Privacy Policy

1. Controller

FreeRBX ("we", "us", "our") operates freerbx.net. For data-protection enquiries, contact us at [email protected].

[Controller legal name / business address placeholder — to be completed before production launch.]

2. Age requirement

FreeRBX is only available to individuals aged 16 or older. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, contact [email protected] and we will delete it.

3. Data we collect

• Account data: email address, password hash, date of birth (for age verification), and account preferences.
• Survey completion data: transaction IDs, completion status, reward amounts, and timestamps received via server-to-server postbacks from our survey partners (BitLabs, CPX Research, and TheoremReach). We do not receive your survey answers.
• Device and usage data: IP address, browser type, device identifiers, pages visited, and fraud-prevention signals (e.g. VPN/proxy detection).

4. Purposes and legal bases (GDPR)

• Providing and operating accounts and rewards — performance of a contract.
• Crediting survey completions and preventing fraud — legitimate interests.
• Age verification (16+) — legal obligation / legitimate interests.
• Customer support — legitimate interests.
• Analytics and service improvement — consent where required.

5. Third-party processors

We share limited data with processors that help us operate the service:

• BitLabs — survey inventory and completion postbacks.
• CPX Research — survey inventory and completion postbacks.
• TheoremReach — survey inventory and completion postbacks.
• Hosting / database provider (e.g. Supabase, when connected).
• Fraud-prevention and analytics providers.

Each partner processes data under its own privacy policy for survey content delivered on their platforms.

6. Cookies

We use strictly necessary cookies for authentication and security, and — with your consent where required — analytics cookies. See our Cookie Policy.

7. Retention

We retain account data while your account is active and for up to 24 months afterwards to handle disputes, chargebacks, and fraud investigations. Survey completion records are retained for up to 24 months. You may request deletion at any time (see rights below); fraud-related records may be retained longer where we have a legitimate interest.

8. Your rights

Under the GDPR and UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

9. Contact

Questions about this policy: [email protected].