Privacy Policy

The short version

• The text you type or paste stays on your device. Only the AI features send it to our server, which passes it to Google's Gemini API and doesn't keep it; synonym swaps send single words to Datamuse.
• For your account we keep your email, an optional name, a hashed password, your plan and how many tokens you've used this week.
• Stripe handles your card. We never see the card number.
• No ads, no analytics trackers, and we don't sell your data.

Who we are

Ghostkeys is run by Ghostkeys ("we", "us"). This policy covers the website, the Chrome extension and the desktop app. It works together with our Terms of Service.

What we collect

Account information. When you sign up: your email address, the name you give (optional), and your password, which we store only as a salted scrypt hash.

Sign-in sessions. When you sign in on the site, the extension or the desktop app, we create a session and store a hash of its token, with when it was created and when it expires.

Billing information. When you buy a plan, Stripe collects your payment details. We receive and keep your Stripe customer ID, your plan, subscription status and renewal date, and a record of each payment (amount, currency, date and whether it succeeded, failed or was refunded). We don't receive or store your full card number.

Usage counts. We count the tokens your account spends each week so we can apply your plan's allowance. This is a number, not the text itself.

Technical data. Like most websites, our server may log IP addresses, browser type and request times to keep the service running and secure, and we count failed sign-ins per address to block password guessing.

What we don't keep

We don't receive the text you paste into the extension or desktop app, the text it types, or the pages or programs you type into. Text you send to the AI features passes through our server on its way to Google and isn't stored or logged. We don't use analytics, advertising or tracking scripts.

Data stored on your device

The extension keeps your editor contents, settings, persona text, any Gemini API key you enter, and your sign-in token in Chrome's local storage on your computer. Your settings may sync between your Chrome browsers through your Google account if you have Chrome Sync turned on. The desktop app stores similar data locally. Uninstalling removes it.

Where your text goes when you use certain features

• AI revisions and Humanize send the text you ask to rewrite, plus your persona text, to our server, which forwards it to Google's Gemini API and returns the result without keeping either. Every call uses our own Google key. Google processes the text under its own terms and privacy policy.
• Synonym swaps send individual words directly from your device to the Datamuse API to look up synonyms.

If you don't use these features, the text doesn't leave your device.

Extension and app permissions

• Access to websites, activeTab and scripting: to find the text field you choose and type into it.
• Debugger: to send keystrokes the browser treats as real, which editors like Google Docs need. It's only attached to the tab being typed into, while typing.
• Clipboard read: to paste formatted text into the editor when you ask it to.
• Storage: to save your settings and editor contents on your device.
• Desktop app, Accessibility (macOS) or input access: to type into other programs on your behalf.

We use these permissions only to provide the features you use, not to read or collect your browsing.

Cookies

The website sets one cookie: a sign-in cookie that keeps you logged in for up to 30 days. It's strictly necessary, so there's no banner. Stripe's checkout pages set their own cookies for payments and fraud prevention.

How we use your information

• to create and secure your account and sign you in;
• to process payments, apply your plan and enforce token allowances;
• to send emails about your account, billing, or changes to these policies;
• to prevent fraud and abuse and comply with the law.

Where the GDPR or similar laws apply, we rely on performing our contract with you, our legitimate interest in running a secure service, and our legal obligations.

Who we share it with

We don't sell or rent your personal information. We share it only with:

• Stripe, to process payments and manage subscriptions;
• our hosting provider, which stores our servers and database;
• authorities, when the law requires it or to protect the rights and safety of our users or others;
• a successor, if the Service is sold or merged, who would remain bound by this policy for data already collected.

How long we keep it

• Account information: until you delete your account.
• Sign-in sessions: until they expire (30 days) or you sign out.
• Weekly token counts: about two weeks.
• Payment records: as long as tax and accounting laws require, even after your account is deleted.

Your rights

You can see and change your email, name and password on your account page. To get a copy of your data, correct it, or delete your account, email support@ghostkeys.org from the address on the account. Depending on where you live (for example the EU, UK or California), you may also have the right to object to or restrict processing and to complain to a data protection authority. We don't sell or share personal information for advertising.

Security

Passwords are hashed with scrypt, session tokens are stored only as hashes, and connections to the site use HTTPS. No system is perfectly secure, so please use a password you don't use anywhere else.

Children

The Service isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, email us and we'll delete it.

International users

Our servers and the providers we use may be located outside your country, including in the United States. By using the Service, your information is processed there under the protections described in this policy.

Changes to this policy

If we change this policy in a way that matters, we'll update the date above and tell you by email or on the site before the change takes effect.

Contact

Questions or requests: support@ghostkeys.org.