Trust & Security

This page is maintained by Phusion AI to answer common security and privacy questions about the phusionai.com website. It describes current practices and is editable content, not an independent certification or audit.

Platform & hosting

The Phusion AI website is developed and operated by Phusion AI. It is served over TLS from Vercel's global edge network, with backend data services provided by Supabase (managed PostgreSQL with row-level security enforced on every table). All code changes flow through version control with a reviewed deployment pipeline.

Access & authentication

The public website does not require visitor accounts. Administrative access is restricted to approved Phusion AI staff: accounts can only be created on our company domain, require explicit administrator approval before gaining any access, and are protected by mandatory two-factor authentication. Access is revocable at any time, and data access rules are enforced at the database layer, not just in the application.

Data collection & use

We collect information you voluntarily submit through our forms (such as name, email, phone, company, and message), conversations you choose to have with our AI assistant, and basic analytics about how visitors use the site. We use this information to respond to inquiries, deliver requested information, operate and secure the site, and improve our content. We do not sell personal information and we do not use your data to train third-party AI models. See our Data Usage Policy and Privacy Policy for details.

Subprocessors & integrations

We use a small number of service providers to operate the site and our outreach: Vercel (hosting and content delivery), Supabase (database, authentication, and file storage), Google (reCAPTCHA spam screening and Workspace productivity tools), Atlas and Vapi (the AI voice and chat assistant), Daily (real-time voice connections), and email/CRM tooling for responding to inquiries. These providers process data on our behalf under agreements that restrict their use of the data to providing services to us.

Cookies & analytics

We use a limited set of cookies and similar technologies for essential site functionality and aggregate analytics. You can manage cookies through your browser settings. See our Cookie Policy.

Form submissions are screened with Google reCAPTCHA v3 to block automated spam, subject to the Google Privacy Policy and Terms of Service.

Retention & deletion

We retain information submitted through the site only as long as needed for the purpose it was collected, to maintain business records, or as required by law. AI assistant recordings and transcripts are kept for 90 days. You can request access, correction, or deletion of your information by contacting us.

Privacy requests

To submit a privacy request or ask a question about how we handle your data, email info@phusionai.com.

Security contact & vulnerability reporting

If you believe you have found a security issue affecting the Phusion AI website, please report it to info@phusionai.com with steps to reproduce. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and respond.

Compliance

Phusion AI does not claim independent certification (such as SOC 2, ISO 27001, HIPAA, or PCI) for this website. If your organization requires specific compliance documentation in connection with engaging our services, contact us and we will respond with what we can share under our engagement agreements.

Contact

Phusion AI · 1334 Timberlane Road, Tallahassee, FL 32312 · info@phusionai.com