Privacy Policy

Last updated: August 20, 2026

1. What Ghost does

Ghost is a desktop application that listens to audio from your meetings, transcribes speech in real-time, and surfaces AI-generated responses. It runs locally on your device and communicates with our servers only to process transcription and generate answers.

2. Data we collect

  • →Account data: Your email address and hashed password, created when you register.
  • →Audio (not stored): Audio is captured on your device, sent to our servers for transcription, and immediately discarded. We do not store, log, or retain any audio recordings.
  • →Transcriptions (not stored): The text produced from your audio is used only to generate a response and is not saved on our servers.
  • →Usage data: Session duration, credit usage, and timestamps — used to operate the credit system and prevent abuse.
  • →Payment data: Handled entirely by Stripe. We never see or store your card details.

3. How we use your data

We use the data listed above solely to:

  • Authenticate your account and maintain your session
  • Process audio and return AI-generated responses
  • Track and deduct session credits
  • Send transactional emails (verification, password reset)
  • Detect and prevent abuse of the platform

We do not sell your data. We do not use your data for advertising.

4. Third-party services

Ghost uses the following third-party services to operate:

  • AI providers — for speech transcription and answer generation. Audio and transcription data is transmitted to these providers under their data processing agreements.
  • Stripe — for payment processing. Governed by Stripe's Privacy Policy.

5. Data retention

Your account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Upon deletion, your email and usage records are permanently removed within 30 days.

6. Security

All data transmitted between the Ghost app and our servers is encrypted in transit (TLS). Passwords are stored as bcrypt hashes and are never readable by us.

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Withdraw consent at any time by stopping use of the service

8. Contact

For any privacy-related questions or requests, contact us at support@mad-bot.com.