Privacy Policy

Your privacy matters to us. This Privacy Policy explains what information Phantom Coder ("we", "us", or "our") collects from users of our website and desktop application (the "Services"), and how we use it.

By using our Services, you agree to the collection and use of information as described here. We may update this Policy from time to time and will notify you of material changes via the email address on your account.

Information We Collect

Account Information

When you create an account via Google or GitHub OAuth, we receive your name, email address, and profile picture. We use this to identify your account and communicate with you.

Payment Information

Payments are processed by Stripe. We store your subscription status and the last four digits of your card number. We never have access to your full card details.

Screenshots and Solutions

When you capture a screenshot through our desktop app, it is sent directly to our AI provider for processing. Screenshots and generated solutions are never stored on our servers. They are processed in real time and immediately discarded after the response is delivered to your device.

Device and Usage Data

We collect basic device information (operating system, app version) and usage analytics (feature usage, session duration) to improve the product. We use PostHog for analytics. We do not track the content of your interviews.

How We Use Your Information

• To provide and maintain the Services
• To manage your account and subscription
• To send transactional emails (confirmations, invoices, security alerts)
• To improve the product based on aggregated usage patterns
• To detect and prevent fraud or abuse
• To comply with legal obligations

Information We Share

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• AI providers — screenshots are sent for real-time processing only; nothing is stored
• PostHog — for product analytics
• Law enforcement — when required by law

Data Security

We use industry-standard measures to protect your data, including HTTPS encryption, secure authentication, and access controls. No system is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your account information while your account is active. If you delete your account, we remove your personal information within 30 days, except where retention is required by law. Aggregated, de-identified data may be retained indefinitely.

Your Rights

You may:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of marketing emails

To exercise any of these rights, contact us at [email protected].

Children

Our Services are not directed to anyone under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it promptly.

Contact

Questions about this Privacy Policy? Email us at [email protected].