Privacy Policy

Last updated: August 9th, 2026

1. Introduction

Ghostly Labs ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and safeguard the data you provide when you visit our website, use our services, or interact with our team.

2. Information We Collect

A. Information You Provide

• Contact Information: Name, email address, phone number, company name
• Business Details: Information shared during strategy calls, onboarding, or service delivery
• Payment Details: Collected and processed via third-party secure payment platforms

B. Information Collected Automatically

• Usage Data: IP address, browser type, pages visited, time on site
• Cookies: To improve website performance and user experience (see Section 6)

C. Information from Third Parties

• Marketing and analytics platforms (e.g., Google Analytics, Facebook Ads, LinkedIn)
• CRM and email tools (e.g., MailChimp, Klaviyo, Google Workspace)

3. How We Use Your Information

We use the information we collect to:

• Deliver our SEO, branding, and marketing services
• Respond to inquiries and provide support
• Improve our website, content, and campaigns
• Send you relevant updates, proposals, or strategic insights
• Comply with legal obligations

4. How We Share Information

We do not sell or rent your personal data. We may share information with:

• Trusted partners and subcontractors under strict confidentiality
• Legal authorities if required by law
• Platforms used to deliver our services (e.g., Slack, Asana, Calendly)

5. Data Security

We use encryption, secure servers, access controls, and internal best practices to protect your data. While no system is 100% secure, we actively monitor and improve our security posture.

6. Cookies & Tracking Technologies

We use cookies and similar technologies for analytics, performance, and remarketing. You may disable cookies via your browser, but this may affect site functionality.

7. Your Rights

Depending on your location, you may have the right to:

• Access or update your personal information
• Request deletion of your data
• Object to or restrict processing
• Lodge a complaint with a data protection authority

Contact us at [email protected] to exercise these rights.

8. Data Retention

We retain your information as long as needed to fulfill our obligations or comply with legal requirements. Client project data may be archived securely for record keeping and performance review.

9. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites. We recommend reviewing their policies before sharing data.

10. International Data Transfers

If you access our services outside the United States, your information may be transferred to and processed in the U.S. We ensure all transfers comply with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal obligations. Updates will be posted on this page with a revised effective date.

12. Connected Social Accounts and Platform Data

Some Ghostly Labs products, including Apparition, let you connect social media and business accounts you own or manage, including Facebook Pages, Instagram professional accounts, Google Business Profiles, LinkedIn Pages and profiles, and Canva accounts. Connections are made through each platform's official authorization (OAuth) process. We never see or store your platform passwords.

What we access. When you connect an account, we access only what is needed to provide the features you use: your account or page identifiers, names, and profile images so you can pick which accounts to use; the content you compose, schedule, or import in our products; your own published posts and reviews when you choose to display them on your own website; and the authorization tokens the platform issues for your connection.

How we use it. We use this access solely to perform the actions you initiate, such as publishing posts you compose, retrieving your own posts and reviews for display on your own website, and importing designs you select. We do not sell platform data, do not use it for advertising, do not aggregate it across customers, and do not access accounts you have not connected.

How we protect it. Authorization tokens are stored encrypted at rest on our infrastructure and are used only by our service to carry out the actions described above.

Retention and deletion. Disconnecting an account in the product immediately invalidates and deletes its stored tokens. You can also revoke our access at any time from the platform's own settings (for example, Facebook's Business Integrations settings, your Google Account permissions page, or LinkedIn's Permitted Services page), which has the same effect. Content you created in our products remains yours and is deleted upon account deletion. To request deletion of all data associated with your connected accounts, email [email protected] from the account owner's address; we will confirm completion within 30 days.

Google user data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta platforms data. Data received from Meta platforms (Facebook and Instagram) is used only to provide the features described above, is not transferred to third parties except as required to provide the service or by law, and is deleted as described in Retention and deletion above.

LinkedIn data. We access LinkedIn only on behalf of members who authorize our application, limited to pages where they hold administrator roles and their own profile where authorized. We do not scrape, enrich, or resell LinkedIn member data.

13. Contact

For any questions about this policy or your data, contact:

Ghostly Labs
Email: [email protected]