Privacy policy
Effective 9 October 2026. This page describes the current GhostAI beta and this informational website. Email account sign-in is provided by Supabase. Stripe sandbox checkout is enabled for testing; live payments are not enabled.
What you choose to share
The extension can capture text you select, a screenshot region you choose, and supported Google Forms question labels. You can save notes and a default instruction in Settings. Manual drafting and controls do not require a paid account. Hosted AI requires a confirmed GhostAI account. Free includes 10 concise requests each month; Premium includes 500. If you choose to create a website account, Supabase processes your email and password to authenticate you.
Local storage and desktop companions
Notes, shortcuts, preferences and helper connection state are stored locally on your device. The Windows companion and Mac developer preview handle Google Docs selection and typing. Extension sign-in tokens are stored in extension-owned account storage, separate from webpage scripts; passwords are used for sign-in and are not saved by GhostAI. Docs selection uses a native Copy operation and attempts to restore your previous clipboard contents.
AI answer requests
When you request an answer, your chosen question or screenshot, saved notes and instruction are sent to the GhostAI Supabase backend and processed using the OpenAI API. GhostAI checks account and subscription access, then returns the draft to your extension. The generation function does not write questions, screenshots, notes or drafts to the database. A usage record stores your account ID, UTC date, request count and last-request time to enforce limits. Requests use the Responses API with response storage disabled; OpenAI’s applicable API data retention and abuse-monitoring policies still apply. Avoid including passwords or sensitive personal information. Document imports extract text locally; the original file is not uploaded. Notes remain on your device unless relevant excerpts are included in a request. The monthly usage record stores request counts, input/output token totals and timing, without saving your questions or notes.
This website
The Account page lets you create an email account, sign in, reset your password and view your plan. Supabase stores your account information and manages authentication. Your browser stores the sign-in session so it can keep you signed in; signing out clears that session. We do not add an analytics integration or store card details on this website. The hosting infrastructure may process technical connection information to serve and secure the site. Clicking the support link opens your email application; information you email is used to respond to your request.
Your choices
Turn off GhostAI to stop new captures and assisted entry. Edit or clear your notes in Settings, or remove the extension and desktop helper. Previously sent requests may remain subject to the provider’s retention policy. Contact support to ask about information you have supplied by email.
Account and subscription data
Subscription records are stored in the GhostAI Supabase project and restricted so signed-in customers can read only their own records. Contact support to request deletion of your account. Notes saved in the extension remain local and are not automatically synced into your website account.
Payments and account deletion
Stripe hosts checkout and subscription management. GhostAI stores Stripe customer and subscription identifiers, plan status and billing-period dates, and does not receive complete card details. Current checkout uses a Stripe test environment. Contact support to request account deletion; associated usage and subscription records are removed with your GhostAI account. Payment-provider records may be retained under the provider’s legal requirements. Local notes and preferences can be removed by clearing them or uninstalling the extension.
Provider information: OpenAI privacy policy, Supabase privacy policy, Stripe privacy policy.
Writing controls and selected communications
GhostAI processes shortcut presses, focus changes and typing-key events locally to open controls, advance an approved draft, pause writing and stop when focus changes. The desktop helper may receive keyboard events through operating-system permissions while its controls are active. GhostAI does not upload a raw keystroke log or use these events for advertising. Account-linked AI request counts and timing are recorded to enforce allowances and prevent abuse.
If you deliberately select an email, message or chat excerpt as context, that communication is treated as selected content and may be included in your AI request. GhostAI does not automatically read your mailbox or chat history, and it does not build a list of websites you visit. Use only material you are authorized to share. Hosting, authentication and AI providers may process technical request information, such as IP addresses, for delivery, security and abuse prevention; GhostAI does not request GPS or use location to personalize answers.
Chrome Web Store Limited Use
GhostAI uses user data only to provide its writing-assistance features, authenticate accounts, manage subscriptions, enforce usage limits and secure the service. We do not sell user data, use it for unrelated advertising, or use it to determine creditworthiness or for lending. Transfers to Supabase, OpenAI and Stripe support those disclosed purposes. GhostAI’s use and transfer of user data adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.