This policy explains what Ghostart Ltd ("Ghostart", "we", "us") collects, why, who processes it, and your rights. We've written it to be read, not skimmed past. The short version: we collect what the service needs to work, we don't sell your data, and the AI providers we use are not permitted to train their models on it.
Research and benchmarking: we publish research about AI visibility — for example, how often AI tools name businesses in a given industry. This uses anonymised, aggregated data only, including results from visibility checks (the free checks we run for waitlist members among them). No business, person or piece of content is identifiable in anything we publish, and results are always reported across groups, never about you. The full commitment is section 6 of the Terms.
We do not sell, trade or rent your personal information.
Measuring AI visibility necessarily involves information about businesses that are not our customers: AI answers name competitors, cite third-party pages, and our public website checker analyses any URL entered into it. We process this publicly available information under our legitimate interest in providing the service.
If it's your business: you can verify your domain with Ghostart to control how your site appears in our public tools, including opting out of the public checker. Contact us at team@ghostart.iowith any concern and we'll deal with it promptly.
If you use Ghostart as part of a company workspace, it's important you know where the lines are:
We share personal data only with processors who help us run the service, under contracts that protect it:
Beyond processors, we disclose personal data only where the law requires it, in a business transfer (with notice), or with your consent.
Some processors operate outside the UK/EEA (for example in the United States). Where data leaves the UK/EEA we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
Data is encrypted in transit and at rest, access is role-restricted (including row-level security in our database), and connected-platform tokens are stored securely and used only for the features you enabled. No system is perfectly secure; if a breach affects you, we'll notify you and the regulator as the law requires.
We keep your data while your account is active. If your trial ends without a subscription, we keep your workspace so you can pick up where you left off. If you close your account, we delete or anonymise your personal data within 30 days, except what we must keep for legal or accounting purposes. Company workspaces are retained while the company's account exists, since they belong to the company.
Under UK and EU data protection law you can: access your data, correct it, delete it, export it (portability), restrict or object to processing, and withdraw consent where processing is based on consent. Email team@ghostart.io and we'll respond within one month. You can also complain to the ICO (ico.org.uk) or your local supervisory authority.
We use essential cookies to run the service (sign-in, security, your preferences such as currency) and analytics cookies only if you accept them in the cookie banner. You can change your choice at any time; declining analytics doesn't affect the service.
Ghostart is a business tool and not intended for anyone under 18. We do not knowingly collect data from children.
We'll update this policy as the platform evolves and tell you about material changes by email or in-app. The date at the top reflects the current version.
Privacy questions and rights requests: team@ghostart.io — Ghostart Ltd, United Kingdom.
This policy explains what Ghostart Ltd ("Ghostart", "we", "us") collects, why, who processes it, and your rights. We've written it to be read, not skimmed past. The short version: we collect what the service needs to work, we don't sell your data, and the AI providers we use are not permitted to train their models on it.
Research and benchmarking: we publish research about AI visibility — for example, how often AI tools name businesses in a given industry. This uses anonymised, aggregated data only, including results from visibility checks (the free checks we run for waitlist members among them). No business, person or piece of content is identifiable in anything we publish, and results are always reported across groups, never about you. The full commitment is section 6 of the Terms.
We do not sell, trade or rent your personal information.
Measuring AI visibility necessarily involves information about businesses that are not our customers: AI answers name competitors, cite third-party pages, and our public website checker analyses any URL entered into it. We process this publicly available information under our legitimate interest in providing the service.
If it's your business: you can verify your domain with Ghostart to control how your site appears in our public tools, including opting out of the public checker. Contact us at team@ghostart.iowith any concern and we'll deal with it promptly.
If you use Ghostart as part of a company workspace, it's important you know where the lines are:
We share personal data only with processors who help us run the service, under contracts that protect it:
Beyond processors, we disclose personal data only where the law requires it, in a business transfer (with notice), or with your consent.
Some processors operate outside the UK/EEA (for example in the United States). Where data leaves the UK/EEA we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
Data is encrypted in transit and at rest, access is role-restricted (including row-level security in our database), and connected-platform tokens are stored securely and used only for the features you enabled. No system is perfectly secure; if a breach affects you, we'll notify you and the regulator as the law requires.
We keep your data while your account is active. If your trial ends without a subscription, we keep your workspace so you can pick up where you left off. If you close your account, we delete or anonymise your personal data within 30 days, except what we must keep for legal or accounting purposes. Company workspaces are retained while the company's account exists, since they belong to the company.
Under UK and EU data protection law you can: access your data, correct it, delete it, export it (portability), restrict or object to processing, and withdraw consent where processing is based on consent. Email team@ghostart.io and we'll respond within one month. You can also complain to the ICO (ico.org.uk) or your local supervisory authority.
We use essential cookies to run the service (sign-in, security, your preferences such as currency) and analytics cookies only if you accept them in the cookie banner. You can change your choice at any time; declining analytics doesn't affect the service.
Ghostart is a business tool and not intended for anyone under 18. We do not knowingly collect data from children.
We'll update this policy as the platform evolves and tell you about material changes by email or in-app. The date at the top reflects the current version.
Privacy questions and rights requests: team@ghostart.io — Ghostart Ltd, United Kingdom.