Privacy Policy

1. Introduction

Welcome to GhostWritr.AI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered book writing assistant service (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Name, email address, password, and profile details
• Payment Information: Billing address and payment method details (processed securely through third-party payment processors)
• Content Data: Book projects, chapters, sections, outlines, and all content you create using our Service
• Communication Data: Messages, feedback, and support requests you send to us
• API Keys: Optional AI provider API keys you choose to store in your account

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, error reports, and system events
• Analytics Data: Performance metrics and usage statistics

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Service

3. How We Use Your Information

We use the collected information for various purposes:

• Provide the Service: Process your content, generate AI-assisted writing, and deliver core functionality
• Account Management: Create and maintain your account, process payments, and manage subscriptions
• Communication: Send service updates, respond to inquiries, and provide customer support
• Improvement: Analyze usage patterns to improve our Service and develop new features
• AI Model Training: Use anonymized and aggregated content to improve our AI models (you can opt out)
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Marketing: Send promotional communications (you can opt out at any time)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

• Cloud Hosting: Supabase for database and authentication services
• Payment Processing: Stripe for secure payment transactions
• AI Providers: Google (Gemini), Anthropic (Claude), OpenAI for content generation
• Email Services: For transactional and marketing emails
• Analytics: To understand Service usage and performance

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as court orders, subpoenas, or government investigations.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls and authentication requirements
• API Key Protection: User API keys are encrypted using strong encryption algorithms
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Hosting on secure, compliant cloud platforms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Content Data: Retained while your account is active; you can delete content at any time
• Payment Data: Retained as required for tax and accounting purposes
• Log Data: Typically retained for 90 days unless needed for security or legal purposes

After account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Opt out of marketing communications and AI model training
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise these rights, please contact us at support@ghostwritr.ai. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services (such as Google Docs export). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, and erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending you an email notification
• Displaying a prominent notice within the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

15. Your Consent

By using our Service, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.