Privacy Policy

At Phantom Automate, we prioritize your data privacy. This Privacy Policy details how we handle account profiles, billing details, cookies, and—most importantly—the files you upload to our transformation service.

1. Data Minimization & Zero retention (CSV Files)

Phantom Automate acts purely as a transient pipe for processing data. We enforce the principle of **Data Minimization** under the GDPR and CCPA:

• No File Storage: Files uploaded for schema extraction or batch execution are streamed and transformed in-memory. The temporary file is immediately and permanently deleted from disk (`fs.unlinkSync`) as soon as the download is sent back or the request completes.
• No Row Log Content: We do not log, inspect, or retain individual rows, columns, or metadata values from your processed CSV or JSON data payloads.

2. Information We Collect

We collect and retain only the minimal metadata required to provide the SaaS service:

• Account Credentials: Email address and hashed login passwords (stored securely via Supabase Auth).
• Pricing Configs: Subscription levels and template limit quotas.
• Template Mappings: The logical instructions you set up to map fields (no customer data is stored in mapping rules).
• Billing IDs: Stripe Customer IDs and Subscription Status tokens (no card numbers are processed on our servers).

3. Subprocessors & Third Parties

To run this service, we coordinate with the following trusted systems:

• Supabase: Database hosting and login authentication.
• Stripe: Processing of payment checkout sessions and billing portal data.

4. Cookies & Trackers

We use essential cookies to maintain login sessions and ensure payment portal security (Stripe security checks). We do not use third-party marketing trackers or ad-retargeting pixels.

5. Your Rights

Under GDPR and CCPA, you have the right to access the metadata associated with your account, update your credentials, or delete your account workspace entirely (Right to be Forgotten). Account deletion will immediately purge your templates, invites, and API key references from our servers.

Return to Workspace