Privacy Policy

Ghosty Studio ("Ghosty", "we"), based in Mexico and reachable at hola@ghosty.studio, is the controller of your personal data under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

1. What we collect

• Identity and contact: name, email address and, if you provide them, phone number and organization.
• Account and billing: your plan, payment history and tax details when you request an invoice.
• Content you upload: messages, documents, files and the instructions you give your agents.
• Technical data: IP address, browser type, operating system, pages visited and access logs.
• Connected services: when you link an integration, we receive only the data you authorize in that connection.

We do not deliberately collect sensitive personal data. If you upload documents containing it, that data is handled under the security measures described below and remains your responsibility as its owner or processor.

2. How we use it

Primary purposes, required to deliver the service:

• Create and administer your account and workspace.
• Run the agents, documents, calls and other features you request.
• Measure usage for your plan and billing.
• Provide support and answer your requests.
• Detect abuse and fraud and protect the security of the platform.
• Comply with legal, tax and contractual obligations.

Secondary purposes, which you may decline without affecting the service: product news, educational content and surveys. To opt out, write to hola@ghosty.studio or use the unsubscribe link in any email.

3. Your content does not train models

We do not use the content of your conversations, documents or files to train AI models, ours or anyone else's. Your content is processed solely to deliver the service you asked for.

4. Who we share it with

We do not sell your personal data. We share it only with the providers that let us operate, and only as far as necessary:

• AI model providers, to process your agents' turns: Anthropic (Claude) by default and, if you configure your own key, OpenAI, Google (Gemini) or DeepSeek. They receive only what you send to the agent — your messages, the files you attach and the instructions you give it — plus the conversation history needed for context; never your name, email or device identifiers.
• Infrastructure and storage, to host the application and your files.
• Payment processors, where applicable, to charge your plan.
• Competent authorities, upon a duly founded and motivated request.

Some of these providers are located outside Mexico. By using the service you consent to those transfers, which are governed by the corresponding data processing agreements.

5. Retention

We keep your data while your account is active and, after cancellation, for as long as legal and tax obligations require. You may request deletion of your workspace by writing to us; removal from backups can take up to 90 additional days.

6. Security

We apply reasonable administrative, technical and physical safeguards: encryption in transit, per-workspace isolation, role-based access control and logging of sensitive operations. No system is infallible; should a breach significantly affect your rights, we will notify you without delay.

7. Cookies

We use first-party cookies that are strictly necessary to keep you signed in and remember preferences such as language. You can block them in your browser, but you will not be able to sign in.

8. Your rights

You have the right to access, rectify, cancel or object to the processing of your data (ARCO rights), to withdraw your consent and to limit the use or disclosure of your data. Send your request to hola@ghosty.studio stating your name, the email you registered with and which right you wish to exercise. We will respond within 20 business days.

9. Minors

The service is not directed to anyone under 18 and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy. The current version is always published on this page with its update date; if a change is substantial, we will notify you by email or in the application.