OPERATIONAL LEGAL NOTICE

Privacy Policy

Design Partner Pilot Agreement · Preliminary Operational Draft

DRAFT — pending counsel review. Not in effect. Binding terms will be published at RC1.

Release Status: Available at RC1. This document summarizes the operational commitments, confidentiality terms, and data handling rules governing design-partner pilot evaluations prior to formal general availability.

1. Data Ownership & Confidentiality

Customer retains 100% intellectual property ownership of all submitted source code, commit metadata, and derived security findings. PHANTOM does not train foundational public AI models on customer private repository source code.

2. Retention Windows & Verified Deletion

Design-partner defaults: scan session telemetry and reports are retained for 30 days; transient micro-VM validation artifacts are purged after 14 days. Customer may initiate an immediate verified purge across PostgreSQL, Redis, GCS, and memory at any time.

3. Encryption & Storage Boundaries

All data is encrypted in transit via TLS 1.3 and at rest with AES-256-GCM. Container runtimes operate with non-root security contexts and no cloud metadata access.

Questions regarding operational legal terms?Submit via secure intake (/request-access) →