Privacy Policy
This policy explains what Phluxora ("PHLUXORA") collects, how we use it, and your choices. We aim to collect as little as possible.
What we collect
Account information: your email address and a securely hashed password (we never store your password in readable form). Billing information: your subscription/payment status and a Stripe customer reference. We do not see or store your full card number; card details are handled entirely by Stripe. Usage data: the products you approve and basic activity needed to run the service.
How your data is stored
Account records are encrypted at rest, and passwords are one-way hashed. We use Vercel for hosting and storage. Reasonable measures are taken to protect your data, but no system is perfectly secure.
How we use it
To create and operate your account, process payments and subscriptions, provide the service, personalize results, and communicate with you about your account. We do not sell your personal information.
Third parties we share with
We share only what is necessary with service providers that help run PHLUXORA: Stripe (payments), Vercel (hosting/storage), AI providers (to generate product names and copy), and trend-data providers. If you connect Shopify, we use a token you authorize to create products in your store. These providers process data under their own terms.
Cookies
We use a single essential cookie to keep you logged in (your session). We do not use advertising or cross-site tracking cookies.
Data retention & your rights
We keep your account data while your account is active. You may request access to or deletion of your personal data by emailing us; we will honor valid requests as required by applicable law (including GDPR/CCPA where they apply). Deleting your account removes your stored account record.
Children
PHLUXORA is not intended for anyone under 18, and we do not knowingly collect data from minors.
Changes
We may update this policy; the date above reflects the latest version.
Contact
Privacy questions or data requests: support@phluxora.com.