Phasis Legal
The terms, privacy practices, and software notices for Phasis — the Agents, Adept, World API, and Workspace services operated by Suasiv Inc. Last updated July 5, 2026.
What we process
Account and identity data (name, email, organization, authentication, membership records); API-key metadata (identifiers, scopes, status, last-used — never secret key material after creation); usage and metering data (per-call events used for quotas, usage visibility, and billing when enabled); billing data (plan, invoice state, identifiers — card data is handled by Stripe, not stored by us); Customer Content (prompts, inputs, files, code, evaluation data, run traces, working sets, evidence references, and outputs); support and security data; and device and connection data (IP address, user-agent, and similar technical data) used for security, rate-limiting, and abuse prevention.
How we use data
To provide, operate, secure, and improve the services for you; to meter usage and enforce quotas and rate limits (and bill accurately when enabled); to detect, prevent, and respond to abuse and security incidents; to provide support and communicate service and account information; and to comply with law.
Tenant isolation and model training
Customer Content is private to your tenant. A one-directional boundary keeps your traces, prompts, answers, files, evaluations, and private deltas from becoming shared world content by default. We do not use your Customer Content to train shared or third-party models except with your explicit opt-in or direction. Shared Phasis world intelligence is built from Phasis’s own sources and gated acquisition, not from customer tenant data; at launch there is no opt-in path that promotes customer data into shared world content.
Subprocessors
Phasis relies on third-party subprocessors to operate the services: Cloudflare (edge, World API hosting, network security, storage), Render (backend application hosting), Vercel (frontend/console hosting), Supabase (application database and authentication), Stripe (payment processing and billing), RunPod (GPU compute for house model inference), and Daytona (managed cloud sandboxes for agent code execution). We maintain a current subprocessor list and provide a mechanism to be notified of changes.
Sharing, retention, and security
We do not sell your data. We share it only with the subprocessors above to operate the services, when required by law, to protect rights and safety, or in a business transfer. We retain account, usage, and billing records while your account is active and as needed for legal, tax, and audit purposes; Customer Content is retained per your configuration and deleted or returned on request; operational and security logs are kept as long as needed for security, audit, and legal purposes. We use administrative, technical, and physical safeguards including access controls, encryption in transit, and tenant isolation.
Your rights, transfers, and children
Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data. Account owners can manage members and keys in the console; to exercise rights or request export or deletion, contact us. Data may be processed in the United States and other countries where we or our subprocessors operate. The services are not directed to children under 16, and we do not knowingly collect their data.