Who we are
Ghost Text is operated by DSean Hall ("we", "us"), a sole proprietor trading as Ghost Text. We act as the data controller for personal data processed through the Ghost Text app and website. Contact: ghosttext.app@gmail.com.
Data we collect
- Device identifier — a random ID stored in your browser to recognize your device across sessions.
- Usage data — daily read counts, feature usage, error logs, IP address, and basic device/browser info.
- Conversation content — text and screenshots you submit are sent to our AI provider to generate suggestions. We do not persist your conversation content on our servers.
- Subscription & billing data — if you purchase Pro, your email, subscription status, and billing period are stored to grant entitlement. Payment details (card numbers etc.) are collected and stored by Paddle, not us.
- Support messages — anything you send to ghosttext.app@gmail.com.
Why we use it
- Providing the service (contract performance).
- Granting and managing Pro entitlement (contract performance).
- Preventing fraud, abuse, and securing the service (legitimate interests).
- Product improvement and aggregated analytics (legitimate interests).
- Responding to your support requests (legitimate interests).
- Sending transactional emails such as Pro restore links and receipts (contract performance).
Who we share data with
- Paddle.com Market Limited — our Merchant of Record. Paddle handles all payments, billing, tax, refunds, and invoicing. Paddle is an independent controller for that data.
- Supabase — database and authentication infrastructure (US/EU).
- Cloudflare — hosting and edge compute.
- AI providers (Google, OpenAI) — process the text/screenshots you submit to generate suggestions.
- Email delivery providers — to send transactional emails.
- Authorities — only where required by law.
International transfers
Some of our providers are located outside the EEA/UK. When data is transferred, we rely on Standard Contractual Clauses or equivalent adequacy mechanisms.
Retention
Device identifiers and usage counters are kept for up to 24 months. Subscription records are kept for the duration of your subscription plus 7 years for tax and accounting purposes (handled by Paddle). Conversation content is not retained after processing.
Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. EEA/UK users may also lodge a complaint with their local supervisory authority. To exercise any right, email ghosttext.app@gmail.com. We respond within one month.
Security
We use industry-standard technical and organisational measures including TLS in transit, encryption at rest, access controls, and least-privilege service credentials.
Cookies
We use only essential storage (a device identifier in localStorage) required for the app to function. We do not use third-party advertising or tracking cookies.
Changes
We may update this notice from time to time. Material changes will be highlighted in the app.