Legal
Privacy Policy
Last updated: January 2025
Overview
GhostRank (“we”, “us”, or “our”) operates the ghostrank.app platform. This policy explains what data we collect, why we collect it, and how it is handled. By using GhostRank, you agree to the practices described here.
Data we collect
We collect data you provide directly and data generated by product usage:
- Account data — name, email address, and billing details provided during registration.
- Workspace data — sites, keywords, articles, and settings you create within the product.
- Usage data — feature interactions, job queue events, and credit ledger entries generated by your activity.
- Integration credentials — API keys or tokens you provide to connect third-party CMS platforms (stored encrypted at rest).
- Communications — emails or support messages you send us.
How we use your data
- Providing, operating, and improving the GhostRank service.
- Processing payments and managing subscription entitlements.
- Sending transactional emails (billing receipts, publish notifications, credit alerts).
- Diagnosing errors through anonymised logging and crash reports.
- Complying with legal obligations.
We do not sell your data, and we do not use your workspace content to train third-party AI models.
Data sharing
We share data only with sub-processors necessary to operate the service (payment processor, hosting provider, transactional email vendor, AI generation API). Sub-processors are listed in our DPA on request. We do not share personal data with advertisers or data brokers.
Data retention
We retain your data for as long as your account is active. On account closure, workspace data is deleted within 30 days, except where retention is required by law (e.g. billing records).
Security
Credentials and sensitive tokens are encrypted at rest. Communication between your browser and our servers is encrypted in transit via TLS. We conduct periodic security reviews and apply patches promptly.
Your rights
You may request access to, correction of, or deletion of your personal data at any time by contacting privacy@ghostrank.app. Residents of the EEA, UK, and California may have additional rights under GDPR, UK GDPR, and CCPA respectively.
Cookies
We use strictly necessary cookies to maintain your authenticated session. No third-party advertising cookies are set. Analytics, if enabled in your region, is anonymised and cookieless.
Changes to this policy
We may update this policy periodically. Material changes will be communicated via email to account holders before they take effect.
Contact
Questions about this policy can be sent to privacy@ghostrank.app.