Last Updated: 25th July 2025

Welcome to Phaseo ("we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services ("Service"). By using our Service, you agree to the terms outlined in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

• When you create an account, we collect your name, email address, and other registration details.
• If you subscribe to our paid services, we collect payment information via Stripe (we do not store your full payment details).
• If you contact us, we collect any information you provide in the communication.

1.2 Automatically Collected Information

• Usage Data: We collect data about your interactions with our Service, such as pages visited and features used.
• Device Information: We collect details about the device you use to access the Service, including IP address, browser type, operating system, and referring URLs.
• Cookies & Tracking Technologies: We use cookies and analytics tools (such as Google Analytics) to track usage patterns and improve the Service.

1.3 Information from Third-Party Services

• If you connect third-party services (e.g., Trading212, Google Calendar, Spotify, Fitbit), we collect data from these integrations in accordance with their respective policies using OAuth authentication.
• If you use Stripe for payments, we receive payment confirmation but do not store sensitive financial details.

2. How We Use Your Information

• Provide, maintain, and improve our Service.
• Process payments and manage subscriptions.
• Communicate with you about updates, promotions, or service-related messages.
• Monitor and analyse usage patterns to enhance user experience.
• Protect our Service from fraud, abuse, and security threats.
• Comply with legal and regulatory obligations.

3. How We Share Your Information

We do not sell, rent, or trade your personal data to third parties for marketing or advertising purposes. However, we may share information in the following cases:

• Service Providers: We share data with third-party providers such as Vercel (hosting), Supabase (data storage), Stripe (payments), Google Analytics (tracking), and Resend (email services).
• Legal Compliance: If required by law or to protect our legal rights, we may disclose information to authorities.
• Business Transfers: In the event of a merger, sale, or acquisition, your information may be transferred as part of the business transaction. If this happens, we will notify you before your data is transferred and becomes subject to a different privacy policy.

4. Data Encryption & Security

• All user data is encrypted as soon as it is entered and remains encrypted while stored in our Supabase database.
• We take additional measures to ensure that all third-party accounts we use for processing data are secured.
• We do not store or process more information than necessary for the proper functioning of the Service.
• While we implement strong security measures, no online service can be 100% secure. Users acknowledge that they provide data at their own risk.
• Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you as required by law and take appropriate steps to mitigate any potential risks.

5. Cookies & Tracking Technologies

• Improve website functionality.
• Analyse usage trends through Google Analytics.
• Authenticate users and prevent fraud.
• Manage advertising preferences.

You can manage cookie preferences in your browser settings. Disabling cookies may limit certain features of our Service.

6. Data Retention

• We retain user data for as long as necessary to provide our Service and fulfil legal obligations.
• If you delete your account, we remove your personal data, except where retention is required by law.

7. Your Rights & Choices

• Access & Correction: You can request access to your data and correct inaccuracies.
• Deletion: You can request account deletion and removal of personal data.
• Opt-Out of Marketing: You can unsubscribe from marketing emails at any time.
• Data Portability: You can request an export of your data.

To exercise these rights, contact us at daniel@phaseo.app.

8. Third-Party Links & Services

Our Service may contain links to third-party sites. We are not responsible for their privacy practices, and we encourage you to review their policies.

9. Children's Privacy

Our Service is intended for users 18 years and older. We do not knowingly collect personal data from children under 18. If we discover that a child has provided personal data, we will take steps to delete it.

10. Legal Basis for Processing Data (GDPR Compliance)

• Contractual Necessity: To provide you with the services you signed up for.
• Legitimate Interests: For analytics, security, and improving our Service.
• Legal Compliance: To meet legal obligations related to financial transactions and user data security.
• User Consent: Where required, we obtain consent (e.g., cookie tracking, marketing communications). You can withdraw consent at any time.

11. Changes to This Policy

We may update this Privacy Policy periodically. If significant changes occur, we will notify you via email or post a notice on our website. Continued use of our Service after changes means you accept the revised policy.

12. Google API Services Compliance

Phaseo complies with the Google API Services User Data Policy, including the Limited Use requirements. We only use and process data obtained from Google Workspace APIs to provide and improve the services clearly described in our application. We do not use or transfer any user data obtained through these APIs for any other purpose, and we never sell this data to third parties.

This policy is easily accessible to users through our website's privacy section and is prominently linked on our homepage. If you have any concerns, please contact us at daniel@phaseo.app.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at daniel@phaseo.app.