Privacy Policy
Last updated: 13 September 2026
What we collect
Phantyastic processes account and brand details, campaign briefs, posts, drafts, review feedback, generated assets, and usage records needed to run the service. If you connect a publishing account, we store the account identifiers and encrypted access tokens needed for that connection.
How we use it
We use this information to provide account access, generate and revise content, apply your review decisions, operate budgets, and schedule or publish content to connections you authorize. A message sent through our contact or in-app support form includes the email and message you provide, its topic, and page context.
Service providers and connected platforms
Phantyastic runs on Cloudflare and stores structured data in D1 and media in R2. Content generation sends relevant briefs, references, and media to the AI providers used for the chosen model. Publishing sends approved content to the connected platform, including Meta/Instagram or TikTok, under that platform’s terms. We do not sell your personal information.
Product feedback with Testosaurus
When enabled, Testosaurus can collect a report you choose to send and its page and browser context. Screenshots and session replay require separate consent in its widget. You can send a text report without granting those optional permissions.
Public-site measurement and abuse prevention
We keep daily aggregate counts of interactions such as opening a demo and requesting access, using a limited set of source labels. We do not use tracking cookies, create a persistent visitor identifier, or store arbitrary campaign names in these counts. To limit abuse, we use short-lived counters derived from IP addresses with a keyed hash; those counters expire after two hours.
Retention and your choices
Account content is retained while needed to provide the service, subject to deletion and operational retention requirements. You can use the account deletion controls in Settings or contact the team to request access, correction, or deletion of your information. Contact records expire after 90 days and are used to handle and follow up on your request.
Contact and changes
Use the privacy contact form below for questions about your information or this policy. We publish updates to this policy on this page.