Privacy Policy — GhostAnswer

This Privacy Policy explains how GhostAnswer (“GhostAnswer,” “we,” “our,” or “the application”) collects, accesses, uses, stores, protects, shares, retains, and deletes user information when users access our website, desktop application, authentication services, artificial intelligence features, subscription features, and any other related functionality.

GhostAnswer is an AI assistance tool that allows users to generate answers, explanations, or content from text that the user provides, copies, selects, or enters into the application. GhostAnswer may operate through a desktop application with an overlay, keyboard shortcuts, a configuration dashboard, user authentication, AI model processing, and subscription features.

This Privacy Policy also specifically describes how GhostAnswer interacts with Google user data when a user signs in with Google or grants permissions through Google OAuth.

By using GhostAnswer, you accept the practices described in this Privacy Policy.

The controller responsible for personal data processing is:

GhostAnswer
Operated by: Ghostanswer
Address: Av. Americas 1254, Country Club, 44610, Guadalajara, Jalisco, Mexico
Privacy email: privacy@ghostanswers.com
Support email: support@ghostanswers.com

3.1 Account data

We may collect:

• Name, if you provide it or if it is received through Google sign-in.
• Email address.
• Unique user identifier.
• Password, only if you create an account with email and password. We do not store your password in plain text; we store a protected hashed version.
• Session or authentication token.
• Plan status: Free, Pro, or another available plan.
• Account creation date.
• Account preferences and settings.

3.2 Google data

If you choose to sign in with Google or authorize Google permissions, GhostAnswer may access, collect, or interact with the following data, depending on the scopes approved by you on the Google consent screen:

Important: GhostAnswer only requests the Google permissions needed to provide visible features requested by the user. We do not request Google permissions for “future use” or for features that have not been implemented.

GhostAnswer uses Google user data only for the following purposes:

1. Authentication: allow the user to sign in or create a GhostAnswer account using their Google account.
2. Account identification: associate the Google email or identifier with a GhostAnswer account.
3. Security: prevent abuse, fraud, unauthorized access, and protect accounts.
4. Support: respond to user requests related to their account.
5. User-requested features: when the user grants additional Google permissions, the data is used only to perform the visible feature the user requested within GhostAnswer.
6. Legal compliance: comply with legal, regulatory, tax, security, or anti-abuse obligations.

GhostAnswer does not use Google user data for advertising, retargeting, data sales, credit scoring, surveillance, third-party commercial profiles, or purposes unrelated to the application’s visible features.

GhostAnswer may use artificial intelligence models to generate answers, summaries, explanations, or assistance based on information that the user chooses to provide or process in the application.

With respect to data obtained through Google APIs:

• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to determine credit eligibility, loans, insurance, or similar decisions.
• We do not use Google user data to create, train, or improve generalized artificial intelligence or machine learning models that benefit other users or third parties.
• We do not allow third parties to use Google user data to train generalized AI/ML models.
• If content is processed through AI, it is processed only to deliver the user-requested feature that is visible within GhostAnswer.
• Any processing by external providers is performed under GhostAnswer’s instructions, for the limited purpose of providing the service requested by the user.

The use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

When you use GhostAnswer, you may manually provide content, for example:

• Text copied to the clipboard.
• Questions.
• Document excerpts.
• Messages.
• Notes.
• Instructions.
• Context written by the user.
• Response preferences.
• Model, temperature, opacity, font size, or response mode settings.

When you activate a response feature, such as a keyboard shortcut or an action inside the application, GhostAnswer may read the text you provided or copied to generate a response. GhostAnswer must not be used to process content that you do not have the right to use or share.

We may collect limited technical data to operate, protect, and improve GhostAnswer, such as:

• IP address.
• Device type.
• Operating system.
• Application version.
• Login events.
• Error events.
• Performance information.
• Feature usage, limits, and plan.
• Security logs.
• Access date and time.
• Data needed to prevent abuse or fraud.

We do not use this data to sell user profiles to third parties.

If you purchase a paid plan, payment processing may be handled by Stripe or another payment provider. We may receive and store:

• Email associated with the payment.
• Stripe customer identifier.
• Subscription status.
• Purchased plan.
• Start, renewal, or cancellation date.
• Tax or billing information when necessary.

GhostAnswer does not store full credit or debit card numbers. That information is processed by Stripe or another authorized payment processor.

GhostAnswer does not sell personal data or Google user data.

We may share data only with the following categories of third parties and for the purposes described:

9.1 Infrastructure providers

We may share data with hosting, database, storage, security, monitoring, or infrastructure providers to operate GhostAnswer.

9.2 Artificial intelligence providers

We may send user-provided text to AI model providers to generate answers, explanations, or content requested by the user. These providers act as processors or service providers and must use the data only to provide the requested service.

