Privacy Policy

GotGhosted Inc. · gotghosted.io

Effective Date

January 1, 2025

Last Updated

January 1, 2025

Company

GotGhosted Inc.

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. How We Share Your Information
5. Data Retention
6. Your Rights (CCPA)
7. Cookies and Tracking
8. Data Security
9. Children's Privacy
10. Changes to This Policy
11. Contact

GotGhosted is built on anonymity. This policy explains exactly what data we collect, why, how long we keep it, and what rights you have. We do not sell personal data. We do not display advertising.

1. Introduction

GotGhosted Inc. operates the GotGhosted platform at gotghosted.io and related services. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Platform. By using the Platform, you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide Directly

→Email address — provided voluntarily for account creation, newsletter subscription, or verified badge
→Submission content — company name, industry, hiring stage, process rating, and experience description
→Resume and career information — if you use the Clean Slate Verification Kit
→Payment information — processed by Stripe; GotGhosted does not store card numbers

2.2 Information Collected Automatically

→IP address — used for rate limiting in hashed form, not linked to identity
→Browser type and version — for compatibility and security
→Usage data — pages visited, features used — via privacy-first analytics (Plausible)
→Device information — operating system, screen resolution — for optimization

2.3 Information We Do Not Collect

→Social Security numbers, government IDs, or financial account numbers
→Precise geolocation data
→The identity of anonymous submitters — anonymous submissions are designed to be unattributable

3. How We Use Your Information

→Operating the Platform — processing submissions, calculating GhostRate™ scores
→Account management — creating accounts, processing subscriptions
→Product features — generating resume content, sending ghost alerts, delivering the Ghost Report newsletter
→Security — detecting fraudulent submissions, rate limiting, anti-gaming controls
→Analytics — understanding aggregate usage to improve features
→Legal compliance — fulfilling obligations and responding to lawful requests

GotGhosted does not use your personal information for targeted advertising. GotGhosted does not sell, rent, or trade personal information to third parties for marketing purposes.

4. How We Share Your Information

4.1 Service Providers

→Supabase — database hosting and authentication
→Anthropic — AI processing for GhostRate™ summaries and Clean Slate resume generation
→Stripe — payment processing
→Vercel — website hosting
→Resend — transactional email and newsletter delivery

4.2 Legal Requirements

GotGhosted may disclose information if required by law, court order, or governmental authority, or if necessary to protect rights, prevent fraud, or ensure user safety.

5. Data Retention

→Anonymous submissions — retained indefinitely as part of the GhostRate™ dataset
→Account information — retained for account duration plus 90 days following deletion
→Payment records — retained for 7 years per tax and accounting requirements
→IP address hashes — retained for 30 days, then deleted
→Newsletter subscriptions — retained until unsubscribed

6. Your Rights (CCPA Compliance)

→Right to Know — request a copy of personal information collected in the past 12 months
→Right to Delete — request deletion of your personal information
→Right to Opt-Out — GotGhosted does not sell personal information
→Right to Non-Discrimination — GotGhosted will not discriminate for exercising privacy rights

To exercise these rights, email privacy@gotghosted.io with subject “Privacy Rights Request.” Response within 45 days.

7. Cookies and Tracking

→Session cookies — required for account authentication
→Privacy-first analytics — no third-party tracking cookies, no ad network data sharing
→No advertising cookies — no Facebook Pixel, Google Ads tracking, or ad network cookies

8. Data Security

→All data in transit encrypted via TLS 1.3
→Database access restricted to authenticated services with minimum necessary permissions
→Passwords hashed via industry-standard algorithms (Supabase Auth)
→Payment data handled exclusively by Stripe — GotGhosted never touches raw card data

9. Children's Privacy

The Platform is not directed to individuals under 18. GotGhosted does not knowingly collect information from minors. If discovered, such information will be deleted promptly.

10. Changes to This Policy

Material changes will be communicated via email or Platform notice at least 30 days before taking effect.

11. Contact

Privacy questions: privacy@gotghosted.io · gotghosted.io/privacy · Miami / Orlando, FL