Privacy Policy

Overview

Ghost Agent ("we," "us," "our") operates the theghostagent.com platform. This privacy policy explains how we collect, use, and protect your information when you use our service.

The short version: Your data is yours. We don't sell it, share it with advertisers, or use it to train AI models. We collect only what's necessary to provide the service.

Information We Collect

Account Information

When you sign in with Google OAuth, we receive your name, email address, and profile photo. We use this to create and manage your account.

Artist & Booking Data

Information you provide about your performing career: artist name, genre, city, bio, venue contacts, deal details, booking history, calendar availability, and fan subscriber lists. This data is stored securely in Google Cloud Firestore.

Generated Content

Images, videos, promotional copy, and other content created through Creator Studio or campaign tools. Generated media is stored in Google Cloud Storage and associated with your artist account.

Usage Data

We collect basic usage analytics: pages visited, features used, and API call counts (for quota tracking). We do not use third-party tracking scripts or sell this data.

BYOK (Bring Your Own Key)

If you provide your own Google AI API key, it is encrypted using Google Cloud KMS and stored in Firestore. Your key is only used to make API calls on your behalf and is never shared or logged.

How We Use Your Information

• Provide the service: Manage your booking pipeline, generate content, send outbound pitches, and track analytics.
• Process payments: Stripe handles payment processing. We store your Stripe customer ID and subscription status but never see or store your credit card number.
• Send transactional emails: Booking confirmations, follow-ups, and pitch emails sent on your behalf through Postmark.
• Improve the platform: Aggregate, anonymized usage patterns help us prioritize features. Individual data is never used for this purpose.

What We Don't Do

• We never sell your personal data or artist information.
• We never share your data with advertisers or data brokers.
• We never use your content or data to train AI models.
• We never access your Google account beyond the OAuth scopes you authorize.

AI Processing

Ghost Agent uses Google's Gemini, Imagen, and Veo AI models to generate content and process booking data. When you use these features:

• Your prompts and context are sent to Google's AI APIs to generate responses.
• Google's AI API terms apply to this processing. Google does not use API data to train models.
• Generated content is stored in your account and owned by you.

Data Storage & Security

• Infrastructure: Google Cloud Platform (Cloud Run, Firestore, Cloud Storage) in the us-central1 region.
• Encryption: All data is encrypted at rest (Google-managed keys) and in transit (TLS 1.3).
• Secrets: API keys and credentials are stored in Google Cloud Secret Manager or encrypted with Cloud KMS.
• Access: Platform access requires Google OAuth authentication. Role-based access controls restrict data visibility.

Data Retention

Your data is retained as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Third-Party Services

Your Rights

You can:

• Access your data at any time through the dashboard.
• Export your data (deal CSVs, media downloads).
• Delete your account and associated data by contacting us.
• Revoke OAuth connections through the Settings page.

Children's Privacy

Ghost Agent is not intended for users under 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via email or in-app notification. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy? Email us at hello@theghostagent.com.