Privacy Policy

This Privacy Policy explains how Phaselo (“Phaselo”, “we”, “us”) collects, uses and protects personal information when you use our website and the Phaselo application (the “Service”). By using the Service you agree to this policy.

1. Information we collect

• Account information: your name, email address and an encrypted password, or the basic profile details provided if you sign in with Google or Microsoft.
• Organisation and project data: the workspaces, tasks, schedules, budgets, costs, comments and files you and your team enter into the Service.
• Payment information: handled by our payment processor, Stripe. We do not store full card numbers; we receive limited billing details and your subscription status.
• Usage and technical data: log data, device and browser information, IP address and actions taken in the app, used for security and to improve the Service.
• Cookies: see the Cookies section below.

2. How we use information

• to provide, operate and secure the Service;
• to authenticate you and protect against abuse;
• to process subscriptions and billing;
• to send transactional emails (verification, password reset, billing and trial notices) and, if you opt in, occasional product updates;
• to diagnose problems and improve features; and
• to comply with our legal obligations.

3. Legal bases

Where applicable law (such as the GDPR) requires it, we rely on: performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (for optional marketing), and compliance with legal obligations.

4. Service providers

We share personal information only with providers that help us run the Service, under appropriate confidentiality and data-protection terms:

• Vercel, application hosting;
• Neon, database hosting;
• Stripe, payment processing;
• Resend, transactional email delivery;
• Cloudflare, file storage and email routing;
• Sentry, error monitoring.

We do not sell personal information.

5. Cookies

We use strictly necessary cookies to keep you signed in and to remember your last workspace. We do not use advertising cookies.

6. Data retention

We keep your information for as long as your account is active. If you close your account, we delete or anonymise personal data within a reasonable period, except where we must retain it to meet legal, accounting or security obligations.

7. Security

Access to your organisation’s data is isolated at the database level using row-level security, data is encrypted in transit, and passwords are stored only as salted hashes. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

9. International transfers

We may process information in countries other than where you live, including Australia and the United States. Where required, we use appropriate safeguards for such transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes

We may update this policy from time to time. We will post the updated version here and change the “last updated” date; significant changes will be communicated where appropriate.

12. Contact

For privacy questions or requests, email privacy@phaselo.com.