GoPhaze01Who operates these services
Phaze 2 LLC, doing business as GoPhaze, operates the GoPhaze website, Phaze2 business software, GoPhaze Mail and Unseriety. This notice covers GoPhaze, Phaze2 and Mail. Unseriety has a separate product notice at https://unseriety.com/legal/privacy. Updated October 29, 2026. Notice 2026-10-29.2. Contact tonideb@gophaze.com for privacy, access, correction or deletion requests.
02Information you provide
GoPhaze enquiry buttons prepare an email that you choose whether to send. Phaze2 processes account details, workspace membership, inventory identifiers including IMEI, seller and customer contact information, costs, notes, photos, device reports, configuration and activity records that you enter. Business owners decide which employee roles can access their workspace. Only listings deliberately published by an authorized user should become public.
03Mail
GoPhaze Mail stores mailbox addresses, aliases, message headers, message bodies, attachments, folders and preferences on our mail infrastructure. Optional MBOX imports copy selected archives into the chosen mailbox; they do not remove messages from the original service. Import metadata and content fingerprints help track progress and avoid duplicate copies. Uploaded temporary archive files are removed after processing. Mailbox access credentials are kept server-side with restricted filesystem access. This is not end-to-end encrypted email. Other mail systems may keep their own copies.
04Why we process information
We process information to provide requested services, authenticate users, separate business workspaces, deliver mail, maintain records, resolve support requests and protect the service. Do not upload personal information you lack authority to process. A business using Phaze2 remains responsible for its collection notices, lawful use and staff access decisions.
05Providers and transfers
Cloudflare delivers the website, API and device-check coordination. Supabase provides Phaze2 authentication, database and private file storage. GoPhaze Mail runs on hosted server infrastructure provided by netcup. When an authorized user requests a live IMEI check, the device identifier and selected check type are sent to IMEICheck. Providers process the information needed for their service under their applicable terms; processing may occur in the United States and other countries. We do not sell personal information or use mailbox content for advertising.
06Browser storage and external content
Essential account/session data and appearance preferences may be stored in browser storage or secure cookies. The GoPhaze marketing site also requests Google Fonts and may load TikTok content when embedded players are used. Those requests disclose network information to the relevant provider. The marketing-site explanation describes these embeds; it is separate from account services.
07Your choices and retention
Contact us from your account address for access, correction, export or deletion requests; we verify ownership and authority before acting. Deletion is not a browser-only toggle and may require a verified workspace-owner request. Mail can be deleted through its mailbox controls; other recipients, exports and offline copies cannot be recalled. Our retention policy explains current data classes and limits. We do not claim that every provider backup or log can be removed immediately.
08Operator account records
Phaze 2 LLC / GoPhaze may use restricted operator tools to administer product profile information, saved preferences and recorded policy acknowledgements. Records retain their product and account identifiers; matching email addresses alone do not merge accounts. Historical acceptances are not fabricated. Records follow the applicable product retention and deletion policy. Unseriety has a versioned agreement-history flow; Phaze2 does not yet provide the same acceptance flow.
09Security and changes
We use authentication, workspace access checks, private storage and protected server connections. No service can guarantee perfect security. Public security policies define requirements and distinguish them from verified implementation. New data flows or material changes will be reflected in these notices. Phaze2 does not currently provide Plaid bank linking; Unseriety bank connections are not active. Phaze 2 LLC / GoPhaze is the Plaid registrant; Unseriety is its software product. Any bank-data processing requires separate product readiness and consumer consent.
10Passkeys and biometric verification
Account passkeys use domain-bound WebAuthn credentials. Our authentication provider stores public credentials, identifiers, names and relevant timestamps. The private credential remains with your device or passkey provider. Face ID, Touch ID or a device PIN authorizes its use locally; GoPhaze does not receive your biometric template. Register passkeys separately for GoPhaze and Unseriety. A local app lock is separate from server sign-in, and recovery methods have different protections.
11Recovery phrase and security activity
The account security website lets you enroll a product-specific, one-use 16-word recovery phrase after account verification. Your browser generates the phrase, and enrollment stores a one-way digest linked to your account rather than the readable phrase. Recovery submits your email, account password and phrase to the recovery service for verification. Successful recovery removes authenticator-code and phone factors, revokes existing sessions and consumes the phrase. Existing passkeys remain saved. We retain recovery status, event types and timestamps for account activity and security investigation. Replacing a phrase invalidates the old one. Support does not need your password or phrase. Recovery records follow account deletion and applicable security-retention rules, including minimal records needed to prevent reuse of revoked sessions.
12Authorized operator access
Authorized GoPhaze operators may access account information through restricted operator tools and provider consoles for support, account administration, security, recovery and legal obligations, subject to assigned permissions. Administrative actions and access changes may be logged. This is not end-to-end encryption that prevents the operator from accessing service data. Cloudflare Access passkeys protect supported operator sign-ins; they do not establish phishing-resistant authentication for every separate provider-console login.
13Unseriety financial services and consent
Unseriety is a product operated by Phaze 2 LLC, doing business as GoPhaze, and is the application intended for the proposed Plaid integration. Phaze2 inventory and GoPhaze Mail do not currently provide Plaid bank linking. Unseriety bank connections and credit-report access are also not active. Accepting a privacy notice, adding a passkey or entering manual financial information does not authorize a bank connection. Any future connection requires a separate authorization flow and an updated Unseriety notice describing the actual information collected, purposes and controls. See Unseriety privacy. Planned hosting changes are not described as completed migrations.
14Notice history
This notice is version 2026-10-29.2. We review it after material changes to collection, providers, authentication, recovery or sharing. Historical policy acknowledgements retain the version accepted at the time; this update does not backdate consent. Each product retains its own account and privacy records.
15Your choices and personal information
We do not sell personal information. You can request access, correction, export or deletion at any time by contacting tonideb@gophaze.com. We verify your identity and authority before acting. Shared workspace records, legal preservation, provider backups and recipient copies can limit what is removed immediately. Clearing cookies does not delete your account.
16Cookies and browser storage
Our shared appearance script sets a gophaze-theme cookie for GoPhaze subdomains with a one-year maximum age and also saves the selected theme in browser local storage. Phaze2 stores its signed-in session in local storage under phaze2-session. Mail uses authentication/session controls to open your assigned mailbox. These support appearance and account access, rather than advertising. See Cookies and storage for the details and external content.
17Device drafts and address suggestions
Device drafts can contain private device identifiers, seller contact details, photos and notes. Draft recovery is scoped to the signed-in account and workspace. Drafts remain accessible for up to seven days; expired drafts are cleaned up on subsequent access, and local draft copies are cleared when you sign out. Uploaded evidence is stored privately and may be retained with inventory history.
Where Google Maps address suggestions are enabled, the text entered into the address search is sent to Google to retrieve suggestions. Selecting a suggestion requests its address components. GoPhaze keeps the selected address as part of the device purchase record; it does not retain the suggestion list. This feature is also governed by the Google Privacy Policy. Manual address entry remains available.