myphantompath Privacy Policy

Protecting your privacy is a priority for myphantompath.com, Inc. (“myphantompath,” “we,” “us,” or “our”). This Privacy Policy (“Notice”) describes how we collect, use, disclose, retain, and protect personal information in connection with https://www.myphantompath.com, https://myphantompath.com, and any related websites, applications, and services (collectively, the “Site” and “Services”). This Notice is provided in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and other applicable U.S. state privacy laws. Please review this Notice carefully; your use of the Site does not constitute consent where applicable law requires separate, affirmative, or opt-in consent, and nothing in this Notice waives any right you may have under applicable law.

Collection of your Personal Information

We collect personal information that you voluntarily provide to us, and we may require certain personal information when you elect to use certain products or services available on the Site. The categories of personal information we may collect include: (a) identifiers (such as name, email address, postal address, telephone number, and IP address); (b) commercial information (such as products or services requested); (c) internet or other electronic network activity information; and (d) inferences drawn from the foregoing. We use this information to provide, maintain, and improve the Services; to respond to your inquiries; to communicate with you regarding products or services you have requested; to comply with legal obligations; and for other purposes disclosed to you at the point of collection. We will not use or disclose your personal information for any purpose that is materially different from, or incompatible with, the purpose disclosed at collection without first providing you notice and, where required, obtaining your consent. We do not knowingly collect Social Security numbers, financial account credentials, precise geolocation, biometric identifiers, or other “sensitive personal information” through the Site.

Sharing Information with Third Parties

myphantompath does not sell, rent, or lease its customer lists or your personal information to third parties, and does not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve (12) months. myphantompath may disclose personal information to service providers and contractors that perform functions on our behalf, such as email delivery, hosting, and

analytics. Each such recipient is engaged under a written contract that (a) limits use of the personal information to the specific business purpose for which it was disclosed, (b) prohibits selling, sharing, retaining, or using the information for its own purposes, (c) requires reasonable security safeguards, and (d) requires assistance with consumer rights requests and notification of any security incident. myphantompath may disclose your personal information if required to do so by law or in the good faith belief that such action is reasonably necessary to: (a) comply with applicable law, regulation, subpoena, or legal process served on myphantompath or the Site; (b) protect and defend the rights or property of myphantompath; (c) investigate or prevent fraud or violations of our terms; and/or (d) act under exigent circumstances to protect the personal safety of users of myphantompath or the public. Where legally permitted, we will provide you with notice of a compelled disclosure and will limit the disclosure to the minimum information reasonably required.

Automatically Collected Information

Information about your computer hardware and software may be automatically collected by myphantompath, including your IP address, browser type, operating system, device identifiers, domain names, access times, and referring website addresses. We use this information to operate and secure the Services, maintain service quality, and compile aggregate statistics regarding use of the Site. We do not combine automatically collected information with directly identifying information for advertising or profiling purposes, and we retain such information only for the period described in the “Data Retention” section below.

Use of Cookies

The myphantompath website may use “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize myphantompath pages, or register with myphantompath site or services, a cookie helps myphantompath to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same myphantompath website, the information you previously provided can be retrieved, so you can easily use the myphantompath features that you customized. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the myphantompath Services or websites you visit. We honor the Global Privacy Control (GPC) and other recognized opt-out preference signals transmitted by your browser or device as a valid request to opt out of the sale or sharing of personal information. We do not respond to Do Not Track signals because no uniform standard has been adopted.

Links

This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

Security of Your Personal Information

myphantompath maintains commercially reasonable administrative, technical, physical, and organizational safeguards designed to protect your personal information from unauthorized access, use, modification, or disclosure, consistent with the sensitivity of the information and applicable law. We take appropriate security measures to protect against unauthorized access to or alteration of your personal information. However, no data transmission over the Internet or any wireless network can be guaranteed to be one hundred percent (100%) secure. Accordingly, while we take reasonable steps to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet that are beyond our control; and (b) the security, integrity, and privacy of information and data exchanged between you and us through this Site cannot be guaranteed. Nothing in this Notice limits any right or remedy you may have under applicable data breach notification laws, and in the event of a breach of the security of the system involving your personal information, we will provide notice to you and to any applicable regulator within the time and in the manner required by law.

Right to Deletion

Subject to the exceptions set out below, and upon receipt of a request that we can verify, you may exercise the following rights: the right to know and access the specific pieces and categories of personal information we have collected; the right to correct inaccurate personal information; the right to obtain a portable copy of your personal information; the right to opt out of any sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to

receive discriminatory treatment for exercising any of these rights. Upon a verifiable deletion request, we will:

• Delete your personal information from our records; and

• Direct any service providers to delete your personal information from their records

Please note that we may not be able to comply with request to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context or our ongoing business relationship with you, or otherwise perform a contract between you and us;

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;

• Debug to identify and repair errors that impair existing intended functionality;

• Exercise free speech, or exercise another right provided for by law;

• Comply with the California Electronic Communications Privacy Act;

• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;

• Enable solely internal uses that are responsibly aligned with your expectations based on your relationship with us;

• Comply with an existing legal obligation; or

• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Children Under Thirteen

myphantompath does not knowingly collect personally identifiable information from children under the age of thirteen (13). Consistent with the Children’s Online Privacy Protection Act (“COPPA”), if you are under the age of thirteen, you must obtain permission from your parent or guardian before using this website. We do not knowingly sell or share the personal information of consumers we know to be under sixteen (16) years of age without the affirmative authorization required by law (opt-in from the

consumer if between 13 and 16, or from a parent or guardian if under 13). If we learn that we have collected personal information from a child in violation of this section, we will delete that information promptly. A parent or guardian may request review or deletion of a child’s information by contacting us using the information below.

