Privacy Policy

Effective date: May 5, 2026 Last updated: May 5, 2026

LowCode Agency LLC, operating the Phos AI Labs brand (“Phos AI Labs,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our websites, including https://phosailabs.com and any related subdomains (collectively, the “Site”), or use any tools, calculators, forms, downloads, or other interactive features offered on the Site (the “Services”).

This Privacy Policy applies to information collected through the Site and Services. It does not apply to information you provide to us, or that we collect about you, in connection with services we deliver under a separately signed Master Services Agreement, Statement of Work, or other engagement contract — those engagements are governed by the data-handling terms of those contracts.

By accessing the Site or using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Site or Services.


1. Information We Collect

1.1 Information you provide directly

We collect information you submit to us, including:

1.2 Information collected automatically

When you visit the Site, we and our third-party providers automatically collect:


2. Tracking Technologies

The Site uses the following categories of tracking technologies. The specific tools listed below reflect our current configuration and are subject to change; we will update this Section when we add or remove tools.

2.1 Analytics

2.2 Session replay and heat-mapping

2.3 Tag management

2.4 Advertising and attribution

We may use third-party advertising and conversion-tracking pixels, including but not limited to Meta (Facebook) Pixel, LinkedIn Insight Tag, and Google Ads conversion tracking, to measure the effectiveness of advertising and to retarget visitors. Where active, these tools may collect IP address, page-view information, and persistent identifiers. The active set of advertising pixels at any time may vary; current configuration is reflected in our Google Tag Manager container.

2.5 Email and CRM tracking

Marketing and sales emails sent from us may include open-tracking and click-tracking pixels embedded in the email body. These pixels record when an email is opened and when links are clicked.

2.6 Embedded third-party content

The Site embeds content and tools provided by third parties, including without limitation Calendly (scheduling), YouTube (video), and similar embedded providers. Use of those embeds is subject to the privacy policies of those providers.

By accessing the Site and continuing to use it after viewing this Privacy Policy or our cookie banner, you consent to the use of these tracking technologies and to the collection, transmission, and processing of data as described in this Privacy Policy. If you do not consent, do not use the Site.

You may control or limit certain optional tracking through:

Limiting optional tracking does not affect your ability to use the Site, but some functionality (e.g., conversion tracking on forms) may be reduced.

Consent rules for visitors in the European Economic Area, the United Kingdom, and Switzerland. For visitors connecting from those regions, we treat optional cookies and tracking as opt-in. Non-essential tracking technologies will not load until you provide affirmative consent through our cookie banner, and your consent may be withdrawn at any time by reopening the cookie banner.


3. How We Use Information

We use the information described above to:

We do not use the information collected through the Site to make automated decisions that produce legal or similarly significant effects about you.


4. How We Share Information

We share information only as described below.

We do not sell personal information as the term “sell” is defined under California law, and we do not “share” personal information for cross-context behavioral advertising as that term is defined under California law, except that the use of advertising and analytics cookies described in Section 2 may be considered “sharing” or “selling” under some interpretations of the CCPA/CPRA. California residents have the right to opt out of any such activity as described in Section 11.


5. Cookies and Similar Technologies

The Site uses cookies, web beacons, pixels, local storage, and similar technologies for the purposes described in Section 2. Cookies fall into the following categories:

Where required by law, we obtain consent for non-strictly-necessary categories through our cookie banner.


6. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, to comply with legal obligations, to resolve disputes, and to enforce agreements. Typical retention periods:

Retention periods may be extended where required by applicable law or where information is subject to a legal hold.


7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, vendor due diligence, and staff training. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization. If we become aware of a security incident affecting your personal information, we will notify you to the extent and in the manner required by applicable law.


8. International Data Transfers

We are based in the United States, and the Site and Services are hosted on infrastructure located in the United States. If you access the Site from outside the United States, your information will be transferred to, processed in, and stored in the United States, where data-protection laws may differ from those of your country. Where required by law, we use appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission for transfers from the EEA, the United Kingdom, or Switzerland.


9. Children’s Privacy

The Site and Services are not directed to children under 13 (or under 16 in the EEA and the United Kingdom). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at the address in Section 14 and we will delete it.


10. Disputes Regarding Data Handling

Any dispute, claim, or controversy arising under or relating to the collection, use, sharing, processing, or retention of data under this Privacy Policy is governed by the dispute-resolution provisions, including the pre-dispute notice requirements, governing law, venue, and class-action waiver, set forth in our Terms of Service (the “Terms of Service”). By using the Site, you agree that any such dispute will proceed in accordance with those provisions and will not be brought as a class, collective, consolidated, or representative action.

Substantiation of Data-Handling Claims

If you believe your data has been collected, used, shared, or processed in violation of this Privacy Policy or applicable law, you must provide us with all of the following as part of your pre-dispute notice under the Terms of Service:

(a) a complete, unedited copy of the data forming the basis of your claim;

(b) a detailed written explanation specifying the nature of the alleged violation, the date(s) on which it occurred, the URLs accessed, the device and browser used, and the IP address(es) used to access the Site if known;

(c) the legal theory or theories on which the claim is based; and

(d) a description of the harm alleged.

This requirement is intended to enable a meaningful investigation of any alleged violation and shall not be construed to limit any rights you have under applicable law.


11. California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following rights regarding your personal information, subject to verification and applicable exceptions:

Categories of personal information collected in the preceding 12 months: identifiers (name, email, IP address); commercial information (products inquired about); internet or other electronic network activity (browsing and interaction data); geolocation data (approximate, derived from IP); professional or employment information (company, job title); inferences drawn from the foregoing.

Categories disclosed for a business purpose: all of the above, to the categories of recipients listed in Section 4.

Sale or sharing: As discussed in Section 4, we do not sell personal information for monetary consideration. Some uses of advertising cookies may constitute “sharing” under California law. You have the right to opt out by adjusting your cookie preferences via the cookie banner, by enabling Global Privacy Control in your browser, or by contacting us at the address in Section 14.

To exercise California rights, email privacy@phosai.dev with the subject “California Privacy Request” and identify the right you wish to exercise. We will verify your identity before responding. You may use an authorized agent; we may require proof of authorization.


12. EEA, UK, and Swiss Residents — GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection (as applicable) applies to our processing of your personal data.

Controller. LowCode Agency LLC, a Wyoming limited liability company, with address at 30 N Gould St, Sheridan, WY 82801, United States, is the controller of personal data collected through the Site.

Legal bases. We process personal data on the following legal bases:

Your rights. Subject to applicable law and exceptions, you have the right to access, correct, delete, restrict, or object to processing of your personal data; to data portability; and to withdraw consent at any time without affecting the lawfulness of prior processing. You may also lodge a complaint with your local data-protection authority.

To exercise GDPR rights, contact us at privacy@phosai.dev. We will respond within one month, with extensions where permitted by law.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated through a notice on the Site for a reasonable period before they take effect, or as otherwise required by law. Your continued use of the Site after a change takes effect constitutes acceptance of the updated Privacy Policy, except where additional consent is required by law.


14. Contact Us

To exercise rights, ask questions, or report privacy concerns, contact us:

LowCode Agency LLC (operating the Phos AI Labs brand) 30 N Gould St Sheridan, WY 82801 United States Email: privacy@phosai.dev