Privacy Policy

1. Who We Are

ZeroPhantom ("we", "us", "our") operates the website at zphantom.com and provides software tools including email automation tools, temp mail APIs, file converter APIs, and related services (the "Services").

2. Information We Collect

2.1 Information You Provide

• Email address — required for license delivery, account creation, and support
• Username / display name — for your customer portal account
• Payment transaction references — on-chain transaction IDs or BTCPay invoice IDs (not wallet details)
• Support communications — messages you send us via the support system
• License credentials — any Gmail/SMTP credentials you enter into our tools remain on your device and are never transmitted to our servers

2.2 Automatically Collected Data

• IP address (for abuse prevention, rate limiting, and security)
• Browser user agent and timestamps
• License key usage logs (activation events, download events)
• API call counts (for API quota enforcement)

3. Legal Basis for Processing

• Contract performance — processing necessary to deliver licenses and services you purchased
• Legitimate interests — fraud prevention, abuse detection, security
• Legal obligation — where required by applicable law

4. How We Use Your Information

• To deliver license keys, API credentials, and product access
• To operate your customer portal and process support tickets
• To send transactional emails (license delivery, renewal notices, ticket replies)
• To detect and prevent fraud, abuse, or unauthorized sharing of license keys
• To enforce our Terms of Service and Acceptable Use Agreement
• To improve our products based on aggregated usage patterns

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing. Limited sharing occurs only with:

• BTCPay Server — payment processor; we receive only transaction status, not payment instrument details
• Transactional email providers — solely to deliver system emails to your address
• Legal authorities — if required by law, court order, or to protect our rights and users from harm

6. Data Retention

We retain your account data for as long as your account is active. License and payment records may be retained for up to 5 years for legal and accounting purposes. You may request deletion of your account at any time; license records may be retained in anonymized form for fraud prevention.

7. Cookies

We use strictly necessary session cookies to maintain your authenticated state in the customer portal and admin panel. We do not use advertising cookies, third-party tracking pixels, or analytics services that share your data externally.

8. Security

We implement industry-standard security including HTTPS, encrypted storage, rate limiting, CSRF protection, and session security. No online service can guarantee absolute security, and we cannot be held responsible for breaches caused by factors outside our reasonable control.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, submit a request via our support page. We will respond within 30 days.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email. Continued use of the Services after changes constitutes acceptance.

12. Contact

For privacy questions or data requests, contact us through the support page.

Questions about our legal policies? Contact support — we're happy to clarify anything.