Data Security & Privacy at PhoxxyData

Data Isolation (Row-Level Security)

Our database uses Row-Level Security (RLS) policies across our applications. In practice, this means a regular user account can only read or modify rows that belong to that account. RLS is one layer of our access-control model, not a guarantee against every possible misuse; it is enforced by the database for every API call made by our application code.

What We Store Depends on the Product

• Ghost Post™: When you paste a job posting for analysis, we process the text to generate your result and do not keep the original raw source text. We store only derived metadata (such as report title, company, location, source URL, and lens) so you can review your history.
• Other products and forms: Features like Founder Lens sessions, Wendy evaluations, the Founding 444™ application, and contact forms store the text and answers you submit so the product can function and our team can respond. We do not claim these inputs are discarded automatically.

Safe Processing & No AI Training

• No Data Selling: We never sell, rent, or share your data with advertisers or third parties.
• No Model Training: Your submissions are never used by PhoxxyData or our partners to train public or proprietary AI models.
• Secure Sub-Processing: Some features send your input to a third-party AI gateway under a secure sub-processor relationship solely to execute your requested task. We do not use that data for any other purpose.

Encryption Standards

• In Transit: All data sent between your device and our platforms is forced over HTTPS using modern TLS encryption. This is verifiable in our application code and infrastructure configuration.
• At Rest: Our managed database provider handles disk and backup encryption using industry-standard AES-256. This is a platform-level guarantee from our infrastructure provider, not a first-party control we audit independently.

Your Right to Request Deletion

There is currently no self-serve deletion button in the product. If you want your account, history, or specific data permanently erased from our systems, contact our support team and we will process your request manually. We aim to complete verified deletion requests promptly.