Privacy Policy

Last updated: March 16, 2026

GhostUX ("we", "us", "our") respects your privacy. This policy explains what data we collect, why, and how we protect it.

1. Information We Collect

When you join the GhostUX waitlist or create an account we collect your email address, IP hash (for abuse prevention), referral metadata, and basic browser information (user-agent string). We do not sell, rent, or trade your personal information.

2. How We Use Your Information

We use the data we collect to manage your waitlist position, send transactional emails (confirmation, invite notifications), improve the product experience, and prevent abuse. Analytics data is aggregated and never tied to your identity.

3. Cookies & Local Storage

GhostUX uses essential cookies for authentication sessions and local storage for UI preferences. We do not use third-party tracking cookies. Admin sessions (Graveyard) use a secure, HTTP-only cookie that expires after 4 hours.

4. Data Storage & Security

Your data is stored in Supabase-managed infrastructure with row-level security, encrypted at rest and in transit. We retain waitlist data for the duration of the beta program. You may request deletion at any time.

5. Third-Party Services

We use Supabase (database & auth), Vercel (hosting), and Resend (transactional email). Each provider maintains their own privacy practices. We only share the minimum data required for each service to function.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@ghostux.com. We will respond within 30 days. If you are in the EU/EEA, you have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.

7. Children's Privacy

GhostUX is not intended for users under 16 years of age. We do not knowingly collect information from children. If we become aware that we have collected data from a child, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes constitutes acceptance of the updated policy.

9. Contact

Questions or concerns? Reach us at privacy@ghostux.com.