Privacy Policy

1. Introduction

Ghostko ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our TikTok analytics dashboard, AI-powered content planning, and related services.

2. Information We Collect

We collect the following types of information:

• Account Information: Full name, email address, and password when you create an account.
• TikTok Account Data: When you connect your TikTok account via OAuth, we access your public profile information, username, display name, video metrics, follower data, engagement statistics, and account analytics as necessary to provide our services.
• Analytics Data: Video performance metrics, audience demographics, engagement rates, trending data, historical growth statistics, and hook scores collected from your TikTok account.
• AI-Generated Content: Content ideas, video scripts, and content plans generated by our AI services based on your topics and preferences. We may temporarily store AI-generated content to improve our services.
• Saved and Planned Content: Videos you save for inspiration, content you plan to create, and notes or ideas you store in the platform.
• Credits Usage: Information about your monthly AI credits allocation, credits used, and feature usage (AI content planning, rebuffer, etc.).
• Subscription Information: Payment details, subscription plan, billing history, trial period status, and renewal dates processed through our payment processor (Lemon Squeezy).
• Support Communications: Messages you send through our support system, including any attachments or screenshots.
• Usage Data: Information about how you interact with our platform, including dashboard views, feature usage, AI service requests, and navigation patterns.
• Device Information: Browser type, IP address, device identifiers, and operating system collected automatically when you access our services.

3. How We Use Your Information

• To provide and maintain our TikTok analytics dashboard and AI-powered content planning services.
• To collect, analyze, and display your TikTok video performance metrics and growth data.
• To generate AI-powered content ideas, video scripts, and content strategies based on your inputs.
• To analyze viral content and provide AI rebuffer suggestions.
• To manage your AI credits allocation and track feature usage.
• To process your subscription, billing, and manage your 3-day trial period.
• To save and manage your content ideas, planned posts, and inspiration library.
• To provide customer support and respond to your inquiries.
• To improve and optimize our platform and AI services.
• To send you important service updates, billing notifications, and account information.
• To comply with legal obligations and prevent fraud.

4. AI Services and Data Processing

Our AI-powered features (content planning, rebuffer, topic generation) use third-party AI services to generate content suggestions. When you use these features:

• Your input prompts and preferences are sent to AI service providers to generate content.
• Generated content is stored in your account for your access and use.
• We may use aggregated, anonymized AI interaction data to improve our services.
• We do not sell or share your specific AI-generated content with third parties.

5. Payment Processing

We use Lemon Squeezy as our payment processor. When you subscribe to our Pro plan:

• Your payment information is processed and stored by Lemon Squeezy, not by us.
• We receive transaction confirmations, subscription status, and billing events.
• Your 3-day trial period is managed through Lemon Squeezy.
• We store minimal billing information needed to provide your subscription.

6. Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

• With TikTok as required to deliver our analytics services via their official API.
• With AI service providers to generate content suggestions when you use AI features.
• With Lemon Squeezy to process payments and manage subscriptions.
• With hosting providers (Supabase, Vercel) who assist in operating our platform.
• When required by law, regulation, or legal process.
• To protect the rights, safety, or property of Ghostko, our users, or others.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS) and at rest for sensitive data.
• Secure OAuth authentication - we never store your TikTok password.
• Row-level security policies in our database to isolate user data.
• Secure payment processing through PCI-compliant processors.
• Regular security updates and monitoring.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Specifically:

• Account data and preferences: Until account deletion
• Analytics data and saved content: Until account deletion
• Billing records: As required by law (typically 7 years)
• Support messages: Until resolved or account deletion
• AI-generated content: Until you delete it or close your account

You may request deletion of your data at any time by contacting us or deleting your account through the settings page.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to be forgotten).
• Withdraw consent for data processing.
• Export your data in a portable format.
• Object to or restrict certain processing activities.
• Opt out of marketing communications (if any).

To exercise these rights, please contact us at privacy@ghostko.com

10. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand platform usage and improve our services. You can control cookie preferences through your browser settings, but disabling cookies may affect platform functionality.

11. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page, updating the "Last updated" date, and sending you an email notification if the changes are significant.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at privacy@ghostko.com.