Effective April 1, 2026

Privacy Policy

We built a privacy policy generator. It would be embarrassing if we did not have a good one ourselves.

Last updated: April 1, 2026 | Effective: April 1, 2026

On this page

1. Who We Are 2. What We Collect 3. How We Use It 4. Who We Share It With 5. Affiliate Links 6. Your Rights 7. Data Retention 8. Security 9. Children 10. Changes 11. Contact

1. Who We Are

FreeTOS.org is a free AI-powered legal document generator. We build tools that help website owners, developers, and small business owners create professional legal pages without paying a monthly subscription for the privilege.

Our website lives at https://freetos.org. If you have any privacy-related questions or requests, the fastest way to reach us is by email at [email protected].

This policy explains exactly what data we collect when you use FreeTOS, how we use it, who we share it with, and what rights you have over it. We have tried to write it in plain language, not lawyer language. If something is unclear, reach out and we will explain it.

2. What We Collect

There are four categories of data we might collect, depending on how you interact with the site. Here is each one explained plainly.

Server logs

Every web server on the internet collects basic access logs. Ours does too. These logs include your IP address, the type of browser you are using, which pages you visited, and when you visited them. This is standard infrastructure, not a surveillance operation. We use these logs for security monitoring and debugging. We do not sell them, and we do not build profiles from them.

Form inputs (generator fields)

When you use one of our generators, you fill in fields like your company name, website URL, and relevant business details. These inputs are sent to Google Gemini AI to generate your document. They travel over HTTPS, are passed to the Gemini API, and that is where the journey ends for us.

We do not store your form inputs on our servers. We do not log them, save them to a database, or retain them after the generation request completes. If you generate a privacy policy for "Acme Corp," that company name is not sitting in our database.

Cookies and analytics

We use minimal cookies for session management — things like remembering which generator you were on if you navigate around the site. We do not use advertising cookies or third-party tracking pixels on the core site.

We may use privacy-friendly analytics tools to understand broad traffic patterns — things like which generators are most popular and where traffic comes from geographically. These tools are configured to avoid user-level tracking. We are not building a record of your individual browsing behaviour.

Contact form submissions

If you reach out to us through our contact page, we store your name, email address, and message so that we can respond. We use this information for nothing else. We do not add you to a mailing list. We do not pass your details to third parties for marketing. You wrote to us, we reply, that is it.

3. How We Use It

Short answer: we use each type of data for exactly the purpose it was collected for, and nothing else.

Server logs
Security monitoring, debugging when something breaks, and understanding broad traffic patterns. Nothing more.
Form inputs
Sent to the Gemini API to generate your document. Once the document is generated and returned to you, we are done with your inputs. They are not stored, analyzed, or used for any secondary purpose.
Contact messages
To respond to your inquiry. Once the conversation is complete, your data sits in our inbox and nowhere else. We do not use contact details for outbound marketing.

4. Who We Share It With

We share data with exactly two external parties, both for necessary operational reasons:

Google LLC (Gemini API)

When you generate a document, your form inputs are sent to Google's Gemini API. Google processes this data according to its own privacy policy and API terms of service. We use the API for its core purpose: generating text. We do not send any personal information beyond what you type into the generator fields.

Hetzner Online GmbH (hosting infrastructure)

Our servers are hosted by Hetzner. Server logs, including IP addresses, are stored on their infrastructure. Hetzner is a German company subject to European data protection law. They provide infrastructure; they do not process your data for any purpose of their own.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not share it with data brokers. We do not share it with anyone for marketing purposes. FreeTOS is not in the data business.

6. Your Rights

Depending on where you live, you have specific legal rights over your personal data. Here is a straightforward summary.

EU / GDPR
  • Right to access your data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to restrict processing
  • Right to object
  • Right to lodge a complaint with a supervisory authority
California / CCPA
  • Right to know what data is collected
  • Right to delete personal data
  • Right to opt out of sale of personal data
  • Right to non-discrimination for exercising rights

Note: we do not sell personal data, so the opt-out right is essentially already satisfied.

To exercise any of these rights, email us at [email protected]. Because we collect very little data in the first place, most requests will be simple to fulfill. We will respond within 30 days.

7. Data Retention

We do not hold onto data longer than we need it. Here is how long each type of data sticks around:

Server access logs
30 days, then automatically deleted.
Generator form inputs
Not stored. Passed to the Gemini API and discarded immediately after generation.
Contact form messages
Retained until the inquiry is resolved, plus one year for reference. Deleted after that.
Generated documents
Not stored anywhere on our servers. Only you receive the output.

8. Security

We take reasonable steps to keep the data we do hold secure. FreeTOS is served over HTTPS everywhere. Server access is restricted. Software is kept up to date.

We will be honest with you: no system is completely immune to security incidents. If we ever became aware of a breach affecting your personal data, we would notify you as required by applicable law.

The best protection, frankly, is that we collect so little data in the first place. You cannot breach data that was never stored.

9. Children

FreeTOS is a tool for business owners and developers. It is not directed at children under the age of 13, and we do not knowingly collect personal data from children.

If you believe a child under 13 has submitted personal information to us, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

If our data practices change in a meaningful way, we will update this page. The "Last Updated" date at the top of the page will change so you know something is new. We will not bury significant changes in fine print.

If you use FreeTOS regularly, checking this page once in a while is the best way to stay current. We are not going to spam you with policy update emails because, as noted above, we do not have your email unless you contacted us.

11. Contact

Questions about this policy? Want to exercise a data right? Something unclear? Just reach out.

[email protected]

Ready to Generate Your Legal Pages?

Join 50,000+ websites that use FreeTOS. Free, instant, and AI-powered.