Effective Date: February 3, 2026 · Last Updated: February 3, 2026

Privacy Policy

Ghost BI ("we," "us," or "our") operates the ghostbi.com website and the Ghost BI platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, name, and authentication credentials. We offer a Free tier with limited usage, as well as paid subscription plans.

1.2 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, and general interaction patterns.

1.3 API Call Metadata

When you make API calls through the Service, we collect metadata such as timestamps, response times, status codes, and endpoint identifiers. We do not store, log, or retain the content of your API request inputs or generated outputs. Your data flows through our processing pipeline and is not persisted beyond the immediate request lifecycle.

1.4 Payment Information

Payment processing is handled by our third-party payment processor. We do not directly store your full credit card number or banking details.

2. How We Use Your Information

We use the information we collect to:

Provide and maintain the Service — including account management, API processing, and subscription billing.
Improve the Service — analyze usage patterns and aggregate metrics to enhance features and performance.
Communicate with you — send service notifications, security alerts, and support responses.
Ensure security — detect and prevent fraud, abuse, and unauthorized access.
Comply with legal obligations — fulfill regulatory and legal requirements.

3. Third-Party AI Processing

Our Service utilizes third-party AI service providers to power API intelligence features. When you make API calls, data may be transmitted to these providers for real-time processing. Third-party AI providers process data according to their own data processing agreements and do not retain your data beyond the processing request. We carefully vet all AI providers and require contractual commitments regarding data handling and security.

4. Data Retention

Account data — retained for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
API call logs (metadata only) — automatically deleted after 90 days.
API request/response content — not stored. Data is processed in real time and not persisted.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

Service providers — third-party vendors who assist in operating the Service (payment processing, AI processing, infrastructure hosting), bound by contractual confidentiality obligations.
Legal requirements — when required by law, regulation, or legal process.
Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice to you.

6. Your Rights Under GDPR (EEA Residents)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of Access — request a copy of the personal data we hold about you.
Right to Rectification — request correction of inaccurate or incomplete data.
Right to Erasure — request deletion of your personal data.
Right to Data Portability — receive your data in a structured, machine-readable format.
Right to Object — object to the processing of your personal data for specific purposes.
Right to Restrict Processing — request that we limit the processing of your data under certain circumstances.

To exercise any of these rights, contact us at support@ghostbi.com. We will respond within 30 days.

7. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

Know — request disclosure of the categories and specific pieces of personal information we have collected.
Delete — request deletion of your personal information.
Opt-Out of Sale — we do not sell your personal information. As such, there is no need to opt out.
Non-Discrimination — we will not discriminate against you for exercising any CCPA rights.

To submit a CCPA request, contact us at support@ghostbi.com.

8. International Data Transfers

Your data is processed and stored in the United States. If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States. We implement appropriate safeguards for international transfers, including standard contractual clauses where applicable.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly. If you believe a child under 16 has provided us with personal information, please contact us at support@ghostbi.com.

11. Cookies

We use essential cookies for authentication and session management. For full details, see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes at least 30 days before they take effect by posting the updated policy on this page and sending an email notification to the address associated with your account. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Ghost BI
Email: support@ghostbi.com
Website: ghostbi.com