Privacy Policy

GhostProof ("we", "us", or "our") operates the GhostProof web application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

By using GhostProof, you agree to the collection and use of information in accordance with this policy. If you disagree with any part, please discontinue use of the Service.

We collect the following types of information:

• Account information: Email address, name, and password (or OAuth tokens if you sign in via Google).
• Profile information: Job title, location, LinkedIn URL, bio, and resume text that you choose to provide.
• Job application data: Company names, job titles, application status, notes, and any other details you enter into the app.
• Payment information: Billing details are handled entirely by Paddle. We do not store your credit card numbers or payment credentials.
• Usage data: Log data such as IP address, browser type, pages visited, and actions taken within the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Generate AI-powered content (follow-up emails, interview prep, etc.) using your job application data via the Anthropic Claude API.
• Process subscription payments and manage billing through Paddle.
• Send transactional emails such as password resets or account notifications.
• Monitor and analyze usage to improve the Service.
• Detect and prevent fraud or abuse.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Your data is stored in Supabase-hosted PostgreSQL databases located in secure data centers. We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS).
• Row-level security policies so users can only access their own data.
• Secure authentication via Supabase Auth with hashed passwords.

While we take reasonable measures to protect your information, no method of transmission over the internet is 100% secure.

We use the following third-party services to operate GhostProof:

• Supabase — database, authentication, and file storage.
• Anthropic (Claude API) — AI content generation. Your job data may be sent to Anthropic to generate responses. Anthropic does not use this data to train their models by default.
• Paddle — subscription payments and billing.
• Vercel — application hosting.
• Vercel Analytics — anonymous usage analytics.

Each third-party provider has their own privacy policy governing their use of your data.

GhostProof uses cookies and similar tracking technologies to maintain your authentication session. We do not use advertising or tracking cookies. You can instruct your browser to refuse cookies, but this may prevent you from using certain features of the Service.

We retain your data for as long as your account is active. If you delete your account, your personal data and job application records will be permanently deleted from our systems within 30 days. Some anonymised aggregate data may be retained for analytics purposes.

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing activities.
• Data portability (export your data).

To exercise any of these rights, contact us at hello@getghostproof.com.

GhostProof is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us at: hello@getghostproof.com