Legal
Terms of Service.
Last updated: September 30, 2026
Effective October 30, 2026. The material changes in this version, including the price change in section 6, take effect on that date, 30 days after we posted them (section 11).
1. Agreement to Terms
By accessing or using GhostVault ("Service"), operated by Aplos AI LLC, you agree to be bound by these Terms of Service ("Terms"). If you disagree with any part of the terms, you may not access the Service.
2. Description of Service
GhostVault finds where your personal details are exposed and asks data brokers to delete them. The Service includes:
- A free scan preview, with no account needed, that shows masked possible matches from supported public sources
- The Exposure Map and Ghost Score, which show where your details were found and how exposed you are
- Ghost Reports, which you can download as a PDF
- Deletion demands sent by email to data brokers as your authorized agent, with follow-ups to brokers that do not respond. A removal counts only when the broker confirms deletion in writing.
- Checks of whether your profile is listed on supported people-search sites, run by GhostVault's own scan worker and shown on the Exposure Map
- Monthly re-scans
- Breach monitoring for the email addresses you add (up to 10 on paid plans), using Have I Been Pwned
- A password leak check that runs in your browser. Your password is never sent to our server.
- Ghost Email forwarding addresses, with blocking, one-click unsubscribe and phishing warnings (section 12)
- The Family plan, for up to 5 people including you
- Passkeys, two-factor authentication, a security activity log and a full export of your account data
Some features, such as Ghost Number (section 13), may be offered later. When a feature is not yet available, we do not describe it as included, and these Terms apply to it once it is.
3. Free Scan and Paid Plans
GhostVault offers a free scan and two paid plans, Individual and Family. The free scan is a preview, not a plan or a subscription; it provides masked exposure scan results, email breach checking, and a risk score assessment. The paid plans unlock confirmed account results, tracked eligible privacy requests across our registered broker directory, known-breach monitoring for up to 10 verified email addresses, monthly re-scans, follow-ups to brokers that do not respond, and weekly security reports. The Family plan covers up to 5 people, including the account holder. We act for an added person only after that person agrees. Family member features marked as coming soon on our pricing page are not yet available.
4. User Accounts
When you create an account, you must provide accurate, complete, and current information including your legal name and a valid email address. Your name is used to scan data broker sites and submit deletion requests. Providing false information may result in removal requests being rejected by data brokers.
You are responsible for safeguarding your password, passkeys and two-factor codes, and for any activities or actions under your account.
5. Authorized Agent Status
When you subscribe to a paid plan and sign our agent authorization, you authorize Aplos AI LLC, which operates GhostVault, to act as your authorized agent under the California Consumer Privacy Act (CCPA) and the California Delete Act (SB 362) to submit data deletion requests on your behalf. This authorization includes:
- Sending legally compliant deletion demands via email to data brokers holding your personal information
- Following up on pending requests and tracking broker compliance
- Sending a second deletion demand to a broker that does not respond to the first
- Recording each broker's replies as evidence on your dashboard
You may revoke this authorization at any time by canceling your subscription.
6. Subscription and Payments
New subscriptions are billed through Stripe, our payment processor, at the price of the plan and billing period selected at checkout: Individual at $14.99 per month or $99 per year, and Family at $29.99 per month or $249 per year. You will be billed in advance at the start of each billing cycle.
If you subscribed at an earlier price (including the earlier Pro plan, which is now Individual), your subscription moves to the current price for your plan and billing period at your first renewal that falls at least 30 days after we email you notice of the change. Until that renewal you keep your earlier price. You may cancel before that renewal, and you will not be charged the new price.
You may cancel your subscription at any time from your account settings. Upon cancellation, you will retain access to your paid plan until the end of your current billing period. No refunds are provided for partial billing periods.
7. Acceptable Use
You agree not to use the Service:
- For any unlawful purpose or to solicit others to perform unlawful acts
- To submit removal requests for personal information that is not your own, except for family members who have agreed to it
- To violate any regulations, rules, or laws
- To infringe upon or violate our intellectual property rights
- To submit false or misleading information
- To attempt to gain unauthorized access to the Service or its related systems
- To send spam, harass anyone, commit fraud, or get around a ban, block or limit on another service
8. Removal Service Disclaimer
GhostVault submits CCPA deletion requests as your authorized agent. Data brokers are legally required to respond within 45 days under California law. GhostVault is not responsible for the speed or completeness of third-party broker compliance. We follow up with brokers that do not respond and may send a second demand, up to four letters per broker.
Removal success depends on broker cooperation. Many brokers never reply, and some require additional verification, their own web form, or extended processing time. We count a removal as confirmed only when the broker confirms deletion in writing. A demand that was sent or delivered is not a removal. GhostVault tracks the status of all requests and reports progress through your dashboard.
9. Data Security
We use bcrypt password hashing, TLS encryption for data in transit, encryption of two-factor secrets with a key kept outside the database, and secure payment processing through Stripe (PCI-DSS compliant). For passkeys we store only the public key; the private key stays on your device. However, no method of transmission over the Internet is 100% secure.
10. Limitation of Liability
In no event shall Aplos AI LLC, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your use of or inability to use the Service, any conduct or content of any third party on the Service, or unauthorized access to your transmissions or content.
11. Changes to Terms
We reserve the right to modify or replace these Terms at any time. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect by posting notice on the Service.
12. Ghost Email
Ghost Email gives you forwarding addresses on a GhostVault domain. Mail sent to one of them is forwarded to your verified account email. Ghost Email addresses receive and forward mail; they cannot be used to send it.
- Acceptable use. You may not use Ghost Email for spam, abuse, fraud, impersonation, or to get around a ban, block or limit on another service.
- What we keep. For each message: the sender's domain, the time, a category (such as personal, marketing or suspicious) and what we did with it. For each sender: its unsubscribe link or address, when it gives one. We do not keep message bodies, subjects or full sender addresses. Messages pass through our email provider to reach you and are not stored by us.
- Filtering. We may warn you about likely phishing, and mail we judge to be suspicious may not be forwarded. When you ask, we send a sender's unsubscribe request for you.
- Turning addresses off. You can turn off an address or block a sender at any time. We may turn off an address that is used for abuse or that breaks these Terms.
- Account deletion. When you delete your account, your addresses and their records are deleted and mail to them is no longer forwarded.
13. Ghost Number
Ghost Number is a service we may offer. Where it is available, it gives you a phone number, rented from our phone carrier, that forwards calls and texts to your real phone number after you verify it with a one-time code. It cannot be used to call emergency services.
- Acceptable use. You may not use a Ghost Number for spam, abuse, fraud, impersonation, or to get around a ban, block or limit on another service.
- What we keep. For each caller: a keyed one-way hash of their number, so repeat callers can be recognized, and its last 4 digits. For each call or text: the time, whether it was forwarded, blocked or screened, and a spam label. We do not keep text message bodies, call recordings, voicemails or transcripts. A text is checked for scam links as it passes through, and only a warning label is kept.
- Screening. Unknown callers may be asked to press a key before the call connects. Callers you block are not connected.
- Turning numbers off. You can turn off a number at any time. We may turn off a number that is used for abuse or that breaks these Terms.
- Account deletion. When you delete your account, your numbers are released back to the carrier and their records are deleted. A released number may later be given to someone else.
14. Contact Us
If you have any questions about these Terms, please contact us at:
Aplos AI LLC
9169 W State St #3361
Garden City, ID 83714