1. Introduction
This Privacy Policy explains how GhostPilot (“GhostPilot,” “we,” “us,” or “our”), a product operated by NusqLab, collects, uses, discloses, and safeguards your information when you use our application at ghostpilot.nusqlab.comand related services (the “Service”).
By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information we collect
Account information
When you register, we collect your email address and a securely hashed version of your password. We never store your password in plain text.
LinkedIn account data
When you connect LinkedIn, we use LinkedIn's official OAuth flow. We receive and store an access token, a refresh token (where applicable), your LinkedIn member identifier, and basic profile details (such as your display name) needed to publish on your behalf. We never see or store your LinkedIn password.
Content you create
We store the brand/voice profiles, prompts, generated drafts, scheduled posts, and publishing history you create in the Service so the product can function and improve your results.
AI provider credentials
If you connect your own AI provider keys (“bring your own key”), we store them to route your generation requests. These keys are used only to fulfill your requests.
Usage data
We collect limited technical and usage information — such as log data, device/browser type, and feature usage — to operate, secure, and improve the Service.
3. How we use your information
- Provide, operate, and maintain the Service.
- Generate content in your voice and publish it to LinkedIn at your direction.
- Authenticate you and keep your account and connections secure.
- Respond to support requests and communicate service-related notices.
- Diagnose problems, prevent abuse, and improve product quality.
- Comply with legal obligations.
4. Third-party services
The Service relies on third parties to function. Your use of these integrations is also governed by their respective terms and policies:
- LinkedIn — publishing and account connection via the official LinkedIn API.
- AI providers— the model provider you select (or GhostPilot's default) processes the prompts and content needed to generate your posts.
- Infrastructure providers — hosting, storage, and security services used to run the Service.
We do not sell your personal information, and we do not share your content with third parties except as needed to provide the Service or as required by law.
5. Data storage & security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and access controls on tokens and credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you of material incidents where required.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. You can delete individual content at any time, and you may request deletion of your account and associated data by contacting us. We may retain limited records where required for legal, security, or accounting purposes.
7. Your rights & choices
Depending on your location, you may have the right to:
- Access, correct, or export the personal data we hold about you.
- Delete your account and associated data.
- Disconnect LinkedIn or remove your AI provider keys at any time.
- Object to or restrict certain processing.
To exercise any of these rights, email us at [email protected]. You can also revoke GhostPilot's access from your LinkedIn account settings at any time.
8. Cookies & local storage
We use essential cookies and browser local storage to keep you signed in and to remember preferences such as your light/dark theme. We do not use these for cross-site advertising.
9. Children's privacy
The Service is not directed to individuals under 16, and we do not knowingly collect data from them. If you believe a minor has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “effective” date above. Material changes will be communicated where appropriate.
11. Contact us
For any privacy questions or requests, contact NusqLab at [email protected].