Overview
GhostBust ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use ghostbust.us and its associated services.
The short version: We collect what we need to run the platform. We do not sell your data. We do not share your personal information with advertisers. You can request deletion of your data at any time.
What We Collect
We collect information in the following categories:
| CATEGORY | EXAMPLES | HOW COLLECTED |
|---|---|---|
| Account Info | Email address, username, password (hashed) | Registration form |
| Profile Data | Display name, bio, location/region, avatar, banner image | Profile settings |
| Usage Data | Ghost scans, search history, saved searches, application records | Platform activity |
| Community Content | Posts, comments, direct messages | User-submitted |
| Resume Data | Uploaded resume files and AI analysis results | Career HQ uploads |
| Newsletter subscriptions | Landing page form | |
| Technical Data | IP address, browser type, device info, page views | Automatic / Vercel logs |
How We Use Data
We use your data to:
- Provide and operate the GhostBust platform and its features
- Authenticate your account and enforce usage limits by tier
- Process job listing data through AI for ghost score analysis
- Deliver Career HQ AI features (resume review, coaching, job analysis)
- Send transactional emails (account confirmation, password reset)
- Send newsletter and onboarding emails (only if you opted in)
- Improve platform features and fix bugs using aggregated usage patterns
- Comply with legal obligations
We do not use your data to serve you ads, build advertising profiles, or sell insights to third parties.
Data Storage
Your data is stored using Supabase, a secure cloud database platform hosted on AWS infrastructure. Specific storage details:
- Profile avatars and banners: Stored in Supabase Storage (public bucket)
- Resume files: Stored in Supabase Storage (private bucket — accessible only by you and our AI processing)
- Account and usage data: Stored in Supabase PostgreSQL database
- Messages and community content: Stored in Supabase PostgreSQL database
Our platform is hosted on Vercel. Vercel may retain standard server logs for operational and security purposes in accordance with their own privacy policy.
AI Processing
GhostBust uses Anthropic's Claude AI to power ghost job detection and Career HQ features. When you use these features:
- Job posting text you submit is sent to Anthropic's API for analysis
- Resume content you upload may be sent to Anthropic's API for Career HQ analysis
- Anthropic processes this data in accordance with their Privacy Policy
We do not permanently store the raw text you submit for AI analysis beyond what is necessary to display your results. AI outputs (ghost scores, analysis summaries) are stored in your account to provide scan history.
Anthropic's enterprise API usage policy prohibits the use of API inputs and outputs to train their models without consent. Your submitted content is not used to train AI models.
Email Communications
We use Resend to manage and send emails. We send the following types of emails:
- Transactional: Account creation confirmations, password resets. These cannot be opted out of.
- Onboarding sequence: A series of welcome emails sent in the days after you create an account. You can unsubscribe at any time using the link in any email.
- The GhostBust Monthly: Our newsletter, sent only to users who explicitly subscribed via the landing page form.
All marketing emails include an unsubscribe link. We honor unsubscribe requests promptly.
Your Rights
You have the following rights regarding your personal data:
- Access: You can view your profile data, scan history, and application records within the platform at any time.
- Correction: You can update your profile information at any time through your profile settings.
- Deletion: You can delete your account through your profile settings. Upon deletion, your personal data will be removed from our active databases within 30 days. Some data may be retained in backups for up to 90 days.
- Data Portability: You may request a copy of your data by contacting us at the email below.
- Opt-out of emails: Use the unsubscribe link in any marketing email, or contact us directly.
If you are located in the European Union or California, you may have additional rights under GDPR or CCPA respectively. Contact us to exercise these rights.
Children's Privacy
GhostBust is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has created an account, please contact us immediately.
Security
We implement reasonable security measures to protect your data, including:
- All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
- Passwords are hashed and never stored in plaintext (handled by Supabase Auth)
- Resume files are stored in a private Supabase Storage bucket, inaccessible to other users
- API keys and sensitive credentials are stored as environment variables; where client-side AI features are used, keys are scoped to read-only API access with no access to user data or billing
No system is completely secure. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.
Policy Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered users via email. Your continued use of GhostBust after changes take effect constitutes acceptance of the revised policy.
Contact
For privacy-related questions, data requests, or to exercise your rights, contact us at:
GhostBust — Privacy
Email: ghostbustofficial@gmail.com
Website: ghostbust.us
We will respond to all privacy requests within 30 days.