# GhostWriter Privacy Policy

_Last updated: 2026-08-21_

This policy explains what data GhostWriter ("the extension", "we") collects,
why, and your rights. By using GhostWriter you agree to this policy.

## What we collect

- **Account data**: the email address and password (stored as a salted hash)
  you provide when creating an account, plus your credit balance and plan.
- **Profile data you choose to analyze**: when you click "Generate Email" on a
  LinkedIn profile, we process the **public information visible on that
  profile page** (name, headline, company, and public posts you are already
  viewing) to generate a voice profile and conversation hooks.
- **Your writing samples**: if you use the "Clone my voice" feature, we store
  the samples you paste to build your personal voice profile.
- **Drafts**: the original and enhanced email drafts you generate, and the
  personalization score. Used to show your history and improve quality.
- **Feedback**: if you submit feedback from the extension, we store your
  message, category, contact email, and technical context (extension version,
  browser, page URL). With your consent, feedback may be posted as a GitHub
  issue in our public tracker (see below).
- **Payment data**: processed entirely by Stripe (see below). We never see or
  store your card details.
- **Diagnostics**: request logs contain your IP address, request paths, and
  status codes for security and abuse prevention.

## How we use it

- To provide the service: voice analysis, email enhancement, credit
  accounting, and your submission history.
- To operate and secure it: rate limiting, abuse prevention, error tracking
  (Sentry, when enabled), and customer support.
- To improve it: aggregate usage analytics; feedback is used to fix bugs and
  prioritize features.

## What we share

- **Stripe** (payment processing): your email, customer id, and purchase
  amount. See stripe.com/privacy.
- **Google Gemini** (AI provider): the draft text and voice/posts you asked us
  to analyze, to generate the enhanced output. See ai.google.dev/privacy.
- **GitHub** (feedback only): if you submit feedback and the operator has
  configured it, your feedback message, category, and technical context are
  posted as a GitHub issue in our repository. The issue body contains the
  feedback you wrote; do not include sensitive personal information in
  feedback messages.
- **We do not sell, rent, or trade your personal data.**

## Data retention

- Account, voice profile, drafts, and feedback are retained while your account
  is active.
- **Deleting your account** (Settings → sign out → delete account, or via the
  API `DELETE /api/auth/me`) permanently removes your account, voice profile,
  drafts, refresh tokens, and feedback records.
- Cached prospect analyses (public LinkedIn data) are kept at most 7 days and
  are not linked to your identity beyond your analysis history.

## Security

We use industry-standard measures: encrypted transport (TLS), hashed passwords
(scrypt), hashed refresh tokens, JWT authentication, and rate limiting. No
system is 100% secure; you use the extension at your own risk.

## Your rights (GDPR / CCPA)

Depending on your jurisdiction you may have the right to access, correct,
export, or delete your personal data, and to object to processing. Deleting
your account deletes the data we hold about you. Contact the operator (see
"Contact") to exercise any right.

## Changes

We may update this policy; the "Last updated" date above reflects the latest
version. Continued use after changes constitutes acceptance.

## Contact

Contact the operator at the address shown on the Chrome Web Store listing page
for this extension.