Logo

GhostGPT Privacy Policy

Last Updated: August 8, 2026

At GhostGPT we are committed to protecting your privacy and ensuring the security of your personal information. Our policy is to collect and store only the minimum information necessary to provide our services.

This Privacy Policy describes our practices regarding information we collect from or about you when you use our website, platform, services, and features, including all associated software applications (collectively, "Services").

Scope

This Privacy Policy applies to personal information collected through:

  • Our website and any webpages that link to this Privacy Policy;
  • Our applications, features, and services (including APIs) that link to this Privacy Policy;
  • Interactions with third-party sites or services where our Services are embedded and link to this Privacy Policy.

Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Service.

Personal information we collect

We collect very limited personal information when you use our Services, communicate with us, or create an account. We do not sell personal information and we do not use personal information for targeted advertising. Our commitment is to never sell or share your information for advertising purposes and not to use any shared information to infer characteristics about users.

Account Information: If you choose to create an account, we collect your email address, and may also store your name, profile image, a hashed version of your password, passkey (WebAuthn) credential handles, and two-factor authentication settings. This information is necessary to provide login, authentication, and account security features. You can also use our services without creating an account by using an anonymous session. We support multiple authentication methods, including email and password, Google OAuth, GitHub OAuth, and WebAuthn/passkeys. When you sign in via Google or GitHub, we receive limited profile information (such as your name, email, and profile image) from those providers in accordance with their privacy policies.

Payment Information: When you make payments, we use third-party payment processors. For credit or debit card payments we use Stripe as our payment processor. While we never see or store your credit card data, Stripe collects and stores certain personal information related to your payment transactions. This information is subject to Stripe's privacy policy and data retention practices and we are unable to remove this ourselves. You can request deletion of your personal information directly from Stripe by visiting their data deletion request page. For cryptocurrency or other payment methods, we may use processors such as BTCPay Server, Nanswap, or BoomFi; these providers may collect and process transaction details (such as wallet addresses, transaction identifiers, and amounts) under their own privacy policies. We receive limited transaction metadata to credit your account.

Communication Information: If you communicate with us, we may collect your name, contact information, and the contents of your messages to the extent that you choose to share these details with us.

Social Media Information: When you interact with our pages on third-party sites like X, Telegram, and Discord, we may collect information you choose to provide, such as your contact details.

How we use personal information

We may use Personal Information explicitly provided to us for the following purposes:

  • To process your payments and update your account balance;
  • To communicate with you about our Services and events;
  • To review, route, and respond to bug reports and suggestions you submit;
  • To comply with legal obligations and protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

Disclosure of personal information

We may provide your Personal Information to third parties in the following limited circumstances:

Service Providers: When you submit a prompt, it is passed directly to the relevant service provider (such as OpenAI, Anthropic, Sakana AI, or another LLM provider). We do not store prompt or conversation content ourselves, but these service providers may store and process this information according to their own privacy policies. If you provide personal information within the prompts that you send, these service providers will have access to this personal information. We enforce a minimum-retention and maximum-deletion posture across all model providers we onboard, including applying the strictest retention and deletion settings each provider makes available to us. However, providers operate their own infrastructure and may still retain data under their own legal obligations and privacy policies. For credit card processing, we use Stripe, which collects and processes payment information according to their own privacy policy.

Messaging & Notification Tools: To help our team respond quickly, bug reports and suggestions you submit through our website may be forwarded to internal messaging services (such as Telegram or Discord) and may include the content you choose to provide.

Important Note on Provider Data Policies: While we only send prompts to the providers that we use, without sending along your IP or any other identifying personal information other than that which you yourself put into the prompt, keep in mind that our providers may still collect or store these prompts under their own data retention practices. We require minimum retention and maximum deletion controls across all providers we use, but we cannot independently guarantee provider-side non-retention beyond each provider's stated commitments.

OpenAI Data Retention Update: Following a recent court order, OpenAI has updated their privacy policy to state that they store all conversations and prompts indefinitely. This means that any prompts you send to OpenAI models (such as GPT-4, GPT-4o, GPT-3.5, etc.) through our service will be permanently retained by OpenAI. Please be aware of this when using OpenAI models and avoid including sensitive or personal information in your prompts.

Legal Requirements: We may share limited Personal Information if required by law or to protect our rights and the safety of our users.

Exercise caution and avoid submitting personal or sensitive information in your prompts, especially when using models from providers with indefinite data retention policies.

Aggregated and De-identified Information

We may process information in aggregated or de-identified form so it cannot reasonably be used to identify you. We use this information to:

  • Analyze and improve the performance and reliability of our Services;
  • Understand usage trends and feature preferences;
  • Publish or share high-level statistics about our Services.

Your rights

Depending on location, individuals may have certain statutory rights in relation to their Personal Information. For example, you may have the right to:

  • Access your Personal Information and information relating to how it is processed.
  • Delete your Personal Information from our records.
  • Rectify or update your Personal Information.
  • Transfer your Personal Information to a third party (right to data portability).
  • Restrict how we process your Personal Information.
  • Withdraw your consent where we rely on consent as the legal basis for processing at any time.
  • Object to how we process your Personal Information.
  • Lodge a complaint with your local data protection authority.

Children

If you are under 18, you must have your parent or legal guardian's permission to use our Services.

Security and Retention

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your Personal Information. Our servers, databases, and any storage of media or user-uploaded content run on our own infrastructure, which we operate and secure ourselves rather than handing your data to a third-party cloud storage provider. However, no Internet transmission is ever fully secure. We retain Personal Information only for as long as necessary to provide our Services or comply with legal obligations, and because we do not store chats, there is no conversation content for us to retain.

The safety and security of your information also depends on you. If you use a password to access any part of our Services, you are responsible for keeping it confidential and for not sharing it with anyone.

Third-Party Services

Our Services may link to or integrate with third-party websites, applications, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review the applicable privacy policies of any third-party services you use.

Web Search & Browsing Providers: Linkup Privacy Policy, Tavily Privacy Policy, Exa Privacy Policy, Kagi Privacy Policy, Brave Search Privacy Notice, Perplexity Privacy Policy, Valyu Privacy Policy.

Audio & Media Generation: Some audio, image, and video generation features use third-party providers (such as FAL AI, Runware, WaveSpeed, and Replicate) to process prompts or media inputs and return outputs. Data shared with these providers is subject to their respective privacy policies: FAL AI Privacy Policy, Runware Privacy Policy, WaveSpeed Privacy Policy, Replicate Privacy Policy.

Content Extraction & Transcripts: Firecrawl Privacy Policy, YouTube Transcript Privacy Policy.

AI Detection & Plagiarism Checks: Pangram Privacy Policy.

PII Redaction: Grepture Privacy Policy, Grepture Terms of Service, Grepture Subprocessors, and Grepture Impressum.

Payment Providers: Stripe Privacy Policy, BTCPay Server Privacy Policy, Nanswap Privacy Policy, BoomFi Privacy Policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on this page and update the "Last Updated" date above. If we make material changes, we will provide notice via email to account holders (if we have a valid email address on file) before the changes take effect.

How to contact us

If you have any questions or concerns about this Privacy Policy, please contact our GhostGPT Support Team at [email protected].

List of AI Model Providers Terms

AI Model Provider Terms: When using our Services, depending on which model is used, you agree to abide by the terms of the respective AI model providers: