Privacy policy
Last updated
The short version
What we collect
- Account details — your name, email address and a securely hashed password. If you sign in with Google we receive your basic Google profile (name and email) only.
- Activity data — a log of the actions the extension took for you (likes, replies, follows, bookmarks, reposts, quotes) with timestamps and the target post or handle, plus your settings and relevance keywords.
- Voice profile — if you train one, a short written summary of your writing style. The posts it was derived from are analysed in memory and discarded; only the summary is stored, and you can read and delete it in Settings.
- Billing data — if you subscribe, Stripe handles your card details. We store only your Stripe customer and subscription identifiers and the status of that subscription. We never see or store a full card number.
What we never collect
We do not collect, see or store your X password or login credentials, and we would refuse them if offered. There is no server anywhere that logs into X as you. We also do not read your direct messages, and post text sent to generate a reply is not retained beyond that request.
How we use it
- To provide, operate and maintain the service.
- To generate AI-assisted replies and run content moderation.
- To process subscriptions and payments.
- To send transactional email such as password-reset codes.
- To secure accounts and prevent abuse.
We do not sell your personal data, and we do not use it to train any model of our own.
Who else processes it
We share the minimum necessary with the infrastructure providers that run Ghostly247. Each is named, with what it receives and why, on the subprocessors page.
Storage and security
Data is held on managed cloud infrastructure with industry-standard protections, including hashed passwords and encrypted connections in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Local storage in your browser
The extension keeps your settings, session token and pending action queue in Chrome’s local extension storage on your own machine. Uninstalling the extension, or clearing its data, removes that copy.
Retention and deletion
We keep your data while your account is active. You can delete your account at any time from the extension, which permanently removes your profile, action logs, drafts and settings. Step-by-step instructions, and what survives deletion for legal reasons, are on the delete your data page.
Children
Ghostly247 is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes to this policy
We may update this policy. Material changes are reflected in the “last updated” date at the top, and continued use after a change means you accept it.
Contact
Questions about this policy? Email support@ghostly247.com. See also our terms of service.
