Privacy Policy.

1. Introduction

At GhostVault ("we", "our", or "us"), operated by Aplos AI LLC, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our data broker removal and breach monitoring service at ghostvault.live.

2. Information We Collect

Information You Provide

• Account Information: First name, last name, and email address
• Scan and Removal Details: Your name, city and state, and any mailing address, former names or phone number you add, used to find your records and to identify you to data brokers
• Monitored Email Addresses: Up to 10 email addresses (paid plans) that you choose to monitor for data breach appearances
• Family Members: The names and email addresses you enter for people on your Family plan, and their agreement when they give it
• Passkeys and Two-Factor Authentication: For a passkey, its public key and the name you give it; the private key never leaves your device. Two-factor secrets are stored encrypted.
• Usernames: Only when username checks are available, the usernames you add in Settings (up to 5)
• Phone Number for Ghost Number: Only when Ghost Number is available and you use it, the real phone number your Ghost Numbers forward to
• Payment Information: Billing details processed securely through Stripe. We do not store your full card number, CVC, or billing address on our servers.

Information Collected Automatically

• Usage Data: Basic request logs (which pages and API calls were requested, when, and any errors), kept by our hosting providers to run and secure the Service
• Step Counts: GhostVault counts anonymous daily totals of steps like "scan started" and "signed up", with no cookies and nothing that identifies you.
• Page Views: Cloudflare Web Analytics counts page views and page load times without cookies. It does not store your IP address or build a profile of you.
• Conversion Tracking: We use Meta Pixel (Facebook) to measure advertising effectiveness. This tracks page views, sign-ups, and checkout events. No personal scan data or removal information is shared with Meta.
• Security Activity: Sign-ins and security changes on your account (such as adding a passkey), with the time and method. New entries do not record your IP address or device.
• Device Information: Browser type, operating system
• Log Data: IP addresses, access times, pages viewed

3. CCPA Authorized Agent

This means:

• We send legal deletion demands to 500+ registered data brokers on your behalf
• Data brokers are required to comply within 45 days under California law
• We track the status of all requests (queued, sent, confirmed) and display progress on your dashboard
• We count a removal as confirmed only when the broker confirms deletion in writing
• We follow up with brokers that do not respond and may send a second deletion demand, up to four letters per broker
• You can revoke this authorization at any time by canceling your subscription

4. Checks We Run for You

• People-search listings: We search supported people-search sites for your name, city and state to see whether you are listed. These searches run from GhostVault's own scan worker and from our servers. We keep whether you were listed, the address of the profile page, how many addresses, phone numbers and emails the listing shows, and a one-way fingerprint of the listing so we can tell when it changes. We do not keep the page itself.
• Breach monitoring: We send each email address you monitor to Have I Been Pwned to look it up in known data breaches, and keep the breaches it reports.
• Other leak sources: Only when we switch them on, we also check monitored addresses with LeakCheck and XposedOrNot. From them we keep only the leak's name, its date when given, and the types of data involved. Never a password.
• Password leak check: This runs in your browser. Only the first 5 characters of a one-way hash of the password go to Have I Been Pwned's Pwned Passwords service. The password is never sent to our server.
• Username checks: Only when this feature is available, and only for the usernames you add. We look for accounts under them on popular sites and keep the site names and profile addresses found.
• Ghost Email: For each message sent to your Ghost Email addresses we keep the sender's domain, the time, a category and what we did with it, plus a sender's unsubscribe link when it gives one. We do not keep message bodies, subjects or full sender addresses.
• Broker email forwarding: Only if you turn it on, a broker's privacy email that you or your mail provider forward to your GhostVault proof address is kept as a reply on the matching broker case; for one that matches none of your cases we keep only the sender's domain, subject and time and delete them after 30 days, and we store nothing from any other email.
• Ghost Number: Only when it is available and you use it. For each caller we keep a keyed one-way hash of their number and its last 4 digits; for each call or text, the time, what happened to it and a spam label. We do not keep text message bodies, recordings, voicemails or transcripts.

