1. Who we are
Phanz ("Phanz", "we", "us") provides an all-in-one business platform — CRM, websites, funnels, bookings, email and SMS follow-up, and reviews — to small and local businesses. This policy covers phanz.vip and the Phanz-branded application at app.phanz.vip.
Phanz is built on infrastructure operated by HighLevel Inc. (HighLevel). When you use the Phanz application, your data is processed on HighLevel's platform under our agreement with them. Their privacy policy and privacy and security posture apply to that processing alongside this policy.
For privacy questions, write to privacy@phanz.vip.
2. Two roles, two policies
When you are our visitor or customer, we decide what happens to your data. We are the controller, and this policy applies to you.
When you use Phanz to handle your own customers' data, you decide what happens to it. You are the controller and we are your processor. We handle that data on your instructions to deliver the service — we do not sell it, mine it, or use it to market to your contacts.
If you need a signed data processing agreement covering the second case, email privacy@phanz.vip. HighLevel's data processing agreement and sub-processor list sit underneath ours.
3. What we collect
Information you give us
- Contact details — name, business name, email, phone number, when you request a demo, start a plan, or contact support.
- Account details — login credentials and settings for your Phanz account. Passwords are hashed; we never see them in plain text.
- Billing details — plan, invoices and payment status. Card numbers are handled by our payment processor and never touch our servers.
- Anything you send us — support messages, onboarding notes, and files you upload.
Information collected automatically
- Device and usage data — IP address, browser and device type, pages viewed, referring page, and timestamps.
- Cookies and similar technologies — see section 6.
Information you put into the platform
Your contacts, conversations, calendars, pipelines and campaign content. This is your data. We process it to run the service for you and for no other purpose.
4. Why we use it
- To deliver the service — create and run your account, provide support, and process payments. Necessary to perform our contract with you.
- To improve the product — understand which features are used and where people get stuck, using aggregated and de-identified data wherever possible.
- To keep things secure — detect abuse, fraud and unauthorised access, and maintain audit trails.
- To communicate with you — service notices, billing notices, and, where you have opted in, marketing.
- To meet legal obligations — tax, accounting, and lawful requests.
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA and comparable US state laws.
5. Email and SMS
We send marketing messages only to people who opted in. Every email carries an unsubscribe link. For SMS, reply STOP to opt out and HELP for help; message and data rates may apply, and message frequency varies.
Mobile opt-in data is never shared. No mobile information collected for SMS consent is sold, rented, or shared with third parties or affiliates for their own marketing purposes. Consent is used solely to deliver the messages you asked for, and is passed only to the carriers and messaging providers needed to send them.
If you use Phanz to message your own contacts, you are responsible for having their consent and for complying with the TCPA, CAN-SPAM, A2P 10DLC registration requirements, and any equivalent law where your contacts are located.
8. Where your data lives
Platform data is stored on Google Cloud Platform infrastructure operated by HighLevel, primarily in the United States. If you are in the EU, UK or Switzerland, your data will be transferred to the US.
HighLevel maintains certification under the EU-U.S. Data Privacy Framework, with Standard Contractual Clauses as a fallback transfer mechanism. Those mechanisms cover the transfers made in delivering Phanz.
9. How long we keep it
- Account and platform data — for as long as your account is active. After cancellation we retain it for a limited wind-down window so you can export or reactivate, then delete it.
- Billing records — as long as tax and accounting law requires, typically seven years.
- Marketing contact details — until you unsubscribe, plus a suppression record so we do not contact you again.
- Security logs — a limited period appropriate to investigating incidents.
You can request earlier deletion at any time (section 10), subject to any legal obligation to retain.
10. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, export it, object to or restrict processing, withdraw consent, and opt out of sale or sharing — noting that we do neither.
Email privacy@phanz.vip and we will respond within the time your law allows — 30 days under the GDPR, 45 days under the CCPA. We will not discriminate against you for exercising a right. We may need to verify your identity first.
If your request concerns data held by one of our customers who uses Phanz, contact that business directly — they are the controller. We will help them respond.
EU and UK residents may also complain to their local supervisory authority.
11. Children
Phanz is a business tool and is not directed at anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, email privacy@phanz.vip and we will delete it.
12. Changes and contact
We will update this policy as the service changes and revise the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.
Privacy: privacy@phanz.vip · General: hello@phanz.vip