Privacy Policy
This Privacy Policy explains how GhostlineAI ("we," "us," "our") collects, uses, and protects information when you use our website, desktop application, and related services (together, the "Service").
1. Information We Collect
Account information. When you sign up, we collect your email address and a password (stored as a salted, one-way hash — we never store or can recover your actual password). We generate a unique license key for your account, which your desktop app uses to authenticate with our servers.
Payment information. Payments are processed entirely by PayPal (and, where enabled, Google Pay via PayPal). We never receive or store your card number, PayPal password, or full billing details — only a subscription/order identifier and confirmation that a payment was completed.
Call content. The desktop app transcribes audio from your microphone and system audio during a call, and sends the transcript text (not audio) to our servers to generate suggested responses via Anthropic's Claude API. Transcripts are used only to generate that response and are not stored permanently on our servers beyond what's needed to serve the request.
Usage data. We log the number of AI suggestion calls your account makes, the tokens used, and timestamps, to enforce fair-use limits and to operate the Service. We also store a device identifier so a license can only be active on one device at a time.
2. How We Use Your Information
- To create and authenticate your account
- To process payments and manage your subscription or access period
- To generate AI suggestions during your calls
- To enforce usage limits and prevent abuse
- To provide customer support
- To send essential account and billing communications
3. Third-Party Services
We rely on the following third parties to operate the Service, each of which processes a limited slice of your data under their own privacy terms:
- PayPal — payment processing and subscription billing
- Anthropic (Claude API) — generates the AI suggestions from your call transcript text
- Supabase — hosts our database and backend functions
4. Data Retention
We retain your account information for as long as your account is active. Call transcripts are processed transiently to generate a suggestion and are not retained beyond that. You may request deletion of your account and associated data at any time by contacting us.
5. Data Security
Passwords are stored using PBKDF2 password hashing, never in plain text. All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Access to our database is restricted to authenticated backend services only.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time. To make a request, contact us using the details below.
7. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
9. Contact Us
GhostlineAI (ghostlineai.com)
+92 333 4029849
Email: support@ghostlineai.com