Subprocessors
Last updated
The third parties that process data on our behalf so Ghostly247 can run. Each handles data under its own terms, and we share the minimum each one needs.
| Provider | What it receives | Why |
|---|---|---|
| OpenAI | Post text you ask for a reply to, your tone or voice settings, and drafts submitted for moderation. | Generating AI replies, quotes and drafted posts, and screening them before they reach you. |
| Stripe | Your email address, payment method and subscription state. Card numbers go to Stripe directly and never touch our servers. | Taking subscription payments and running the billing portal. |
| Resend | Your email address and the contents of transactional messages. | Sending password-reset codes and account email. |
| Your basic Google profile — name and email — only if you choose Sign in with Google. | Optional single sign-on. | |
| MongoDB Atlas | Your account record, settings, action logs, drafts and voice profile. | The managed database everything is stored in. |
| Railway | All server traffic in transit, and the application logs it produces. | Hosting the API. |
What none of them get
No subprocessor receives your X password or session cookie, because we never hold either. The extension acts inside your own browser, and no server in this list can sign in to X as you.
Changes to this list
We update this page when a provider is added or removed, and the “last updated” date reflects the most recent change. If you would like advance notice of additions, email support@ghostly247.com and we will add you to the notification list.
