Privacy Policy

What we collect

• Account data — your corporate email address and a hashed password. We do not store your password in readable form.
• Conversations — the messages you send, φ's responses, and the activity/reasoning trace for each turn.
• Deliverables — the workflows you run and the artifacts they produce, scoped to your account.
• Usage records — per-turn credit consumption and your current balance. (Token-level metering is internal accounting and is not shown to you or shared.)
• Session data — a session cookie, and sign-in timestamps per device.
• Operational logs — request metadata and errors needed to run and secure the service.

How we use it

To provide the service: answer your questions, run workflows, keep your history available, meter credits, secure your account, and diagnose problems. We do not sell personal data and we do not use your conversation content to train foundation models.

Third-party processors

φ sends your inputs and intermediate content to third-party AI model providers to generate responses and run workflows, and uses infrastructure and database providers for hosting and storage. These processors handle data on our instructions for the purpose of delivering the service. We identify our current providers on request.

Cookies

We use one essential cookie (phi_session) to keep you signed in. It is strictly necessary for the application to function. We do not use advertising or third-party tracking cookies. Your browser also stores a local copy of your conversation list for offline resilience; you can clear it via your browser.

Retention

We keep account data, conversations, deliverables, and usage records while your account is active. When you delete your account, access is disabled immediately and your data is scheduled for deletion; residual copies may remain in encrypted backups for a limited period before being overwritten.

Your rights and controls

From the Account & usage panel you can export your data as a JSON file, review and revoke other signed-in devices, and delete your account. Depending on your location you may also have rights to access, correct, or restrict processing of your personal data — contact us to exercise them.

Security

Passwords are hashed with a slow algorithm. Sessions are cookie-based, HTTP-only, and expire. Access to deliverables and conversations is checked against account ownership on every request. Transport is encrypted. No system is perfectly secure; tell us promptly if you suspect a problem with your account.

Contact

For privacy questions or requests, reach Pheonix Research through the company website. We will respond within a reasonable time.