Privacy Policy

    Last updated: March 31, 2026

    1. Introduction

    GhostWriters ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at ghostwriters.pro (the "Service").

    Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

    2. Information We Collect

    We collect the following categories of information:

    Account Information: When you register, we collect your email address and a hashed password. We do not store plain-text passwords.

    Usage Data: We log which AI tools you use, the number of tokens consumed, the model used, and the timestamp of each request. This data is used exclusively for credit limit enforcement and usage analytics.

    Payment Information: Payment processing is handled by Paddle. We do not store your full card number, CVV, or any sensitive payment data. We receive only subscription status and plan information from Paddle.

    Technical Data: We may collect IP addresses, browser type, device identifiers, and referral URLs for security and abuse prevention purposes.

    User-Submitted Content: Text you submit to our AI tools (prompts, documents, messages) is sent to OpenAI's API for processing. We do not store your prompts or AI responses beyond what is displayed in your session or explicitly saved (e.g., chat history).

    3. How We Use Your Information

    We use the information we collect to:

    - Provide, operate, and maintain the Service - Process payments and manage your subscription - Enforce credit limits and fair-use policies - Detect and prevent fraud, abuse, and security incidents - Send transactional emails (account confirmation, payment receipts) - Respond to support requests - Improve and optimize our tools and infrastructure

    We do not use your data to train AI models, sell to third parties, or serve advertising.

    4. Third-Party Services

    We work with the following third-party providers:

    OpenAI: Your text inputs are sent to OpenAI's API to generate AI responses. OpenAI's use of this data is governed by their API privacy policy and usage policies. API data is not used by OpenAI to train models by default.

    Paddle: Our payment processor. Paddle handles all billing and stores payment details on your behalf. Their privacy policy applies to payment data.

    Hosting: Our backend infrastructure is hosted on secure cloud providers. All data is encrypted in transit (TLS 1.2+) and at rest.

    We do not share your personal data with any other third parties without your explicit consent, except as required by law.

    5. Cookies & Tracking

    We use minimal cookies required for the service to function:

    - Session cookies: Used to maintain your authenticated session. - Preference cookies: Used to remember UI preferences (e.g., selected tool options).

    We do not use advertising cookies, cross-site tracking, or third-party analytics services that profile your behaviour for commercial purposes.

    6. Data Retention

    We retain your personal data for as long as your account is active. Specifically:

    - Account and subscription data: Retained until account deletion. - Usage logs (token counts, tool names, timestamps): Retained for up to 12 months for billing verification purposes. - Chat history and saved sessions: Retained until you delete them or close your account.

    Upon account deletion, we permanently erase your data within 30 days, except where required by law to retain it.

    7. Your Rights

    Depending on your location, you may have the following rights:

    - Access: Request a copy of the personal data we hold about you. - Rectification: Request correction of inaccurate data. - Erasure: Request deletion of your account and associated data. - Portability: Request your data in a machine-readable format. - Objection: Object to specific processing activities.

    To exercise any of these rights, email us at support@ghostwriters.pro. We will respond within 30 days.

    8. Security

    We implement reasonable technical and organisational measures to protect your data, including:

    - TLS encryption for all data in transit - Hashed and salted password storage (bcrypt) - JWT-based authentication with expiration - Regular dependency auditing

    No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@ghostwriters.pro.

    9. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service. The "Last Updated" date at the top of this page reflects the most recent revision.

    Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

    10. Contact Us

    For any privacy-related questions or requests, please contact:

    GhostWriters Support Email: support@ghostwriters.pro Website: https://ghostwriters.pro