This policy explains what personal data GhostVerb collects, why, and the choices you have. We collect as little as we need to run the Service.
Data we collect
- Account data: name, email address, a hashed password (Argon2id) and, if enabled, an encrypted two-factor secret.
- Content: text and documents you submit for rewriting and the rewritten result, encrypted while stored and wiped after 30 days.
- Payments: the amount and date of each top-up and your credit balance. Never any of your text.
- Security logs: IP address, browser user-agent and timestamps for sign-ins and security-relevant account changes.
- Messages: anything you send through the contact form.
How we use it
- To provide the Service: process rewrites, maintain your history and balance, and send transactional email (verification, password reset, receipts).
- To keep accounts secure and prevent abuse (rate limiting, fraud prevention, audit logs).
- To comply with legal obligations such as tax records.
We do not sell your data, show ads, or use your content to train AI models. Authorised staff may view your text or documents only to provide support, fix problems or investigate abuse, and every such view is logged.
Processors
- A cloud computing provider that runs our private rewriting model. Your text is processed to produce the rewrite and not kept by them.
- Payment processors (cryptocurrency payments are recorded on public blockchains by design).
- Our hosting and email delivery providers.
Retention
- Your text, documents and rewrites: kept for 30 days so you can download them, then wiped for good. You can delete them yourself at any time.
- Account data: until you delete your account.
- Payments: linked to your account while you have one, so we can show your balance. When you delete your account, only anonymous records (amount and date) are kept, as the law requires for tax. They never include your text.
- Security logs: up to 12 months; anonymised when you delete your account.
Your rights
Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct, export or delete your data, and to object to or restrict processing. Most of this you can do yourself in the dashboard; for anything else, contact us. You may also lodge a complaint with your data protection authority.
Security
See our Security page for details on encryption, two-factor authentication and other safeguards.
Cookies
We only use strictly necessary cookies. See the Cookie Policy.
Contact
GhostVerb · [email protected]