Privacy Policy

This Privacy Policy describes how GhostAssist ("we", "us") collects, uses, and protects information when you visit our website (ghostassist.fokastechtips.top) and use the GhostAssist Windows application.

When you purchase: We collect your email address, name, and payment information. Payment processing is handled by Payd — we do not store card numbers or mobile money credentials.

When you use the website: Standard server logs (IP address, browser type, pages visited) for security and uptime monitoring. No analytics cookies are set.

When you use the GhostAssist app: We do not receive your session data, meeting transcripts, or AI conversation history. This data is stored entirely on your local machine.

• To deliver your license file and send transactional emails (purchase confirmation, re-download, activation reset).
• To provide customer support when you contact us.
• To maintain the security of our systems and prevent fraud.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

When you use GhostAssist, your queries are sent to Anthropic's Claude API (and potentially other AI model providers as fallbacks). These calls are made from your machine directly, using our API credentials. Your queries are subject to the respective provider's privacy policies. We do not log or store the content of your AI queries on our servers.

We use the following third-party services to operate the website and license system:

• Supabase — database and authentication hosting for customer accounts and license records.
• Payd — payment processing.
• Resend — transactional email delivery.
• Vercel — website hosting.

We retain your account and purchase records for as long as your account is active, and for a reasonable period afterward for legal and support purposes. You may request deletion by emailing us.

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, email support@ghostassist.fokastechtips.top.

License files are cryptographically signed with a 4096-bit RSA key. Website authentication uses Supabase Auth with email verification and optional TOTP 2FA. We apply HTTPS, HSTS, and CSP headers across all website properties.

The GhostAssist website uses only session cookies required for authentication. No advertising, tracking, or analytics cookies are set. No cookie consent banner is shown because none is required under the cookies we use.

Privacy questions: support@ghostassist.fokastechtips.top