Privacy Policy

Phazon Labs is operated by Nuvox Digital (“we”, “us”, “our”), a web agency based in the United Kingdom. We are the data controller for personal data collected through phazonlabs.io.

Contact: privacy@phazonlabs.com

We collect the following categories of personal data:

• Account data: Name, email address, and authentication credentials when you create an account (processed via Clerk).
• Scan data: URLs you submit for scanning, scan results, grades, and issues found. This data is associated with your account.
• Payment data: Billing information is processed by Stripe. We store only your Stripe customer ID — we never store raw card numbers.
• Usage data: Pages visited, features used, and interaction events (e.g., CTA clicks) to help us improve the product.
• Email engagement: Whether you open or click drip emails sent by Phazon Labs, via Resend.
• Technical data: IP address, browser type, and device type collected automatically via server logs.

We use your data to:

• Provide and operate the Phazon Labs service
• Store and retrieve your scan history
• Process payments and manage your subscription
• Send you scan result emails and (for Free tier) a 3-email drip sequence with tips and offers
• Send alerts when your monitored sites drop in grade
• Improve the platform using anonymised analytics
• Respond to support requests
• Meet our legal obligations

Legal basis: We process your data under legitimate interest (operating the platform), contractual necessity (delivering the service you paid for), and where required, your consent (drip emails).

We share data with the following third-party processors:

• Clerk — authentication and user management (US-based, EU/UK data transfer under SCCs)
• Stripe — payment processing (US-based, EU/UK data transfer under SCCs)
• Resend — transactional and drip email delivery
• Vercel — hosting and deployment (US-based, EU/UK data transfer under SCCs)
• Supabase / Neon — database hosting
• Anthropic — AI-generated report summaries (scan content may be processed)

We do not sell your personal data to third parties.

We retain your personal data for as long as your account is active. Upon account deletion:

• Account data is deleted within 30 days
• Scan results are deleted within 90 days
• Payment records are retained for 7 years for legal compliance
• Anonymised, aggregated analytics data may be retained indefinitely

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Restriction — request we limit how we process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — opt out of marketing emails at any time

To exercise any of these rights, email privacy@phazonlabs.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we are processing your data unlawfully.

Phazon Labs uses the following cookies:

• Authentication cookies — set by Clerk to keep you logged in (strictly necessary)
• Session cookies — temporary cookies that expire when you close your browser

We do not use advertising or tracking cookies. We do not use Google Analytics or Meta Pixel on Phazon Labs.

We take data security seriously. All data is transmitted over HTTPS. Database access is restricted and authenticated. We regularly review our security practices.

If you discover a security vulnerability, please disclose it responsibly to security@phazonlabs.com.

Phazon Labs is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this privacy policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use constitutes acceptance.

For any privacy-related questions: privacy@phazonlabs.com