Privacy Policy

When you create a PhantomFlow account and use our services, we collect the following information:

• Account data: Name, email address, and authentication credentials.
• API usage: API key identifiers (hashed), request timestamps, render job metadata, and credit consumption records.
• Payment data: Billing information is processed by Cashfree, our payment provider. We do not store credit card numbers or bank account details on our servers.
• Uploaded content: Media files (images, video, audio) that you upload for use in render jobs.
• Technical data: IP addresses, browser type, and access timestamps for security and debugging purposes.

We use your data to:

• Provide and maintain the PhantomFlow API service.
• Process video render jobs and deliver output files.
• Track credit usage and maintain accurate billing records.
• Send service-related communications (account verification, billing receipts, API status notifications).
• Improve our service through aggregated, anonymized usage analytics.
• Detect and prevent abuse, fraud, or security threats.

Your data is stored on secured infrastructure with the following protections:

• API keys are bcrypt-hashed before storage. Only the key prefix is stored in plain text for identification.
• Credit transactions are logged in an append-only ledger for auditability.
• Rendered videos and uploaded media are stored in S3-compatible object storage. You can request deletion of your content at any time.
• All API traffic is encrypted via TLS. Database connections use encrypted transport.

We share data with the following third-party services:

• Cashfree: Payment processing. Cashfree handles all credit card and payment information directly. See Cashfree's privacy policy for details.
• Cloud infrastructure: Hosting, storage, and compute services for running the platform.

We do not sell your personal data. We do not share your data with advertising networks or data brokers.

You have the right to:

• Access your personal data that we hold.
• Request correction of inaccurate personal information.
• Request deletion of your account and associated data.
• Export your data (render job history, templates, credit transactions).
• Withdraw consent for non-essential communications at any time.

If you access PhantomFlow through a reseller or white-label partner, the reseller may have access to your sub-account usage data and credit consumption. The reseller's own privacy policy governs their handling of your information.

For privacy-related inquiries, data access requests, or deletion requests, contact us at:

privacy@phantomflow.dev