Privacy — Ghost Writr

Last updated: 12 July 2026

Ghost Writr is operated by nineteen78 Pty. Ltd. ("Ghost Writr", "we", "us", "our"), an Australian company. This policy explains what personal data we collect when you use Ghost Writr, how we use it, who we share it with, and the rights you have over it. Ghost Writr operates a customer's website like a content team — researching, writing, updating, internally linking, and optimising articles automatically, then publishing to connected sites (such as WordPress) with your approval.

1. Information we collect

1.1 Information you provide

Account details — your name and email address, whether you sign up with email or Google sign-in.
Site details — the domains and URLs of the websites you connect to Ghost Writr.
Business knowledge — brand voice, product details, and other business context you give us so Ghost Writr can write on-brand content.
Billing information — handled entirely by Stripe, our payment processor and merchant of record. We never see or store your card number.
Support messages — anything you send us by email or in-app.

1.2 Information generated by using Ghost Writr

Generated content — the articles, edits, internal links, and metadata Ghost Writr produces and publishes on your behalf.
Search performance data — for sites you explicitly connect, we read Google Search Console data (search queries, impressions, clicks, average position) to decide what to write and refresh. See section 1.4 below — this is handled with extra care.
Product usage data — how you use the dashboard, which features you touch, and general usage patterns, collected via privacy-friendly analytics.

1.3 Automatically collected information

When you visit our website or dashboard, we automatically collect standard technical data such as IP address, browser type, device type, and pages viewed, for security, analytics, and troubleshooting.

1.4 Google user data (Search Console)

If you connect a site's Google Search Console account, Ghost Writr requests read-only access using the https://www.googleapis.com/auth/webmasters.readonly scope. We only ever read search-performance data for that site — search queries, impressions, clicks, and average position — and we use it solely to decide what content to create and refresh for that site.

Ghost Writr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We do not sell your Google user data.
We do not use it for advertising of any kind.
We do not use it to train AI or machine-learning models.
We do not transfer it to any third party except as needed to provide or improve the Search Console feature itself.
You can disconnect Google Search Console access for any site at any time from your dashboard, which revokes our access to that data.

1.5 Cookies & tracking

Our marketing site uses Plausible Analytics, which is cookieless and does not track individuals across sites. Our dashboard and marketing site also use Microsoft Clarity (session analytics and recordings — input text is masked by default) and Google Ads (advertising measurement), both of which set cookies. You can control cookies through your browser settings.

2. How we use your information

To operate the core service — researching, writing, updating, and publishing content to your connected sites.
To decide what content to create or refresh, informed by your connected Search Console performance data.
To process payments and manage your subscription.
To provide customer support and respond to your requests.
To send you service emails — for example, when a draft is ready for review.
To monitor, secure, and improve the reliability of the product.
To measure and improve our marketing, using aggregated, privacy-respecting analytics.

3. Storage & security

Your data is stored with Cloudflare (application hosting, object storage, and CDN) and Neon (our Postgres database provider). We use industry-standard safeguards — encryption in transit, access controls, and monitoring — to protect your data, and we monitor for errors and anomalies via Sentry and for uptime via Better Stack. No method of storage or transmission is 100% secure, but we work to protect your information to a high standard.

4. Third-party services

We rely on a small set of specialist providers (sub-processors) to run Ghost Writr. Each only receives the data it needs to perform its function:

Cloudflare — application hosting, object storage, and content delivery.
Neon — our primary database.
Anthropic — AI text generation for article research and writing.
FAL — AI image generation for article visuals.
Firecrawl — crawling and extracting content from your website for research.
Google — Search Console API (read-only performance data) and Google sign-in.
Stripe — payment processing and sales tax, as merchant of record. Stripe holds your payment details, not us.
Resend — transactional email delivery (draft-ready notices, receipts, account emails).
Plausible — cookieless, privacy-friendly website analytics.
Microsoft Clarity — session analytics and recordings to understand how the dashboard is used.
Google Ads — advertising measurement for our own marketing.
Sentry — error monitoring so we can find and fix bugs quickly.
Better Stack — uptime monitoring for the service.
DataForSEO — keyword and search-results data used for content research.

Each provider is bound by its own terms and only processes data as needed to deliver its part of the service. We do not sell your personal data to anyone.

5. Data retention

We keep your account and site data for as long as your account is active, so Ghost Writr can keep researching, writing, and publishing on your behalf. If you ask us to delete your account, we delete your account and site data within a reasonable period, other than records we're legally required to keep (for example, billing records). Analytics data is aggregated and anonymised over time and is not tied back to an individual account.

6. Legal basis for processing

We process your data to perform our contract with you (providing the service you've subscribed to), based on your consent (for example, when you connect Google Search Console), and based on our legitimate interests in operating, securing, and improving Ghost Writr.

7. Your rights

You can ask us at any time to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data, subject to legal record-keeping requirements.
Export your data in a portable format.
Object to certain processing.
Withdraw consent — for example, by disconnecting Google Search Console at any time.

To exercise any of these rights, email hello@ghostwritr.io.

8. Children's privacy

Ghost Writr is a business tool and is not directed at, or intended for use by, anyone under 18. We do not knowingly collect personal data from children.

9. International transfers

We're based in Australia, and your data may be processed in Australia and in other countries where our service providers operate (including the United States). Wherever your data is processed, we require our providers to protect it to a standard consistent with this policy.

10. Changes to this policy

We may update this policy as Ghost Writr evolves. If we make a material change, we'll update the date at the top of this page and, where appropriate, let you know directly.

11. Contact us

Questions about this policy or your data? Email hello@ghostwritr.io or visit ghostwritr.io.

12. Consent

By creating a Ghost Writr account and connecting a site, you consent to the collection and use of your information as described in this policy.

Privacy policy.