use it
Your data is used only to provide the features you see: scoring opportunities, generating proposals and deliverables in your voice, and managing your pipeline. AI processing runs server-side using our own API keys. We do not use your data for advertising and we do not sell it.
The browser extension (Limited Use)
The extension reads page content from supported freelance sites (Contra when signed in, PeoplePerHour, Guru, Workana, Truelancer) solely to power the proposal-assist feature described here and in the install guide on /connect. It is assist-only: you review and submit every proposal yourself. It does not auto-apply, does not crawl or bulk-collect listings, holds no API keys, and requests access only to the sites it supports plus your own AbsoluteOne endpoint. Use of data obtained from web pages is limited to the user-facing proposal-assist feature (aligned with Chrome Web Store Limited Use principles): it is used only for the user-facing feature, not transferred or sold, and not used for any unrelated purpose. Upwork page reading is paused pending Upwork's approval.
Connection token. The Chrome and Firefox extensions store a connection token (an ingest token) and your AbsoluteOne API endpoint URL in chrome.storage.sync. If you are signed in and sync is on, that browser can copy this storage to your other signed-in browsers.
- What it stores: the ingest token (a random code tied to your account) and the endpoint address. They are saved when you click Connect extension on /connect, or when you enter them under Manual setup in the extension popup and click Save manually. The token does not expire on its own.
- What it grants: on our servers, the token stands in for your account only for these requests: drafting a proposal (the extension's draft also scores that job and saves it), saving a job, checking whether a job is already saved, recording an outcome, and adding a job through /api/ingest. The extension sends it only as a Bearer token to the AbsoluteOne origin you saved (absoluteone.ai). It is not sent to the freelance sites the extension reads. It keeps working until you regenerate it or your account is deleted.
- How to revoke it: sign in, open /connect, then open Manual setup and click Regenerate token. That replaces the token on our servers, and the old token stops working right away. Regenerating does not erase the copy stored in the extension. Click Connect extension again, or paste the new token under Manual setup and click Save manually, to replace that copy.
- There is no disconnect button. To stop this browser from sending the token, open the extension popup, empty the Token field under Manual setup, and click Save manually. That overwrites the stored token with an empty value. The endpoint address stays in chrome.storage.sync unless you empty that field and save too. This does not revoke the token on our servers. Uninstalling the extension does not revoke it either.
Storage, sharing & retention
Data is stored in Supabase (Postgres) with row-level security so each account sees only its own data. We share data only with the infrastructure providers needed to run the service (Supabase for the database, and AI providers we contract with for generation — today including Anthropic, OpenAI, Google (Gemini), Perplexity, and other AI providers we contract with for image, video, or audio generation; the current set may change). We retain your data while your account is active; you can request deletion at any time and we remove your account data.
Payments
Paid plans are sold through a third-party merchant of record (such as Paddle.com or Dodo Payments; the current one is shown at checkout and on your receipt). They handle checkout, card processing, taxes, and receipts under their own privacy policies. Your card details never touch our servers: we receive only what we need to run your subscription, such as your plan, billing status, and renewal date.
Your choices
You can edit or delete your profile, portfolio, and work data in-app. The extension has no disconnect button. Emptying the Token field under Manual setup and clicking Save manually overwrites the stored token so this browser stops sending it; the endpoint address stays stored unless you clear that field too, and the token on our servers keeps working. To revoke it, open /connect, then Manual setup, and click Regenerate token. Uninstalling the extension does not revoke the token on our servers. You can request full account deletion by contacting us.
Contact
Questions about privacy? Email admin@absoluteone.ai.