Privacy Policy

What we collect

When you sign up, we collect your email address through Clerk, our authentication provider. When you run a scan, we temporarily store the ZIP file you upload and permanently store the scan results (file counts, finding counts, health score, and the generated Ghost Receipt) in our database. We do not store your source code beyond the duration of the scan.

How we use your data

We use your email to send transactional messages (account confirmation, billing receipts). We use scan data to power your scan history and to improve the scanner over time. We never sell your data or share it with third parties for advertising purposes.

Third-party services

We use the following third-party services to operate The Ghost:

• Clerk — authentication and account management
• Stripe — payment processing (we never see your card number)
• Neon — PostgreSQL database hosting
• Vercel — application hosting and file storage

Each of these services has its own privacy policy and data processing terms.

Data retention

Scan results and receipts are retained for the duration of your account. Uploaded ZIP files are deleted from storage immediately after your scan completes (or fails). You can delete your account at any time; this removes all associated scan data from our systems.

Cookies

We use cookies strictly necessary to operate the service: authentication session cookies set by Clerk. We do not use tracking or advertising cookies.

Your rights

You can request a copy of your data, ask us to correct inaccurate data, or request deletion of your account and all associated data by emailing support@itstheghost.com.

Contact

Questions about this policy? Email us at support@itstheghost.com.