Ghost privacy policy
Private beta. The same text the Ghost app shows before you sign in.
Operator and contact
Ghost is operated for this private beta by projectX LLC. Contact samilani360@gmail.com for support, privacy questions, or account requests.
Data we process
Ghost stores the stable identifier Apple provides for sign-in, and may store your name or relay email only when Apple shares it. We also store Ghost session records, workspace names, business descriptions, operating locations, workspace icons and pictures you choose to upload, and security and reliability metadata.
Workspace pictures
Uploading a workspace picture sends a resized copy to our private AWS storage so workspace members can see it. Ghost removes camera metadata during preparation and validation; identifying content visible in the picture itself remains. Replaced, removed, or deleted-workspace pictures enter retryable deletion processing. We target removal within 24 hours, but storage failures can delay it. Archived workspaces retain their picture. Pictures are stored separately from database backups and are not included in the 14-day database backup copies.
Connected apps
If you connect an app such as Claude or ChatGPT to Ghost, that app can read your workspaces, epics, projects and tasks, including each workspace's brief and decisions, and can create, change or delete workspaces, epics, projects and tasks as you ask it to. A deletion made by an app can be undone from that app for twenty seconds, then it is gone for good. What it reads is sent to that app's provider under your own account with that provider, not under Ghost's. Ghost records which app wrote each item and keeps that record after you disconnect. You can disconnect an app at any time from Connections in Ghost; disconnecting stops its access immediately and keeps what it already wrote.
Data we do not receive
Ghost does not receive or store your Apple Account password, Touch ID data, fingerprint information, or Apple payment information. Apple authentication credentials remain protected by Apple, the macOS Keychain, and server-side encrypted credential storage.
How we use data
We use the data to authenticate you, maintain secure sessions, save and restore your workspaces, operate the private beta, prevent abuse, diagnose failures, and protect the service. We do not sell personal information or use workspace content for advertising.
Storage and retention
Private-beta service data is hosted on AWS in the United States. Active account data is retained while your account exists. Encrypted daily database backups expire after 14 days; deleted database records may remain in those restricted backups until expiration. Workspace-picture deletion follows the processing described above. Security and operational records are limited to token-safe metadata.
Deletion and Apple events
In-app account deletion revokes the available Apple authorization, removes the server-side Apple credential, invalidates Ghost sessions, and deletes the account and owned workspaces from the active database. Apple may also notify Ghost about consent, relay-email, or account lifecycle changes.
Questions and requests
To ask what data is associated with your beta account, report a privacy concern, or request help with deletion, reply to the private-beta invitation sent from samilani360@gmail.com. Do not send passwords or authentication codes.