9.3 Payment processors

We share necessary data with Stripe or other payment processors to process subscriptions, payments, billing, fraud prevention, and collections management.

9.4 Authentication services

If you use Google Sign-In or Google OAuth, Google processes the authentication and provides us with the data authorized by you on the consent screen.

9.5 Legal compliance and security

We may disclose data if we believe in good faith that it is necessary to:

• Comply with a law, regulation, court order, or valid government request.
• Prevent fraud, abuse, or security issues.
• Protect the rights, property, or safety of GhostAnswer, users, or third parties.
• Investigate violations of our terms.

9.6 Business transfers

If GhostAnswer is involved in a merger, acquisition, financing, reorganization, or sale of assets, data may be transferred as part of that transaction, always subject to reasonable protections and, where applicable, user consent.

GhostAnswer does not sell, rent, or commercialize personal data or Google user data to advertisers, data brokers, advertising platforms, or information resellers.

GhostAnswer does not use Google user data to serve ads, retargeting, personalized advertising, or interest-based advertising.

Our website may use advertising and measurement tools, including the Meta Pixel, to understand visits, ad performance, and whether users interact with download buttons. These tools may process browser or device identifiers, page URLs, referrer information, approximate technical data, and events such as page views or download clicks. We use this information to measure marketing performance and improve our campaigns, not to sell personal data.

We implement reasonable and appropriate measures to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:

• Use of HTTPS/TLS for data transmission.
• Password hashing.
• Access controls.
• Authentication tokens.
• Data separation by user.
• Internal access restrictions.
• Abuse monitoring.
• Reasonable infrastructure security practices.
• Protection of credentials and secrets.
• Review and updating of security measures.

When we store sensitive tokens or credentials, we use reasonable protection measures. If the application accesses restricted Google scopes, we will implement additional measures required by Google, including encryption at rest for OAuth tokens and, where applicable, CASA security assessment.

No system is 100% secure. If we detect a security incident affecting personal data or Google data, we will take reasonable steps to investigate, mitigate, and notify where legally or contractually required.

We retain data only for as long as necessary to provide GhostAnswer, comply with legal obligations, resolve disputes, prevent abuse, and enforce our terms.

General retention criteria:

If we implement history, memory, or persistent storage of prompts/responses, we will clearly indicate this within the product and allow users to delete that data.

You may request deletion of your personal data or account by writing to:

privacy@ghostanswers.com
Suggested subject: “Delete my account and data”

Your request must include the email associated with your account. We may request additional verification to protect the account.

After verifying the request, we will delete or anonymize personal data that is no longer necessary, unless we must retain certain data for legal, tax, accounting, security, fraud prevention, dispute resolution, or terms enforcement purposes.

You can also revoke GhostAnswer’s access to your Google account from your Google account security settings. If you revoke access, GhostAnswer will no longer be able to access the data authorized through Google, although some previously stored data may remain until you request deletion or until its retention period expires.

You can manage or revoke permissions granted to GhostAnswer from your Google account:

1. Open your Google account.
2. Go to Security.
3. Find “Your connections to third-party apps and services.”
4. Select GhostAnswer.
5. Choose to revoke or remove access.

You can also write to privacy@ghostanswers.com to request help with data deletion or unlinking.

Depending on your location, you may have rights over your personal data, including:

• Access your data.
• Correct inaccurate data.
• Delete data.
• Object to certain processing.
• Request portability.
• Withdraw consent.
• Restrict certain uses.
• File a complaint with a data protection authority.

To exercise these rights, contact us at privacy@ghostanswers.com.

If applicable privacy laws grant you additional rights, we will honor those rights as applicable. GhostAnswer does not sell personal information as that term is commonly understood under California privacy laws. If in the future we engage in activities that require additional consent, we will update this Privacy Policy and request consent where required.

GhostAnswer may process data in countries other than yours, including the United States, Mexico, or other countries where our infrastructure, AI, payment, or support providers are located. Where necessary, we will apply reasonable measures to protect the information in accordance with this Privacy Policy and applicable law.

GhostAnswer is not directed to children under 13 or to individuals who do not have the legal age to consent to digital services in their jurisdiction. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us at privacy@ghostanswers.com to request deletion.

We may update this Privacy Policy from time to time. We will publish the updated version at https://www.ghostanswers.com/privacy and indicate the last updated date.

If we materially change the way we use Google data or personal data, we will notify users and, where applicable, request consent before using the data for new purposes.

For questions, privacy requests, or data deletion requests:

GhostAnswer Privacy Team
Email: privacy@ghostanswers.com
Support: support@ghostanswers.com
Website: https://www.ghostanswers.com