Privacy Policy

Introduction

EXP Studio, LLC (“we”, “us”, or “PlanPhaƨe™”) operates planphaze.com and the PlanPhaƨe™ platform — a project management and collaboration tool built for game developers. This Privacy Policy explains what information we collect when you use our services, how we use and protect that information, and your rights with respect to your data.

By creating an account or otherwise using PlanPhaƨe™, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

Information We Collect

We collect information in the following categories:

• Account data — When you register, we collect your name, email address, username, and any profile information you choose to provide (such as a profile photo or bio).
• Usage data — We automatically collect data about how you interact with the platform, including pages visited, features used, IP address, browser type, device information, and referring URLs.
• Content you create — Any projects, documents, assets, tasks, messages, and other content you generate or upload while using PlanPhaƨe™ is stored on our platform.
• Payment information — Payments are processed by Stripe. We do not store your credit card numbers or full payment details; we only retain transaction identifiers and billing metadata provided by Stripe.
• Cookies and tracking — We use session cookies to keep you logged in and analytics cookies to understand how the platform is used. See the Cookies & Tracking section for more details.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and improve the PlanPhaƨe™ platform.
• To communicate with you about your account, including transactional emails and support responses.
• To process payments and manage your subscription through our payment processor.
• To send you product updates, newsletters, and promotional content — you may opt out at any time via the unsubscribe link in those emails or through your account settings.
• To monitor for security threats, prevent fraud, and enforce our Terms of Use.
• To comply with applicable legal obligations and respond to lawful requests from authorities.

Information Sharing

We do not sell, rent, or trade your personal information to third parties. We share your data only in the following limited circumstances:

• Infrastructure and hosting providers (e.g., Vercel for deployment, Neon/Postgres for our database) — necessary to run the platform.
• Payment processor — Stripe processes all payments. Your payment data is governed by Stripe’s Privacy Policy.
• Authentication provider — Clerk manages user authentication and session management.
• Analytics tools — We use analytics services to understand aggregate usage patterns. These tools receive anonymized or pseudonymized data.
• Legal requirements — We may disclose your information if required by law, court order, or governmental authority, or to protect the rights and safety of EXP Studio, LLC and our users.

All third-party service providers are bound by data processing agreements that require them to protect your information and prohibit them from using it for their own purposes.

Data Retention

We retain your data for as long as necessary to provide the service and comply with our legal obligations. Specifically:

• Account data is kept for the duration your account is active and for 30 days following account deletion, after which it is permanently purged.
• System and access logs are retained for 90 days for security and debugging purposes.
• Database backups may retain data for up to 1 year before being rotated and destroyed.

If you request deletion of your account, we will begin the deletion process promptly. Residual copies in backups will be removed during the next scheduled backup rotation.

Security

We implement industry-standard security measures to protect your data:

• Data at rest is encrypted using AES-256 encryption.
• Data in transit is encrypted using TLS (Transport Layer Security).
• API keys and sensitive credentials are encrypted and stored in secrets vaults.
• We conduct regular internal security reviews of our infrastructure and code.

No system is 100% secure, and we cannot guarantee the absolute security of your information. We encourage you to use a strong, unique password and to enable two-factor authentication if available. If you suspect any unauthorized access to your account, please contact us immediately at contact@planphaze.com.

Cookies & Tracking

We use cookies and similar tracking technologies on PlanPhaƨe™. The types of cookies we use include:

• Essential cookies — Required for authentication and to maintain your session. Without these, the platform cannot function.
• Functional cookies — Used to remember your preferences, such as theme settings or notification preferences.
• Analytics cookies — Help us understand how users interact with the platform so we can improve features and performance.

You can disable cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core platform features.

Children’s Privacy

PlanPhaƨe™ is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@planphaze.com and we will promptly delete any such information from our records.

Your Rights

You have the following rights with respect to your personal information:

• Access — You may request a copy of the personal data we hold about you.
• Correction — You may ask us to correct inaccurate or incomplete information.
• Export — You may request an export of your content and data in a machine-readable format.
• Deletion — You may request deletion of your account and associated personal data, subject to our retention obligations.

To exercise any of these rights, email us at contact@planphaze.com. New York and U.S. residents may have additional rights under applicable state and federal privacy laws. We will respond to verifiable requests within 30 days.

International Users

PlanPhaƨe™ is operated from the United States. If you access the platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using PlanPhaƨe™, you consent to the collection, transfer, and processing of your information in the United States in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email to the address associated with your account or through a prominent notice within the platform before the changes take effect. We encourage you to review this policy periodically to stay informed.

Your continued use of PlanPhaƨe™ after any changes to this policy constitutes your acceptance of the updated terms.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: