Privacy Policy

1. Introduction

Phased Research Group (“PRG,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit phasedresearchgroup.com or purchase products from us. By using our Site, you consent to the practices described in this policy.

2. Information We Collect

Information you provide:

• Account information: Name, email address, and password when you create an account
• Order information: Shipping address, phone number, and order details
• Payment information: Cryptocurrency wallet addresses and transaction hashes (we do not store private keys)
• Communications: Messages you send via our contact form or email

Information collected automatically:

• Device & usage data: IP address, browser type, operating system, pages visited, referring URLs
• Cookies & local storage: Shopping cart contents, age verification status, session tokens
• Order metadata: Order timestamps, payment status, shipping tracking numbers

3. How We Use Your Information

• Process and fulfill orders, including shipping and tracking
• Verify payment status on the blockchain and confirm transactions
• Communicate with you about orders, products, and account matters
• Provide customer support and respond to inquiries
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and law enforcement requests
• Improve our website, products, and services
• Send order confirmations and status updates (you can opt out of marketing emails)

4. Cryptocurrency Payments & Privacy

We use a self-hosted crypto payment gateway. When you pay with cryptocurrency:

• Your payment goes directly to our wallet — no third-party processor sees your data
• We store the transaction hash and deposit address for order matching and record-keeping
• Blockchain transactions are public and immutable — we cannot delete on-chain records
• We do not collect or store your private keys, seed phrases, or wallet credentials
• A unique payment amount (with random suffix) links your on-chain payment to your order

5. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: Hosting (Vercel), database (Neon), email delivery (Resend) — all bound by confidentiality agreements
• Shipping carriers: UPS, USPS — only the information needed to deliver your package
• Law enforcement: If required by law, court order, or to protect our rights and safety
• Business transfers: In connection with a merger, acquisition, or asset sale (with notice)

We never share your data for marketing purposes with third parties.

6. Data Security

We implement industry-standard security measures:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing (never stored in plaintext)
• HMAC-signed session tokens for authentication
• Encrypted environment variables for secrets
• Regular security reviews and dependency updates
• Role-based access control for admin functions

No system is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your data.

7. Cookies & Local Storage

We use the following:

• Session cookie: NextAuth session token (required for login)
• Local storage: Shopping cart contents, age verification status
• Analytics: We do not currently use third-party analytics (Google Analytics, etc.)

You can clear cookies and local storage in your browser settings. Note that clearing cart data will empty your shopping cart.

8. Your Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Delete your personal information (subject to legal retention requirements)
• Opt out of the sale of your personal information (we do not sell your data)
• Correct inaccurate personal information
• Access your personal information in a portable format
• Non-discrimination — we will not discriminate against you for exercising these rights

To exercise these rights, email support@phasedresearchgroup.com with “Privacy Request” in the subject line.

9. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Order records are retained for 7 years for legal and tax compliance. After account deletion, we anonymize or delete your data within 30 days, except where retention is required by law.

10. Children's Privacy

Our Site is not intended for anyone under 21. We do not knowingly collect information from children. If you believe we have collected data from someone under 21, contact us immediately for deletion.

11. Third-Party Links

Our Site may contain links to third-party websites (blockchain explorers, shipping carriers). We are not responsible for their privacy practices. Review their policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be posted on this page with an updated date. Continued use of the Site after changes constitutes acceptance.

13. Contact

Privacy questions? Email support@phasedresearchgroup.com with “Privacy” in the subject line.