Website privacy policy
This policy covers the website at phosigil.com. The Phosigil product runs on our customers' own servers; how a customer uses it is covered by their agreement with us and their own policies.
The short version
- This site has no analytics, no advertising and no tracking cookies.
- The only personal data we collect here is what you type into the contact form.
- That data goes to our mailbox so we can reply to you. It is not sold, shared for marketing or added to a list.
What we collect
Visiting the site
The site is static and is served through Cloudflare. Cloudflare processes connection data (IP address, request headers, time) to deliver the pages and to block abuse. We do not run analytics scripts, and we set no cookies. Your theme choice (light or dark), if you change it, is kept in your browser's local storage and never sent to us.
The contact form
When you send the form we receive your name, work email, company, the size range you chose and your message. The form is protected by Cloudflare Turnstile, which checks that the submission comes from a browser and not a script; Turnstile processes your IP address and browser signals for that purpose under Cloudflare's privacy policy. The submission is relayed by a Cloudflare Pages Function to our gateway, which emails it to our sales mailbox. The gateway keeps no copy of the message; it writes one log line with the time and a hash of the sending IP address for rate limiting.
If you email us directly, we hold the correspondence in our mailbox for as long as it is relevant to the conversation and any resulting agreement.
Why we process it
To reply to your enquiry, to arrange a demo or evaluation, to prepare a quote, and to keep the site working and secure. The legal basis, where one is required, is our legitimate interest in responding to people who contact us, and the steps needed to enter a contract with you.
Who receives it
- Cloudflare, Inc. (hosting, delivery, Turnstile) as our processor.
- Our email provider, as our processor, for the mailbox that receives contact-form messages.
- Nobody else, unless the law requires it.
How long we keep it
Contact-form messages and email correspondence are kept while the conversation is live and for up to 24 months after the last exchange, or for the life of a resulting agreement plus the period required for our records. The gateway's rate-limit log line is kept for 30 days.
Your choices and rights
You can email us instead of using the form. You can ask us what we hold about you, ask us to correct or delete it, or object to our processing, by writing to security@phosigil.com. If you are in a jurisdiction with a supervisory authority, you may also complain to it.
Security
The site is served over HTTPS only, with a strict content security policy. Contact-form traffic between Cloudflare and our gateway is encrypted in transit. Security problems with this site or with Phosigil can be reported under our vulnerability disclosure policy.
Changes
When this policy changes we update the date at the top of the page. Material changes are also noted in the product changelog.