Phantom Public Beta Privacy Notice
1. Controller and contact
The controller is Paul Hickmott trading as Phantom, and the public business correspondence address is 179a Feltham Road, Ashford, Surrey, TW15 1BB. Privacy and security questions may be sent to security@makephantom.com.
2. Data used
Phantom processes account and contact details, date of birth or a derived age band, security and login records, prompts, uploaded originals, generated outputs, Library and publication choices, profile details, reports, appeals, support messages, consent/preferences, credits and transaction records, and technical device/network events needed to secure and operate the service. Public profiles do not intentionally expose email, date of birth or prompts.
3. Purposes
Data is used to register and secure accounts, provide creation and Library functions, operate Community publication/following, moderate and investigate abuse, answer support and rights requests, maintain records and comply with law. Marketing and model training are separate choices and default off. Selected prompt/output quality review is disabled unless a reviewed lawful basis and restricted-access policy are activated.
4. Legal basis
Processing for account contracts, security and mandatory legal duties uses those bases. Optional marketing uses separate opt-in consent. Selected quality review remains disabled until a reviewed lawful basis and restricted-access controls are approved; a compulsory checkbox is not treated as freely given consent. Children's and sensitive-material processing remains unavailable where the applicable assessed condition is missing.
5. Sharing and transfers
Render hosts the API and background worker in Frankfurt, Germany, and supplies the connected database and queue. Cloudflare R2 stores media through its EU jurisdiction endpoint. FAL processes prompts and any necessary uploaded media for the configured picture and video generation routes. Microsoft 365 delivers transactional account emails from no-reply@makephantom.com. Stripe processes checkout, subscription and payment records. These services are not represented as EU-only processing. Provider support, account administration and subprocessors may involve international processing. Provider contractual documentation and outstanding account-specific transfer checks are recorded in Phantom's provider register; EU storage alone is not a claim that all processing stays in the EU. Questions may be sent to security@makephantom.com.
6. Retention ceilings
Identifiable normal prompts are retained no longer than 30 days. A specifically selected quality case may be retained no longer than 90 days from original submission and selection never resets that clock. Temporary originals are normally removed in 24 hours and no later than 72 hours after job completion unless deliberately saved to Library. Creation and account deletion hide access immediately and target physical purge without unnecessary delay and within 30 days. Typed security/audit records may be retained up to 12 months where necessary. Scoped lawful holds and backup expiry may create documented exceptions; ceilings are not mandatory waiting periods.
7. Inactivity
A warning is intended around three calendar months after the last successful login. Deletion is not eligible before four calendar months and 30 days after a recorded warning. A successful login cancels pending inactivity deletion before purge.
8. Rights and complaints
Subject to applicable law, users may request access, correction, deletion, restriction, objection, portability or withdrawal of a choice. Account restriction does not remove these routes. Send requests or privacy complaints to security@makephantom.com. Different legal clocks apply to complaints, rights requests, reports, incidents and appeals.
9. Children
Phantom intends to admit eligible users aged 14–17 only after territory-specific children's privacy and online-safety controls are approved. High privacy defaults apply and new creations remain private.
10. Changes
Notice and, where appropriate, acknowledgement or contractual reacceptance will be requested for material changes. Privacy acknowledgement is not contractual assent or consent to unrelated processing.
11. Optional website analytics
With your permission, Phantom uses Google Analytics to understand visits and improve the website. Analytics is optional and stays off until you choose Allow analytics. Choosing Reject analytics does not affect access to Phantom. You can change your choice through Cookie preferences. Google tags do not load or send analytics requests before permission is given. Advertising personalisation and advertising data collection remain off. When analytics is allowed, Google receives limited visit and interaction information, such as the page or feature viewed, approximate location derived from the connection, browser and device information, and a pseudonymous browser identifier. We do not intentionally send account identifiers, email addresses, prompts, uploaded or generated media, payment details, or authentication tokens. Google may process analytics information internationally; see Google’s privacy information at https://policies.google.com/privacy. Analytics cookies and the saved analytics choice expire after six months. Google Analytics user-level and event-level retention is set to two months, without resetting that period on new activity. Aggregated reports may be retained longer. Withdrawal stops future analytics collection and removes Phantom’s accessible analytics cookies; it does not automatically erase information already received by Google. Privacy and deletion requests may be sent to security@makephantom.com.
12. Song creation and saved recipes
For a requested Song creation, Phantom sends the musical direction, lyrics, selected generation settings and any deliberately selected reference recording to Mureka. Reference recordings can contain an identifiable voice; submit only recordings you have permission to process. Mureka processes these inputs to provide music generation. Its API privacy policy is available at https://platform.mureka.ai/privacy_policy.pdf. This is not an assurance of EU-only processing or a promise of voice cloning. Phantom stores private song drafts, completed audio and saved creation recipes to support editing and Reuse prompt. Deliberately saved Library content and recipes remain associated with your account until deleted under the Library/account deletion rules; they are distinct from temporary generation inputs. Operational records include settings, job state, provider connection events and token reservations/settlements. Redacted Capture exports replace lyrics and musical direction with lengths and fingerprints rather than their text. Publishing a song is a deliberate action; private drafts and reference recordings are not automatically published.