Who we are
SummonGhost, Inc., a Delaware corporation ("SummonGhost", "we"), runs summonghost.com and the SummonGhost hosted desktop service. This policy explains what we collect when you use them and what we do with it.
Ghost, the open-source app you install on your own computer, is separate. Using it locally does not send your files or conversations to us.
Data we process
- Invite requests: the email address you give us, when you asked, and a one-way hash of your IP address to limit repeated requests.
- Account: your name, email address and profile image from your Google sign-in, Google's sign-in tokens, and session records including IP address and browser details.
- Your desktop: the files, apps and settings on the cloud computer we run for you.
- Conversations and Ghost's work: your messages to Ghost, its replies, the notes and instructions you give it, schedules, and the results of what it does on your desktop, including command output and screenshots.
- Connections you configure: settings for tools and services you connect Ghost to, which can include keys or tokens you supply.
- Billing: your subscription status and the customer and subscription identifiers from our payment processor. We do not receive or store your full card details.
- Website and diagnostics: request, security and error logs needed to run and protect the service.
- Messages: what you send to our support, privacy or legal addresses.
Your browser also keeps a local copy of your conversations and drafts so the app works quickly; signing out clears it.
We use only the cookies needed for sign-in and security. We do not use advertising cookies and we do not sell or share personal data for advertising.
Why we use it
To provide the service you signed up for: run your desktop, let Ghost act on your instructions, bill your subscription, keep accounts and the service secure, answer support requests, and meet legal obligations. We do not use your desktop contents or conversations to train AI models.
Who can access it
Our systems can reach your desktop so the service can operate it. We access your desktop or conversations only to run and secure the service, to help when you ask us to, or when the law requires it.
We share data only with providers that run the service for us:
- Cloudflare for hosting, storage, security, sending sign-in email and running the AI models Ghost uses.
- Cloud server providers that host the computers behind your desktop.
- Stripe for payments and subscription management.
- Google to sign you in, if you choose Google sign-in.
- Authorities or advisers when the law requires it or to protect legal rights.
Services that you connect Ghost to, or that you use from your desktop, receive what you send them under their own terms and policies.
Retention and deletion
We keep your account data while your account is open. When a subscription ends or a payment fails, your desktop is suspended, and it is deleted with its files 30 days later unless you resume. To delete your account and its data, email us; we will confirm when it is done. Logs and backups made in the normal course of running the service may take longer to expire, and records we must keep by law, such as billing records, are kept for the period the law requires.
Your choices
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal data. Email us to make a request. You may also complain to your local data protection authority.
Security and transfers
We use HTTPS, access controls and data minimization. No system is completely secure. We and our providers may process data in the United States and other countries, using the safeguards applicable law provides.
Children
The service is not directed to children under 13, and we do not knowingly collect their personal data.
Google API data
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Changes
We will update this page when our practices change, and tell account holders by email about material changes. The date above shows the latest version.
Contact
SummonGhost, Inc. ยท Privacy requests: privacy@summonghost.com