Privacy Policy

PhantomNode Technologies (“PhantomNode”, “we”, “us”) is run by its founder, Yesudas, from India, and serves businesses in the United States and elsewhere. This policy explains what we collect, why, how we store it, who processes it, and the rights you have.

Information we collect

We collect only what we need to serve you:

• Contact & business details: name, business name, email, phone, and the business type you tell us about when you submit a form or book a call.
• Enquiry content: the challenges and requirements you describe, and the services you select in the custom package builder.
• Chat messages: what you type into the website assistant, used to answer you.
• Client account data: for paying clients, project details, milestones, invoices, documents, and messages exchanged through your portal.
• Usage data: basic analytics (pages visited, device type, rough location) to improve the site, subject to your cookie choice.

How we use your information

• To respond to enquiries and prepare for your strategy call.
• To deliver, manage, and support the services you purchase.
• To send transactional messages (confirmations, milestone updates, invoices).
• To keep the site secure and stop spam and abuse.
• To improve our website and services.

We do not sell or share your personal information for advertising, and we do not send marketing email without consent.

Where your data is stored & who processes it

Your data is stored in our database and file storage provided by Supabase. We use these third-party processors to operate the service, each only for the purpose listed:

• Supabase: database and private file storage.
• Clerk: sign-in for the client portal.
• Resend: email delivery.
• Cal.com: strategy-call scheduling.
• Google (Gemini): the website assistant.
• Google Analytics & Google Tag Manager: aggregate usage analytics.
• Upstash: rate limiting, which briefly processes your IP address to stop spam.
• Vercel: website hosting and delivery.
• PayPal and Wise: payments, if you pay an invoice through them.

Some of these providers process data outside your country, including in the United States. We choose providers that protect data with industry-standard safeguards.

Data retention

We keep enquiry and lead details for as long as there is a reasonable chance of working together, and client records for as long as needed to provide our services and meet legal and tax obligations. You can ask us to delete your data at any time (see below).

Your rights, including deletion

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To make a request, email hello@phantomnodetechnologies.com with the subject “Data request” and tell us what you would like done. We reply within 30 days. We may keep records we are legally required to hold, such as invoices.

Cookies & analytics

We use essential cookies to run the site and the client portal, and Google Analytics cookies to understand which pages are useful. We do not use advertising cookies. The first time you visit, a banner lets you accept or decline analytics. Visitors in the EU, UK and Switzerland have analytics switched off until they accept. To change your choice later, clear this site’s data in your browser and the banner will appear again.

Children

Our services are for businesses. The site is not directed at children under 13 (or under 16 in the EU and UK), and we do not knowingly collect their personal data. If you believe a child has sent us data, email us and we will delete it.

Security

We follow strong security practices: encrypted connections, private file storage with short-lived access links, strict access controls, and the principle of least privilege. No system is perfectly secure, but we work hard to protect your data.

Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top of this page.

Contact

Questions about this policy? Email hello@phantomnodetechnologies.com.