5. How We Use Your Information

We use the information we collect to:

• Scan for your exposed personal information, show it on your Exposure Map and calculate your Ghost Score
• Send CCPA deletion demands to data brokers as your authorized agent, and read and classify their replies
• Monitor your email addresses for appearances in data breaches
• Forward mail and, when available, calls and texts sent to your Ghost Email addresses and Ghost Numbers
• Process subscription payments and manage your billing through Stripe
• Send security alerts, removal status notifications, and notices about your account and plan
• Respond to support requests
• Measure advertising effectiveness and optimize our marketing (via Meta Pixel)

6. Data Sharing

We do NOT:

• Sell your personal information to anyone
• Share your scan results, removal data, or breach information with advertisers
• Use your data for any purpose other than providing our service

We share information only with:

• Data brokers: Solely to submit deletion requests on your behalf as your authorized agent. A demand includes only what a broker needs to find your record: your name, email address, city and state, and a mailing address or former names if you added them. We share a phone number only when a broker asks for one.
• Stripe: To process subscription payments securely
• Resend: To send our email, including deletion demands, to receive broker replies, and to forward mail sent to your Ghost Email addresses
• Have I Been Pwned: Your monitored email addresses, to check them against known breaches. The password leak check sends only a 5-character hash prefix, never the password.
• Enformion: Your name, city and state, and email address if you give one, to find people-search records for your scan
• Search providers (Tavily, Brave Search): Searches for your name and location, to find pages that list you
• OpenRouter: The text of broker replies, to classify what each broker said
• Twilio: Only when Ghost Number is available: to carry calls and texts to your Ghost Numbers and to send the one-time code that verifies your phone number
• IPQualityScore, LeakCheck and XposedOrNot: Only when we switch them on: your monitored email addresses, to check for leaks
• Google: Only if you choose to sign in with Google
• Hosting and monitoring: Cloudflare hosts our website, Railway runs our servers and database, and Sentry receives error reports
• Meta: Conversion events only (sign-up, checkout). No personal data, scan results, or removal information is shared.
• Law enforcement: Only when required by law

7. Data Security

We implement security measures including:

• bcrypt password hashing for all account passwords
• TLS encryption for all data in transit
• Encrypted two-factor secrets, with the key kept outside the database
• Passkeys, for which we store only the public key
• Stripe payment processing (PCI-DSS Level 1 compliant)
• Rate limiting and access controls to prevent unauthorized access
• JWT-based authentication with secure token handling

8. Data Retention

We retain your personal information only for as long as necessary to provide the Service. Scan results, removal request history, and breach monitoring data are retained for the duration of your account.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law. Your Ghost Email addresses stop forwarding and your Ghost Numbers are released back to the carrier. We keep one-way fingerprints of the reply addresses used on your removal demands, which hold nothing about you, so that later broker mail to them is refused. If you unsubscribed from our emails, we keep your email address on our do-not-email list so that we do not email you again.

9. Your Rights

You have the right to:

• Access your personal data via your dashboard
• Correct inaccurate personal data through your account settings
• Delete your account and all associated data
• Export your account data as a download from Settings
• Object to processing of your personal data
• Withdraw consent for authorized agent status at any time by canceling your subscription

10. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We also use:

• Cloudflare Web Analytics: Cookieless page view counts. It sets no cookies and stores nothing on your device.
• Meta Pixel: Conversion tracking for advertising measurement. You can opt out via your browser's ad preferences or by using an ad blocker.

We do not use third-party tracking cookies for behavioral advertising.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

12. International Transfers

Your information is stored and processed in the United States. If you are accessing the Service from outside the United States, your data will be transferred to and processed in the US where data protection laws may differ from those in your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For a material change, we post notice on the Service at least 30 days before it takes effect.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

privacy@ghostvault.live