E-mail Communications

From time to time, myphantompath may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. If you would like to stop receiving marketing or promotional communications via email from myphantompath, you may opt out by clicking the unsubscribe link in any email you receive from us or by contacting us using the information below. We will honor your request within ten (10) business days as required by the CAN-SPAM Act. We may continue to send you transactional or relationship messages, such as service, security, billing, and legal notices, which are not subject to opt-out.

External Data Storage Sites

We may store your data on servers provided by third-party hosting vendors with whom we have contracted. Each such vendor is engaged under a written agreement containing confidentiality, security, breach-notification, subprocessor-approval, and data-return-or-deletion obligations, and we remain responsible for the personal information we entrust to them. Personal information may be stored or processed in the United States or in other jurisdictions where we or our vendors maintain facilities; where required, we implement an appropriate transfer mechanism for cross-border transfers.

Changes to this Statement

myphantompath reserves the right to modify this Privacy Policy from time to time. If we make material changes, we will provide notice by posting a prominent notice on the Site and, where we have your email address, by sending notice to that address at least thirty (30) days before the change takes effect, and we will update the “Last Updated” date above. Where applicable law requires your consent to a material change in the processing of previously collected personal information, we will obtain that consent before applying the change to that information. We will retain prior versions of this Notice and make them available upon request. Your continued use of the Site and/or Services after the effective date of a non-material modification constitutes your acknowledgement of the modified Privacy Policy.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purpose for which it was collected, to provide the Services, to resolve disputes, to enforce our agreements, and to comply with applicable legal, tax, accounting, and recordkeeping obligations. In general, inquiry and communication records are retained for twenty-four (24) months following our last interaction with you, and automatically collected log data is retained for thirteen (13) months, after which the information is deleted or de-identified. Retention criteria are reviewed periodically and applied consistently across our systems and those of our service providers.

Sensitive Personal Information

We do not collect, use, or disclose sensitive personal information for the purpose of inferring characteristics about you, and we do not use or disclose sensitive personal information for purposes other than those permitted under applicable law. If our practices change, we will update this Notice and provide the notice and right to limit use and disclosure of sensitive personal information required by law.

Notice to Residents of Other States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive consumer privacy laws have rights substantially similar to those described above, including the rights to confirm processing, access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, and certain profiling, and to appeal a denial of a request. Nevada residents may submit a verified request that we not sell any covered information we have collected about them. We do not process personal information for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.

No Medical or Insurance Advice; HIPAA

Information available through the Site is provided for general informational purposes only and does not constitute medical, insurance, legal, or financial advice. Unless we notify you otherwise in writing, myphantompath is not acting as a covered entity or business associate under the Health Insurance Portability and Accountability Act (“HIPAA”) with respect to information you submit through the Site, and information you voluntarily submit through the Site is not protected health information subject to HIPAA.

Accessibility

We are committed to ensuring that this Notice is accessible to individuals with disabilities. If you use an assistive technology and are unable to access any portion of this Notice, please contact us using the information below and we will provide the information in an alternative format at no cost to you.

Governing Law

This Notice and any dispute arising out of or relating to it are governed by the laws of the State of California, without regard to its conflict of laws principles, except to the extent the privacy law of your state of residence provides you with greater rights, in which case that law controls as to those rights.

Contact Information

myphantompath welcomes your questions or comments regarding this Notice. To exercise any privacy right described above, to submit a privacy inquiry (including opt-out), or if you believe that myphantompath has not adhered to this Notice, you may contact us by email, telephone, or postal mail using the information below. We will acknowledge your request within ten (10) business days and respond substantively within forty-five (45) calendar days, which period may be extended by an additional forty-five (45) days where reasonably necessary, with notice to you. You may designate an authorized agent to submit a request on your behalf, subject to verification of the agent’s authority. If we deny your request, you may appeal that decision by replying to our response, and we will inform you in writing of the outcome of the appeal within forty-five (45) days, together with information on how to contact the applicable Attorney General if you have concerns about the result. Contact us at:

myphantompath.com, Inc.
20 S. Santa Cruz, Suite 300
Los Gatos, California 95030

Email Address: gatewayadmin@myphantompath.com

Telephone number: 1 (650) 796-2116

Effective as of July 29, 2026 (Last Updated: July 29, 2026)