Privacy Policy

We process your account details and the information you save in Ghosted, including applications, CVs, notes, contacts and interviews.

We also process support messages, purchase records and technical information needed to operate and protect the service.

The operator identified in our Terms of Service is responsible for the personal data we control.

We use this information to provide your account, save your work, deliver requested features, manage paid access and answer support requests.

Where applicable, we rely on providing our service, legitimate interests such as security and support, legal obligations, or consent where required.

We do not sell your personal data.

AI features send relevant content, such as CV information or job descriptions, to an external AI provider for processing.

Email forwarding processes the messages your filter sends to Ghosted. It does not give us access to your full inbox. We store extracted application details rather than the full forwarded message body. Forwarding does not delete the original email from your account.

Optional Google connections require separate permission. You can revoke these permissions through your Google Account.

Google connections

• Sign-in asks Google only for your basic profile: name, email address and picture.
• Sending from Gmail, if you turn it on, lets Ghosted send the cover letters you choose to the address you type. It can't read, list or delete your mail. The access token is stored encrypted.
• Google Calendar, if you turn it on, lets Ghosted add, move or delete the interview events it made, and look up an invite you already have so it isn't added twice. It doesn't read or change anything else in your calendar.
• Reading Gmail is an early trial, open only to invited accounts. If you connect it, Ghosted can read the email in that Gmail account. Google can't limit this to job emails, so Ghosted downloads only the ones that look like application news: from job platforms, from people you've heard from about a job, or with subjects like “your application”. An AI provider reads those to work out what they mean for your applications. We keep the sender, the subject and what each one says, never the email itself, and the access token is stored encrypted. It can't send, delete or change your email. Disconnecting stops the reading; removing Ghosted in your Google Account takes back the permission.

Ghosted's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The browser extension

• It reads only the tab you're on, only when you click it, and keeps nothing in your browser.
• When you open it, it sends that page's address to Ghosted to check whether the job is already saved.
• When you press Save on LinkedIn or Indeed, it sends only the job: title, company, location, description, logo and the hiring team listed on it. Your feed, messages and profile aren't sent. On other sites it sends the page without its styles, images and scripts. The page itself isn't stored.
• It signs in with your Ghosted session and has no password of its own.

We use service providers for hosting, storage, email, AI processing, security and analytics. They process information needed for their role, which may involve processing outside your country.

Paddle handles purchases and payment information under its own privacy notice. We receive information needed to manage your paid access.

If you create a sharing or calendar link, anyone holding it may access the information it contains. You can revoke or replace these links through the available controls.

We use cookies and browser storage for sign-in, preferences and other essential functions: keeping you signed in, your theme and board settings, cards saved before you sign up, and your analytics choice. Paddle's checkout stores what it needs when you pay.

Page-view and performance analytics are optional and off until you accept them. Vercel Web Analytics and Speed Insights count visits and page speed using the page's route, never ids or anything after a ?, and set no cookies. On the home and pricing pages, Google Analytics (through Google Tag Manager) shows which campaigns bring visitors. It sets _ga cookies for up to 180 days, Google keeps the event data for 2 months, and its advertising features are off. We don't use advertising trackers.

Your choice is kept in this browser for 180 days. Change it any time in Cookie preferences. Saying no stops further analytics and deletes Google's cookies; visits already counted stay counted.

Account content remains available while your account is active. Ending Plus does not delete your work.

Account deletion removes associated content from the active service. Backup copies, security records and legally required payment records may remain for their applicable retention periods. Service providers may have separate retention requirements.

You can edit your information, disconnect integrations, export your work and request account deletion.

Depending on applicable law, you may also have rights to access, correction, erasure, portability, restriction, objection and withdrawal of consent, and to complain to a data-protection authority.

Contact support@ghostednow.com to ask about your data, our providers or applicable transfer safeguards. We may need to verify your identity before fulfilling a request.

We take measures to protect personal information, but no online service can guarantee absolute security.

Ghosted is intended for people aged 16 and over. We will update this policy when our practices change and provide additional notice where required.