Ghostplug

Privacy Policy

Last updated: September 28, 2026

Overview

Hypertheory LLC, operating Ghostplug ("we", "our", or "us") operates an AI-powered marketing automation platform. This policy explains how we collect, use, store, and protect your information when you use our services.

Information We Collect

Account Information

Email address and password (securely hashed) when you create an account. We do not require additional personal information for registration.

Brand Data

Information you provide about your brands including company names, descriptions, target audiences, website URLs, and marketing preferences.

Content & Context

Materials you upload for content generation including reference posts, PDFs, text files, and images. AI-generated content created through our platform along with any edits, feedback, or status changes you make.

Content Publishing

Content approved for your brand may be published to third-party platforms such as Reddit through accounts operated by us or our personnel. We store records of published posts and their performance metrics. We do not require access to, or store credentials for, your own social media accounts.

Payment Information

Subscription tier selections and billing period preferences. Payment card details are collected and processed directly by Stripe; we do not store your card information.

Communications

Contact form submissions including your name, email, and message. If you correspond with our support or team by email, we retain those communications.

Usage Data

How you interact with our platform including features used, navigation patterns, and content performance metrics. We also collect first-party pageview analytics: the page visited, referral source, approximate country, and a short-lived pseudonymous identifier derived by hashing connection data. Raw IP addresses are not stored, and no third-party analytics or advertising trackers are used.

How We Use Your Information

  • Provide AI-powered content generation tailored to your brand voice and audience
  • Schedule and publish approved content to marketing channels on your behalf
  • Process subscription payments and manage billing
  • Send transactional communications about your account and services
  • Improve our services and content quality based on feedback
  • Analyze platform usage to enhance features and user experience
  • Comply with legal obligations and enforce our terms

AI Processing

Our platform uses artificial intelligence to generate marketing content. When you use our AI features:

  • Your brand information, uploaded context, and content preferences are sent to AI providers to generate personalized content
  • We may analyze your website content to extract brand information with your permission
  • Generated content is stored in our database and associated with your account
  • We use web search services to find relevant topics and trends for content ideas

Third-Party Services

We integrate with the following third-party services to provide our platform:

Infrastructure: Supabase (authentication, database), Vercel (hosting)

AI Providers: Anthropic (Claude) and Google (Gemini) for content generation, analysis, and drafting service communications

Payments: Stripe for subscription billing and payment processing

Social Media: Reddit for content publishing

Communications: Resend and Google Workspace (email delivery)

Each service has its own privacy policy. We only share data necessary for the specific service functionality.

Cookies & Local Storage

Essential Cookies: We use secure, HTTP-only cookies for authentication session management. These are required for the platform to function.

Attribution Cookie: One first-party cookie remembers how you first arrived (the link, ad or search that brought you, or that you came direct) and the most recent link (the platform, campaign and landing page, never an identifier or anything about you) for 90 days, so we know which of our own posts and ads work. Our pageview analytics are otherwise cookieless.

Referral Cookie: If you arrive through a friend's referral link, one first-party cookie remembers their referral code for 30 days so the free month is applied to your account when you sign up.

Local Storage: We store UI preferences (navigation states, filter settings) in your browser's local storage to improve your experience.

Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing, webhook signature verification, and access controls. Your data is stored in secure cloud infrastructure with regular backups. We limit employee access to user data on a need-to-know basis.

Data Retention

We retain your data for as long as your account is active or as needed to provide services.

When you cancel a subscription, associated generated content may be automatically deleted.

When you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete information
  • Request deletion of your account and associated data
  • Object to or restrict certain processing activities
  • Data portability (receive your data in a structured format)
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at the email below.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform. The "Last updated" date at the top indicates when the policy was last revised. Continued use after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@ghostplug.ai