Privacy Policy

Last updated: March 27, 2026

1. Introduction

PhoenixGroup ("we", "us", "our") operates the CSV Converter web application at pheonixgroup.co. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account Information (via Google Sign-In):

• Name
• Email address
• Profile picture URL
• Google account ID

We do not collect or store your Google password. Authentication is handled entirely by Google's secure OAuth 2.0 system.

Payment Information:

• PayPal transaction ID
• PayPal subscription ID (if applicable)
• Payment status and plan type

We do not collect, process, or store your credit card number, bank account, or other financial details. All payment processing is handled by PayPal. We never see your card information.

Usage Data:

• Files you upload (CSV files) — processed in memory and not stored on our servers after conversion
• Conversion settings (e.g., rounding threshold)
• Login timestamps

Technical Data:

• IP address
• Browser type and version
• Session cookies (required for login functionality)

3. How We Use Your Information

We use your information to:

• Authenticate your identity and manage your account
• Process payments and manage subscription status
• Provide the CSV conversion service
• Save your user preferences (e.g., rounding settings)
• Enforce our Terms & Conditions

4. Third-Party Services

Our service integrates with the following third-party providers:

• Google — Authentication (OAuth 2.0). Subject to Google's Privacy Policy.
• PayPal — Payment processing. Subject to PayPal's Privacy Policy.
• Scryfall — Card image and pricing data. Subject to Scryfall's Privacy Policy. No user data is sent to Scryfall.

5. Cookies & Session Data

We use a single session cookie to keep you logged in. This cookie:

• Is required for the service to function
• Contains only a session identifier (not personal data)
• Expires when you close your browser or log out
• Cannot be used to track you across other websites

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

6. Data Storage & Security

Your account information is stored in an encrypted database on our server. We implement reasonable security measures including:

• HTTPS encryption for all connections
• Secure session management
• No storage of payment card details
• Environment-variable-based secrets management

7. Data Retention

• Account data — Retained as long as your account is active
• Uploaded files — Not retained; processed in memory only
• Payment records — Retained for accounting and dispute resolution purposes
• Session data — Automatically cleared on logout or session expiry

8. Your Rights

You have the right to:

• Access your personal data — contact us to request a copy
• Delete your account — contact us to request account deletion
• Revoke Google access — via your Google Account permissions

9. Children's Privacy

Our service is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. Continued use of the service constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or data requests, contact us through the website.