1. Data we collect
We collect only what we need to run the service:
- Account data — first name, last name, email and a hashed password when you register.
- Billing data — credit balance, order history, promo codes used. Bank transfer details are processed by our bank; we do not store card numbers.
- Usage data — pages viewed, features used, error logs, IP address and browser metadata.
- Communications — emails, support tickets and onboarding notes you send us.
2. How we use your data
We use personal data to (a) provide and bill the service, (b) authenticate you, (c) send transactional emails, (d) detect fraud and abuse, (e) improve product reliability, and (f) comply with legal obligations.
We do not sell personal data and we do not use it to train third-party AI models without your explicit consent.
3. Legal bases (GDPR)
Where GDPR applies, we rely on the following legal bases: contract (to deliver the service you bought), legitimate interest (security, fraud prevention, product analytics), legal obligation (tax, accounting), and consent (optional analytics and marketing cookies).
5. Retention
Account data is retained for as long as your account is active. After deletion, we keep billing records for the period required by tax law (typically 7 years) and purge other personal data within 30 days.
6. Your rights
You can request access, correction, deletion, portability, restriction or objection to processing of your personal data. You also have the right to lodge a complaint with your local data protection authority.
To exercise any right, email [email protected]. We respond within 30 days.
7. Security
We encrypt data in transit (TLS 1.2+) and at rest, enforce least-privilege access, and review production access regularly. No system is perfectly secure — if you discover a vulnerability, please report it under our Acceptable Use Policy.
8. Children
Phase Neutre is a B2B product. We do not knowingly collect personal data from anyone under 16.
9. Changes to this policy
We may update this policy. Material changes will be announced by email or in-product notice at least 14 days before they take effect.