Privacy Policy
Phanim is operated by Straven Studio (Michigan, United States). This policy explains what we collect, why, who we share it with, and how to get it back or delete it. If anything here is unclear, email privacy@phanim.com and we'll answer in plain language.
The short version: we collect what's needed to run your shop's account and nothing else. We don't sell your data. We don't run advertising trackers. We don't use your shop's data to train AI models.
What we collect
- Account data — name, email, company name, password hash, and role. Needed to give you an account.
- Shop data — everything you enter: jobs, stages, quotes, clients and their contact details, materials, suppliers, workers, time records, costs, notes, and photos. Stored so we can show it back to you.
- Billing data — plan, status, and billing history. Card details are handled by Stripe and never reach our servers.
- Technical data — IP address, browser type, and error logs, kept briefly for security and debugging.
We do not collect location data, contacts, or anything from your device beyond the browser session.
About your customers' data
When you add a client to Phanim, you're the controller of that person's data and we process it on your behalf. You're responsible for having a lawful basis to store it; we're responsible for keeping it secure, using it only to run the service, and deleting it when you tell us to.
Why we use it
- To provide the service and show you your own data.
- To take payment and keep records we're legally required to keep.
- To send account and service email — trial reminders, billing notices, security alerts. You can't opt out of these while you have an account.
- To send product email, if you opted in. One-click unsubscribe, always.
- To keep the service secure and diagnose faults.
Who it goes to
We use a small number of infrastructure providers, each with access only to what their job requires:
- Supabase — database, authentication, and file storage.
- Vercel — application and website hosting.
- Stripe — payment processing (when billing is enabled).
- Resend — transactional email delivery.
- Anthropic — the AI features, on plans that include them.
We don't sell, rent, or trade your data, and we don't share it with advertisers or data brokers. We'd only disclose data to law enforcement if legally compelled, and we'd tell you unless prohibited from doing so.
AI features and your data
On plans that include AI, the relevant parts of your shop's data — job names, dates, stages, worker assignments, materials — are sent to Anthropic's API to produce the analysis you asked for. That data is not used to train models. You can avoid it entirely by staying on the Shop plan or not using the AI features.
Cookies
Phanim sets one kind of cookie: the session cookie that keeps you logged in. There are no advertising cookies, no third-party trackers, and no cross-site analytics on this website.
How long we keep it
Shop data is kept while your account is active and for 30 days after you close it, so you can change your mind or export. Billing records are kept for seven years because tax law requires it. Technical logs are kept for 30 days.
Security
Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Every table is protected by row-level security so one shop can never read another's data. Passwords are hashed, never stored in readable form. No system is perfect; if we ever have a breach affecting your data, we'll tell you promptly and tell you what to do.
Your rights
Wherever you are, you can ask us to:
- Give you a copy of your data — jobs, materials, and clients export to CSV from inside the app any time.
- Correct anything that's wrong.
- Delete your account and its data.
- Tell you exactly what we hold about you.
Email privacy@phanim.com and we'll act within 30 days. We won't charge you and we won't make it difficult.
Children
Phanim is a business tool and isn't directed at anyone under 18. We don't knowingly collect data from children.
International transfers
Our providers operate in the United States, so data you enter may be processed there. If you're in the EU or UK, our providers' standard contractual clauses cover those transfers.
Changes
We'll post updates here and change the "last updated" date. For material changes we'll email account owners before they take effect.
Contact
Straven Studio, Michigan, United States — privacy@phanim.com.