Privacy Policy

1. Introduction

CorPhoeniX of America ("CorPhoeniX", "we", "us", or "our") operates the corphoenix.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including authentication through Microsoft Entra ID.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Account Information

When you create an account or sign in, we may collect:

• Username and email address
• Hashed password (we never store plaintext passwords)
• Account preferences and settings

Microsoft Entra ID Sign-In

When you authenticate using Microsoft Entra ID, we may receive:

• Your name and email address from your Microsoft account
• A unique user identifier (object ID)
• Authentication tokens (used only for session management)

We do not receive or store your Microsoft password. Authentication is handled entirely by Microsoft's identity platform.

Automatically Collected Information

When you access our services, we may automatically collect:

• IP address and approximate geographic location
• Browser type and user agent
• Pages visited and features used
• Login timestamps and session data

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Authenticate your identity and manage your account
• Protect against unauthorized access and security threats
• Monitor for suspicious activity (e.g., failed login attempts)
• Respond to support requests and communications
• Comply with legal obligations

4. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures including:

• Passwords hashed using bcrypt with strong work factors
• Encrypted sessions with secure, HTTP-only cookies
• HTTPS encryption for all data in transit
• Rate limiting and brute-force protection on authentication endpoints
• Access controls restricted to authorized personnel only

Your data is stored on infrastructure operated by CorPhoeniX. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

Our services may integrate with third-party providers:

• Microsoft Entra ID: For authentication and single sign-on. Subject to Microsoft's Privacy Statement.
• Cloudflare: For content delivery and security. Subject to Cloudflare's Privacy Policy.
• OpenWeatherMap: For weather data displayed on the dashboard. No personal data is shared with this service.

6. Data Retention

We retain your account data for as long as your account is active. Session data is automatically purged after expiration (typically 30 days of inactivity). Security logs (such as failed login attempts) are retained for a reasonable period to protect against threats and are periodically purged.

You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing
• Export your data in a portable format

To exercise any of these rights, please contact us using the information below.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

• Email: admin@corphoenix.com
• Website: corphoenix.com