Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to operate the Service:

• Account data: email address, display name, and authentication credentials (stored securely via OAuth providers).
• Usage data: search queries, API request logs, and feature interactions used for rate limiting, abuse prevention, and service improvement.
• Payment data: processed through third-party payment providers — we never store card numbers or crypto wallet private keys.

2. How We Use Your Data

Your data is used strictly to:

• Authenticate you and manage your account and plan
• Enforce rate limits and prevent abuse
• Improve service reliability and performance
• Comply with legal obligations when required

We never sell, share, or rent your personal information to third parties for marketing purposes.

3. Data Security

All data is transmitted over encrypted connections (TLS). Account credentials are managed through OAuth — we do not store passwords directly. We employ industry-standard security practices to protect stored data against unauthorized access.

4. Third-Party Providers

GhostEye queries external OSINT providers (breach databases, IP intelligence, social media APIs, etc.) to return results. Search queries you submit may be transmitted to these providers to fulfill your request. We encourage you to review the privacy policies of any external service you interact with through GhostEye.

5. Cookies & Local Storage

GhostEye uses browser local storage to maintain your session and preferences. We do not use tracking cookies or third-party analytics that profile your browsing behavior.

6. Data Retention

Account data is retained as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymized usage logs may be retained for security and service improvement purposes.

7. Your Rights

You have the right to:

• Access, correct, or delete your personal data
• Export your data in a machine-readable format
• Withdraw consent for data processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us through our Discord server or email privacy@ghosteye.org.

8. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or email. Continued use of the Service after changes constitutes acceptance of the updated policy.