Haunt Privacy Policy

Effective date: June 1, 2026
Last updated: June 29, 2026

This Privacy Policy explains how Ghostly Labs ("Company", "we", "us", or "our") collects, uses, discloses, and protects information in connection with the Haunt mobile application and related services (the "App"). Haunt is a customer-relationship management (CRM) application for real estate professionals. The App is intended for use in the United States.

This policy describes our two distinct roles: (1) information about you, the agent or team member who uses the App, for which we act as a controller; and (2) the contact and lead information you manage within the App, for which you and your brokerage are the controller and we act as a service provider that handles it on your behalf and under your instructions.

How Haunt works

Haunt connects to your own WordPress/CRM site. The contacts, conversations, tasks, and deals you manage are stored in and synchronized with that site. This policy does not cover your brokerage's own systems or third-party services that have their own privacy policies.

1. Information we collect

Your account information (we are controller):

• Authentication details for the site you connect to (username/login; passwords are handled by the authentication system and stored only in hashed form), your name, email address, and the site URL you connect to.
• Device and technical data: device name and type, operating system version, app version, and platform. If you enable notifications, the App registers a push notification token so notifications can be delivered.
• Your use of features, including the AI assistant and drafting tools.

Contact/CRM content you manage (you are controller; we are service provider):

• Your contacts and leads, including their names, email addresses, phone numbers, notes, tags, and related records.
• Conversations and messages (email/SMS) you compose and send, tasks, deals/opportunities, saved searches, templates, and campaigns.
• Any other information you choose to store about your contacts in the App.

The App does not include third-party advertising, analytics, or crash-reporting tools.

Data categories at a glance

2. How we use information

• Provide and operate the CRM: store and display your contacts, conversations, tasks, deals, and other records, and synchronize them with your connected site.
• Send the email and SMS communications that you initiate to your contacts.
• Generate the AI drafts, summaries, and assistant responses that you request.
• Maintain security and integrity, and prevent abuse.
• Comply with legal obligations and enforce our terms.

We process the contact data you manage only to provide the service to you and according to your instructions.

3. Your responsibilities regarding contact data

Because you control the contact and lead information you load into Haunt, you are responsible for having a lawful basis and any required consent to store that information and to communicate with those contacts. This includes compliance with applicable communications laws such as the TCPA and CAN-SPAM and similar SMS and email regulations, and with privacy laws such as the CCPA/CPRA where they apply to your contacts. You are responsible for honoring opt-outs and data-subject requests from your contacts.

4. How we share information

• Your connected site/CRM, where your data is stored and synchronized.
• Service providers we use to run the App, under confidentiality and data-protection obligations:
  • The Ghostly Intelligence Network (our AI service), which powers the assistant and drafting tools. To generate the output you request, content you submit is processed by us and by trusted third-party AI infrastructure providers acting under confidentiality and data-protection obligations.
  • The email and SMS delivery providers configured on your connected site, which deliver the messages you initiate.
  • Apple Push Notification service and Google Firebase Cloud Messaging, to deliver notifications if you enable them.
  • Cloud hosting and infrastructure providers that operate the service.
• Legal and safety: when necessary to comply with law or legal process, enforce our terms, or protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. The AI assistant and drafting tools

The assistant and drafting tools are part of the Ghostly Intelligence network. Content you submit to them is processed by our AI service to generate the responses, drafts, and summaries you request. Use professional judgment about the information you include in prompts.

6. Your choices and rights

• Your account: to access, correct, export, or delete your account, contact your site administrator or email us at [email protected]. Manage notifications in the App or your device settings.
• Your contacts: requests from your contacts (access, deletion, opt-out, and similar) are directed to you as the controller; we will assist you in fulfilling verified requests as your service provider.
• Contact records: you can edit or delete the contact records you manage from your connected CRM at any time.

7. U.S. state privacy rights (including California)

Depending on your state of residence, you may have rights to know the categories and specific pieces of personal information we collect about you (the agent), to request deletion or correction, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws. We will not discriminate against you for exercising your rights. To exercise these rights, email [email protected]; we will verify your request before acting on it. Requests from your contacts are handled by you as the controller, with our assistance.

8. Data retention

We retain your account information while your account is active and as needed to provide the App and meet legal obligations. Contact/CRM data is retained in and governed by your connected site and your own retention practices; you can edit or delete those records at any time. When information is no longer needed, we delete or de-identify it.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted transport (HTTPS/TLS) and authenticated, token-based access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

Haunt is a professional tool intended for business users and is not directed to children. We do not knowingly collect personal information from children through the App.

11. Permissions the App may request

• Notifications: to alert you about new activity, replies, and follow-ups. Optional, and you can turn it off at any time.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the App after changes become effective constitutes acceptance of the revised policy.

13. Contact us

Ghostly Labs
600 N Azalea Drive 101
Surfside Beach, SC 29575
Email: [email protected]