Privacy Policy
Effective May 20, 2026
This policy describes what information Project Phoenix collects when you visit runprojectphoenix.com or use the Phoenix Recon scanner, how that information is used, and the choices you have about it. We have written it plainly because we would rather you read it than skip it.
Who we are
Project Phoenix is a confidential AI strategy practice. The service is operated by Brandon Kaplan. You can reach us at brandon@runprojectphoenix.com for any question about this policy or about your data.
What we collect
Information you give us
- Intake form submissions — your first and last name, work email, organization, and title.
- Phoenix Recon scans — the company domain you choose to analyze.
- Recon unlock form — your name, company, and work email.
Information collected automatically
- A one-way hashed identifier derived from your IP address, used to prevent abuse of the scanner. The original IP cannot be recovered from this hash.
- Your browser's user-agent string, used for diagnostics.
- Standard server logs from our hosting provider (request timestamps, paths, response codes).
We do not use advertising cookies or third-party tracking pixels. We do not build behavioral profiles.
How we use it
- To respond to your request for engagement.
- To generate your Phoenix Recon analysis.
- To send you operational notifications and direct follow-up communications related to your submission.
- To prevent abuse and keep the service secure.
- To improve the service in aggregate. We do not sell individual data, ever.
Who we share it with
We rely on a small number of infrastructure providers to operate the service. Each receives only the data necessary to perform its function. We do not sell or share your information with anyone for marketing or advertising purposes.
- Vercel — hosting and serverless functions. Receives standard request data as part of normal hosting operations.
- Supabase — our database. Stores intake form submissions and Recon scan records.
- Anthropic — the Claude API generates the Recon disruption analysis. We send the domain you scan and its publicly available homepage metadata. Personal information from intake forms is not sent to Anthropic.
- Tavily — web search API used to identify real AI-native competitors during a Recon scan. We send only a search query derived from the domain.
- Resend — transactional email delivery, used to notify our operator that you have submitted a form.
- Google Workspace — email infrastructure for brandon@runprojectphoenix.com.
- Slack — internal operator notifications, delivered to a private channel.
How long we keep it
- Intake form submissions — retained for as long as is reasonably necessary to evaluate engagement fit, and thereafter if a business relationship is established. You may request deletion at any time.
- Recon scan results — retained for ninety (90) days, then automatically purged. Any linked intake submission is retained per the line above.
- Server logs — retained per our hosting provider's default (typically thirty (30) days).
- Hashed IP identifiers — retained for thirty (30) days for abuse prevention.
Your rights
Subject to applicable law, you have the right to:
- Access the information we hold about you.
- Correct inaccurate information.
- Request deletion of your information.
- Object to certain processing of your information.
- Receive a copy of your data in a portable format.
To exercise any of these rights, email brandon@runprojectphoenix.com. We will respond within thirty (30) days.
Children
Project Phoenix is intended for business users and is not directed to anyone under thirteen (13). We do not knowingly collect information from children.
International transfers
Our infrastructure providers are primarily based in the United States. By using the service from outside the United States, you consent to the transfer and processing of your information in the United States.
Security
We take reasonable measures to protect the information we hold, including encryption in transit, encryption at rest where supported by our providers, and limited access controls. No system is perfectly secure, so we recommend you do not send us information you would not want stored.
Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Material changes will be communicated to active contacts.
Contact
Questions about this policy, your data, or your rights:
brandon@runprojectphoenix.com