Privacy Policy

Last updated: July 17, 2026  ·  Effective: June 1, 2025

1. Who We Are

PhantomAI ("we", "our", "us") operates the AI-powered chat platform accessible at phantomai-x.vercel.app (the "Service"). PhantomAI is an independent project that provides multi-model AI assistance, real-time search, and productivity tools to users worldwide.

For privacy-related enquiries, contact us at: phantomai2009@gmail.com

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, and profile picture when you register via Clerk authentication (Google, GitHub, or email).
• Conversation content: Messages, prompts, and files you submit to the AI. These may be stored to provide continuity across sessions.
• Contact form submissions: Your name, email, and message when you use our Contact page.
• Feedback: Any feedback or bug reports you voluntarily submit.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, session duration, and interaction patterns.
• Device information: Browser type, operating system, screen resolution, and device type.
• IP address and location: Approximate geographic region (country/city level) derived from your IP address.
• Log data: Server logs including request timestamps, response times, and error data.
• Cookies and local storage: Session identifiers, theme preferences, and usage analytics as described in our Cookie Policy.

2.3 Information from Third Parties

• Authentication providers (Clerk): Name, email, profile picture, and account identifier.
• Google Analytics: Aggregated analytics data about how users interact with our Service.
• Google AdSense: Advertising interaction data such as ad impressions, clicks, and inferred interests.

3. How We Use Your Information

4. Conversation Storage and AI Processing

Conversations may be stored in our MongoDB database to provide persistent chat history, enable cross-device continuity, and improve your experience. Stored conversations are associated with your user account and are not shared with third parties except as described in Section 5.

AI responses are generated by third-party language model providers including Groq (open-weight GPT-OSS models) Your prompts are transmitted to these providers to generate responses. Please review their privacy policies:

• Groq Privacy Policy

5. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

• Service providers: Vercel (hosting), Render (backend), MongoDB Atlas (database), Clerk (authentication), Groq (AI inference), Tavily (search).
• Advertising partners: Google AdSense and its advertising network partners receive cookie and usage data to serve relevant advertisements. See Section 7 for details.
• Analytics: Google Analytics receives anonymised usage data to help us understand how the Service is used.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity.

6. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to operate and improve our Service. For full details, please read our Cookie Policy section below.

7. Google AdSense and Advertising Disclosure

PhantomAI participates in the Google AdSense program. Google, as a third-party vendor, uses cookies to serve ads on our Service. Google's use of advertising cookies enables it and its partners to serve ads based on users' visits to our Service and/or other sites on the internet.

Google AdSense uses the DoubleClick cookie and similar technologies to serve more relevant advertisements. These cookies may collect:

• Browsing history and inferred interests
• Demographic information (age range, gender)
• Ad interaction data (impressions, clicks, conversions)
• IP address and approximate location

You may opt out of personalised advertising by visiting Google Ads Settings or the Digital Advertising Alliance opt-out page. You can also opt out via the Google Analytics opt-out browser add-on.

8. Data Retention

• Account data: Retained for the lifetime of your account and deleted within 30 days of account deletion.
• Conversation history: Retained while your account is active. You may delete individual chats at any time within the app.
• Server logs: Retained for up to 90 days for security and debugging purposes.
• Analytics data: Retained per Google Analytics' default retention period (26 months).
• Advertising data: Retained per Google AdSense policies.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent for processing where consent is the legal basis.
• Opt out of advertising: Opt out of personalised advertising as described in Section 7.

To exercise any of these rights, contact us at phantomai2009@gmail.com. We will respond within 30 days.

10. Children's Privacy

PhantomAI is not directed at children under the age of 13 (or 16 in the EU/UK under GDPR). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at phantomai2009@gmail.com and we will delete the data promptly.

11. International Data Transfers

PhantomAI operates globally. Your data may be transferred to and processed in countries outside your jurisdiction, including the United States, where our service providers are located. These countries may have different data protection laws. By using PhantomAI, you consent to such transfers. We take steps to ensure appropriate safeguards are in place where required by applicable law.

12. Security

We implement industry-standard security measures including HTTPS encryption, secure authentication via Clerk, database access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

14. Contact

For privacy-related questions, data requests, or complaints, contact us at: