Privacy Policy

Rui Peres is the controller for the hosted Fantasma website, live demo, and dashboard service. If you have questions about this policy or how your data is handled, contact [email protected].

What this covers

This policy applies to the hosted Fantasma service, including `usefantasma.com`, the public demo, and authenticated dashboard access. It does not replace the separate terms, licenses, or privacy choices that may apply to the open-source Fantasma project outside the hosted service.

Data we collect

• Account data such as your email address and login requests.
• Workspace, project, and billing metadata needed to provide the hosted service.
• Payment and subscription records handled through Stripe and related billing events stored in the dashboard.
• Support, security, and operational records needed to protect the service and investigate misuse.
• Analytics data generated through your use of the hosted service.

How we use personal data

• To provide authentication, billing, and workspace access.
• To operate, secure, maintain, and improve the hosted service.
• To respond to support requests and service communications.
• To meet legal, accounting, tax, fraud-prevention, and security obligations.

Privacy and confidentiality

We treat account data, workspace data, billing data, and hosted analytics data as private and confidential. We do not sell personal data. Access to personal data is limited to what is reasonably needed to operate, secure, support, and comply with legal obligations for the hosted service.

Lawful bases

The main lawful bases used for the hosted service are contract, legal obligation, and legitimate interests. Legitimate interests include running a reliable hosted service, preventing abuse, and keeping the product secure.

Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, misuse, loss, or disclosure. This includes access controls, product-owned abuse controls, and encryption for stored service secrets used by the hosted dashboard. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Processors and transfers

The hosted service uses a small number of service providers to operate core functions, including Stripe for payments, an email provider for login delivery, and Fathom for privacy-focused website and product analytics. The hosted website and product use Fathom without customer-facing marketing cookies. Personal data may be processed outside the UK when needed to provide the service, using appropriate safeguards where required.

Retention

Analytics data is retained for 60 days on Fantasma Free and 12 months on paid or complimentary hosted plans. Account, billing, security, and fraud-prevention records may be kept for longer where reasonably necessary to provide the service, enforce agreements, or comply with legal obligations.

Your rights

Depending on the circumstances, you may have rights to access, rectify, erase, restrict, object to, or port your personal data. You can exercise those rights by contacting [email protected].