Privacy Policy

The short version

Screen captures are only taken when you ask GhostCode to solve something.
We use your data to run GhostCode, never to sell it or to show you ads.
Captures are deleted as soon as your answer is delivered, and are never used to train AI models.
You can ask us to show you or delete your data at any time.

This Privacy Policy explains how GhostCode ("we", "us") collects, uses, and shares information when you use the GhostCode desktop app, the website at ghostcode.pro, and related services (the "Service").

1. What we collect

Information you give us

Account details: your email address and login information.
Support messages: whatever you include when you email us.

Information the app collects when you use it

Screen captures: an image of your screen, taken only when you trigger a capture. GhostCode does not record your screen continuously or in the background.
Questions and follow-ups you type into GhostCode, and the answers it generates.
Usage data: credits used, features used, and the times you used them.
Device and diagnostic data: operating system, app version, and crash or error reports.

Payment information

Payments are handled by Stripe. We never see or store your full card number. We receive your plan, payment status, billing country, and the last four digits of your card.

The app does not log your keystrokes or clicks, and does not read files on your computer.

2. How we use it

To provide GhostCode: read your captured problem, generate answers, and show them to you.
To run your account, process payments, and track credits.
To fix bugs, prevent abuse and fraud, and keep the Service secure.
To answer your support requests.
To send you important messages about your account, billing, or changes to our terms. We'll only send marketing emails if you opt in, and you can unsubscribe at any time.
To meet our legal obligations.

We do not sell your personal information, share it for targeted advertising, or use your screen captures to train AI models.

We share information only with service providers that help us run GhostCode, and only as much as they need:

AI model provider: Anthropic, which processes your captures and questions to generate answers. Under our agreement with Anthropic, this data is not used to train its models.
Payment processing: Stripe.
Hosting and infrastructure: Heroku (app servers) and Supabase (database and authentication).
Email and support tools we use to talk to you.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger or acquisition. In that case, this policy will continue to apply to your information.

4. How long we keep it

Screen captures, questions, and answers: deleted immediately once your answer is delivered. We don't store them.
Account and usage data: kept while your account is open, and deleted immediately when you delete your account.
Payment records: kept as long as tax and accounting laws require.

5. Security

Data sent between the app and our servers is encrypted in transit, and access to personal data is limited to people who need it. No system is perfectly secure, but if a breach affects your information we'll notify you as the law requires.

6. Your rights & choices

Depending on where you live, including the EU, the UK, and California, you may have the right to:

see the personal information we hold about you and get a copy;
correct information that's wrong;
have your information deleted;
object to or limit certain uses of your information;
withdraw consent where we rely on it.

To use any of these rights, email [email protected]. We'll respond within 30 days, and we'll never treat you differently for using your rights. You can also complain to your local data-protection authority. You can delete your account at any time, which deletes your data immediately (except payment records we're legally required to keep).

If you're in the EU or UK, we process your data to perform our contract with you (running the Service), for our legitimate interests (security and improving the Service), to meet legal obligations, and with your consent for optional marketing.

7. Website & cookies

ghostcode.pro does not use advertising or tracking cookies. The site loads fonts from Google Fonts, which means your browser sends your IP address to Google when you visit.

8. International transfers

We and our service providers may process your information in countries other than your own, including the United States. When we move data out of the EU or UK, we use legal safeguards such as Standard Contractual Clauses.

9. Children

GhostCode is not for anyone under 16, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.

10. Changes to this policy

If we update this policy, we'll change the date at the top of this page. For significant changes, we'll also let you know by email or in the app before they take effect.

11. Contact

Questions about your privacy? Email [email protected].