Privacy Policy

Information you provide

• Account details: name, email address, password (stored by our authentication provider in hashed form), profile photo, and preferences.
• Purchases and memberships: products bought, license tier, membership status, order history, and Ghost Credit and Ghost AI credit balances.
• Plugin Studio and presets: plugin settings, presets, uploaded images and their alt text, custom code, branding colors and fonts, and install codes.
• Workspaces and invitations: workspace names, members, roles, and the email addresses you invite.
• Ghost AI: the prompts, code, and images you submit and the outputs returned.
• Communications: support requests, beta feedback, newsletter sign-ups, reviews, and partner or affiliate applications.

Information collected automatically

• Technical data such as IP address, browser and device type, pages visited, and referring site, recorded in server logs and aggregate traffic statistics by our hosting provider.
• Approximate location (country or region) inferred from IP address. We do not collect precise GPS location.
• Affiliate referral data: if you arrive through a partner link, which partner referred you and when.
• Installed product requests: when an installed Ghost product loads on a website, that website’s visitors’ browsers request our hosted files, and standard request data (such as IP address, page address, and browser) reaches our servers. We use this to deliver the files and check the install is authorized.

Cookies and similar storage are described in our Cookie Policy, which is the authoritative description of those technologies.

How we use information

• To provide the Services: accounts, purchases, licensing, Plugin Studio, Ghost AI, workspaces, and hosted product files.
• To process payments, prevent fraud, and enforce licenses.
• To send account notifications, such as receipts, invitations, and security messages, and newsletters you choose to receive.
• To credit partners for referrals.
• To provide support and improve the Services.
• To comply with legal obligations.

Service providers

We share information with providers that process it for us to run the Services:

• Lovable: website hosting, database, file storage, authentication, and email delivery.
• Stripe: payment processing, subscriptions, and the billing portal. Card details are entered directly with Stripe; we receive limited details such as card brand, last four digits, and payment status.
• AI model providers (currently Google Gemini and OpenAI models, accessed through Lovable’s AI service): process Ghost AI prompts, code, and images to generate responses.
• Google Fonts: loads website fonts, which shares your IP address with Google.
• PayPal: used to pay partner and affiliate earnings, if you are a partner.

We have not verified whether AI providers use inputs or outputs to train their models under the terms that apply to our account, so we do not make a “no training” promise. Avoid submitting sensitive personal information to Ghost AI.

Other sharing

• With workspace members you invite, who can see shared presets, branding, and member names and emails.
• With partners, who see aggregate referral and sales results; we do not give partners your payment details.
• If required by law, to protect rights and safety, or as part of a business transfer such as a merger or sale.

Sale, sharing, and targeted advertising

We do not sell personal information for money, and we do not use cookies or tracking for cross-site targeted advertising. Affiliate attribution records which partner referred you so we can pay them; it is not used to show you ads.

Global Privacy Control and Do Not Track

Global Privacy Control (GPC) is a browser signal that some laws treat as a request to opt out of sale or sharing. Because we do not sell or share personal information for targeted advertising, there is nothing additional for GPC to switch off. Do Not Track is an older browser setting with no common standard; we do not respond to it differently.

Retention and deletion

We keep account information while your account exists. Purchase and license records are kept as long as needed to honor licenses and meet tax and accounting obligations.

When you delete your account from your dashboard, the account is disabled and sign-in is blocked, and your stored records are kept rather than erased. We may keep information we are required to keep by law, needed to resolve disputes or prevent fraud, or held in backups until those backups are overwritten in the normal course.

Security

We use access controls, encrypted connections, and providers with industry security practices. No system is completely secure, and we cannot guarantee the security of information.

International processing

Our providers may process information in the United States and other countries where they operate.

Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information.

Your choices and rights

Account and email

You can update your profile in your account and unsubscribe from newsletters using the link in those emails.

Access and correction

You can ask us to provide or correct personal information we hold about you.

Additional rights by location

Depending on where you live, you may have further rights, such as data portability, objection, or appeal of a decision on your request. We will respond as required by laws that apply to us. We will not discriminate against you for making a request.

How to make a request

Submit requests through our help page at https://ghostplugins.com/help. We may ask you to confirm your identity, for example from the email on your account. An authorized agent may submit a request with proof of authorization.

Changes to this policy

We will post updates here with a new effective date and notify account holders of material changes before they take effect.

Contact

The Ghost Company, LLC
https://ghostplugins.com/help