Privacy Policy

• Account. When you sign in with Google we receive your email address and a stable user identifier. We do not receive your Google password.
• macOS waitlist. If you ask to be told when the macOS app ships, we keep that email until we have sent you the installer link or you ask us to remove it (support@phantum.app).
• Feedback. If you rate Phantum or send feedback, we keep your rating, the reasons you tick, your comment, the app version and your platform, and, only if you leave that box ticked, the id of the session it is about (never any transcript text); we also keep a log of when the app asked you. All of it is deleted with your account.
• Documents and notes you add. Resumes, job descriptions and other files you upload through the app or website are stored in our database, along with the text we extract from them, and so are the stories and notes you type into the app.
• Session metadata. For each interview session we record the start time, end time, the minutes used, the cost of transcription, and counts of how transcription went (for example how many audio chunks failed or were retried).
• Answer records. Each time you ask for an answer, we keep the question, the transcript lines the app sent with it, the instructions sent to the model (which include your resume and job description) and the answer that came back, so we can fix problems and improve answers. These records are deleted after 30 days. For Analyse screen we keep a fingerprint of the screenshot, never the image itself.
• Audio and transcripts. We never store the audio captured during a session. Transcripts are kept on your computer by the desktop app for 30 days and then deleted; we hold only the lines that were sent with an answer, as above.
• Billing information. If you purchase a paid plan, Stripe processes your payment. We store the resulting Stripe customer identifier and the subscription status — never the card number itself.
• App diagnostics. The desktop app reports errors, which features you use (for example that a session started or an answer was requested, never what was said), how audio capture went (device names, counts and timings) and, after a crash or an audio failure or when you choose Send diagnostics, the recent part of its log file. None of these contain transcripts, answers, typed questions, screenshots, documents or sign-in credentials; you can turn automatic log uploads off in Settings.
• Technical logs. Our servers log request metadata (timestamp, route, status, latency, anonymous request ID) for up to 30 days for operational debugging.

• To provide the Service. Documents and session metadata are required to mint interview sessions and ground the AI’s answers in your context.
• To bill you. Stripe customer and subscription data is used to authorise access and process renewals.
• To debug and improve reliability. Logs are used to investigate errors and abuse. We do not use them for advertising or profile-building.

Phantum is operated on a small number of well-known infrastructure providers. Each one only receives the minimum data needed to do its job.

• Google (Sign in with Google). Receives your sign-in request to authenticate you. We do not send Google any of your interview content.
• Supabase. Hosts our authentication, database, and document storage. Data is encrypted at rest and in transit and is not used by Supabase for any other purpose.
• Stripe. Receives the information needed to process payments and manage subscriptions.
• OpenRouter. Transcription and answers run on AI models reached through OpenRouter, which routes each request to a model provider such as Microsoft, OpenAI, Google, Groq or Cerebras. During a session, audio goes from your computer directly to the transcription model through OpenRouter, on a short-lived key that only works for that session and is revoked when it ends; it does not pass through our servers and we do not store it. When you ask for an answer, we send the model your active resume, job description, notes, the company name you entered and the conversation so far, so it can produce a relevant answer. OpenRouter’s and the model providers’ own data-handling terms apply to this traffic.
• Vercel. Hosts this website and our API. Receives standard request metadata.

Phone remote. If you pair a phone with a live session, the answers and commands passed between your computer and your phone are encrypted end to end with a key that lives only on your computer and in the link you scan. Supabase relays them; neither we nor Supabase can read them, and we store none of that content.

We do not sell your data. We do not use it for advertising. We will only disclose information when required by law, when necessary to protect rights and safety, or with your explicit consent.

• Account and profile data are retained while your account is active. Deleting your account triggers immediate deletion (see section 6).
• Documents and notes are retained until you delete them or your account.
• Answer records are deleted after 30 days. Transcripts on your computer are deleted by the desktop app after 30 days. Audio is never stored.
• Session metadata is retained for as long as we need it to calculate usage caps, reconcile billing, and meet tax/accounting obligations (typically 7 years).
• Operational logs are retained for up to 30 days.
• App error reports and usage events are deleted after 90 days, uploaded diagnostic logs after 30 days.

Session tokens on the desktop are stored in your operating system’s keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service) — never as plain files. All traffic between the app, our servers, and our providers uses TLS. Storage objects are private and gated by per-user policies. Our provider account keys never leave our servers: the desktop app only ever receives a short-lived key limited to one session, which is revoked when the session ends.

Depending on where you live, you have some or all of the following rights:

• Access and portability. Export everything we hold about you as JSON from Dashboard → Account (or in the desktop app, Settings → Export my data).
• Deletion. Permanently delete your account and all associated data from Dashboard → Account (or in the desktop app, Settings → Delete my account).
• Rectification. Update your documents at any time via Dashboard → Documents.
• Withdrawal of consent. Stop using the Service and delete your account. Subscriptions will be cancelled.
• Complaint. Lodge a complaint with the relevant supervisory authority in your country.

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Our infrastructure providers are based in the United States and European Union. By using the Service you consent to the transfer of your data to and from those jurisdictions, subject to appropriate safeguards required by applicable law.

On the website, we use a single authentication cookie set by Supabase to keep you signed in. We do not use analytics, advertising, or tracking cookies.

We will post any changes to this policy here and update the “Last updated” date above. Material changes will be announced in-app at least 14 days before they take effect.

Email support@phantum.app with questions, deletion requests, or privacy-related concerns.