Privacy policy

1. Consent

By using Ghost Social, you consent to the collection, use, and sharing of your information as described here. You may withdraw consent at any time where permitted by law by limiting use of the Platform or contacting us.

2. Who we are

Ghost Social is the data controller responsible for your information. Questions may be sent to privacy@ghostsocial.ai.

3. Information we collect

We collect personal information only after you provide clear, affirmative consent. Participation in Ghost is always opt-in. No user is enrolled or profiled by default.

3.1 Information you provide

Basic info:

Name, email, location, social media profiles

Profile details:

Professional, demographic, and preference data

Organization info:

If you represent a brand or host an organization, your organization’s name, website, category, the offering you provide sponsors, and materials you upload (pitch decks, memos, briefs)

Moment & event info:

Details of the moments you create or sponsor — title, format, timing, location, audience description, attendee count ranges, deal terms, and confirmed sponsors

Conversations:

Messages and content shared with Ghost or other Users

Account credentials:

Login and authentication details

Feedback:

Support requests or survey responses

Users are instructed not to provide sensitive personal information, including but not limited to Social Security numbers, financial account information, or protected health information. Ghost does not require or intentionally collect such data.

3.2 Information we generate

Usage data:

Features used, time spent, and navigation patterns

Device data:

IP, device type, browser, OS, identifiers

Log data:

Sessions, clicks, entry/exit pages

AI interaction data:

Chats and text exchanges with Ghost, and optional voice interviews. For voice interviews, no human listens to your audio and the recording is not retained — we store only the transcript and its summary

3.3 Guest lists uploaded by hosts

Hosts may upload a list of confirmed guests for a moment. These lists can include other people’s names and contact details. If you upload a guest list, you confirm you have the right and any necessary consent to share that information with Ghost. We process guest lists on the host’s behalf, solely to run that moment.

A guest list is never visible to sponsors by default. It is shared with a sponsor only after a deal is finalized, and only if guest list access was explicitly agreed as a deliverable of that deal. Until both conditions are met, sponsors cannot see it — and hosts control whether guest list access is offered at all.

3.4 Information from third parties

Linked accounts:

Social media or professional networks (with permission)

Public sources:

Information available online for verification

Other Users:

Reports, flags, or feedback about you

Service providers:

Partners that help operate the Platform

4. How we use information

We use your information to:

• Create Accounts and Profiles
• Facilitate Matches through the Matching Engine
• Match moments with relevant sponsors and publish sponsorship briefs to potential sponsors
• Send Notifications, updates, and invitations
• Improve features and algorithms
• Prevent fraud, ensure safety, and enforce policies
• Provide support and respond to questions
• Comply with legal requirements
• Send marketing content (with consent)

For event-based experiences, your information is used strictly to facilitate introductions within that specific event. We retain your information to support the event and any continued use you explicitly opt into. We do not use your information beyond the original event unless you opt in to continued use. You may request deletion of your data at any time.

5. Sharing information

5.1 With members, hosts & sponsors

Limited parts of your Profile may be shared with your Matches and community hosts.

When a host and a sponsor are matched, the sponsor sees a moment’s brief — the audience description and attendee count ranges — but not individual guest identities or contact details. Business contact details for the host and sponsor are revealed to each other only once a deal is reached. A moment’s guest list is shared with a sponsor only after a deal is finalized, and only if guest list access was agreed as a deliverable of that deal.

5.2 With service providers

Trusted providers help us run the Platform, including:

• Technology partners (e.g., OpenAI, Replit, Vapi, Pipedream)
• Hosting providers (e.g., AWS, Google Cloud)
• Analytics and communication vendors
• Security vendors

We do not share personal data with third parties except as necessary to operate the service, and only under strict contractual and security obligations.

5.3 Legal disclosures

We may disclose data to comply with law, protect rights or safety, investigate violations, or as part of a merger or acquisition.

6. Data retention & security

6.1 Retention

Active Accounts:

Data kept while Account is active and up to 2 years after last activity

Deleted Accounts:

Most data deleted within 30 days; some retained longer for legal or security purposes

Communications:

Retained up to 2 years

Financial records:

Retained as required by law

6.2 Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls based on least privilege, and secure data transfer protocols. If a breach occurs, we will notify affected Users within 72 hours where required.

7. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your data
• Restrict or object to processing
• Request a copy of your data in portable format
• Manage communication preferences
• Delete your Account

You may opt out at any time and request deletion of your data by contacting privacy@ghostsocial.ai. We will process such requests promptly and may need to verify your identity before processing.

8. International transfers

Your data may be processed outside your country, including in the U.S. We use safeguards such as Standard Contractual Clauses, adequacy decisions, and additional security measures.

9. Children’s privacy

Ghost Social is for Users 18+. We do not knowingly collect information from minors. If discovered, we will delete it promptly.

10. State-specific rights

10.1 California (CCPA/CPRA)

Residents may request:

• Access to collected data
• Deletion of personal data
• Correction of inaccuracies
• Opt-out of data sharing (we do not sell data)
• Limit use of sensitive data

We will not discriminate against Users who exercise these rights.

10.2 Other states

Other state laws may grant additional privacy rights. Contact us for details.

11. Changes to this policy

We may update this Policy from time to time. If changes are significant, we will notify you and give 30 days’ notice before they take effect.

12. Contact us

For questions, requests, or concerns: privacy@ghostsocial.ai