← Back to Home

Privacy Policy

Last updated: April 2026

1. Introduction

PHLAZE ("we," "us," "our") is committed to protecting your privacy. This policy covers the PHLAZE web and mobile applications.

2. Information We Collect

Account Information

  • Name, email address, password (hashed)
  • Subscription plan and billing information

Business Data You Enter

  • Business plans, financial projections, goals
  • Analytics data, metrics, notes
  • This data belongs to you. We process it only to provide the service.

Payment Information

  • Processed by Stripe / App Store / Google Play
  • We do not store card numbers

Automatically Collected

  • Device type, OS, app version
  • Usage patterns (features used, session length)
  • Crash reports
  • IP address

3. How We Use Your Information

  • Provide and improve the PHLAZE service
  • Process subscriptions and payments
  • Generate AI-powered recommendations (using your data only for your account)
  • Send service communications and updates
  • Analyze usage for product improvement (anonymized)

4. Third-Party Services

  • Stripe: Payment processing
  • Apple / Google: Mobile subscriptions
  • Vercel: Web hosting
  • Analytics: Anonymized usage data

5. Cookies

We use session cookies for authentication and optional analytics cookies. Manage via the consent banner or browser settings.

6. Data Retention

  • Account data: retained while active + 30 days after deletion
  • Business data: deleted within 30 days of account deletion
  • Payment records: 7 years (legal requirement)
  • Anonymized analytics: retained indefinitely

7. Data Portability

You can export all your business data via the export feature in account settings. Formats: CSV, PDF.

8. Your Rights (GDPR)

EEA residents may: access, correct, delete, restrict, port, or object to processing.

9. Your Rights (CCPA)

California residents may: know, delete, opt out. We do not sell personal information.

10. Children's Privacy

PHLAZE is not intended for users under 16.

11. Security

We use HTTPS, encrypted storage, hashed passwords, and secure APIs.

12. Data Breach Notification

Affected users notified within 72 hours.

13. Contact

Privacy inquiries: support@phlaze.com

Disclaimer: This document is provided for informational purposes only and does not constitute legal advice. Consult a licensed attorney for advice specific to your situation.