Privacy Policy

This Privacy Policy explains how Ghost Revenue (Spatari Management Î.I., Moldova) collects and uses personal information through ghostrev.io and related service delivery.

Contact for privacy/legal requests: legal@ghostrev.io

1) What we collect

We collect only what we need to operate and deliver the Services. This may include:

Information you provide

• Name
• Email address
• Phone number
• Social handles (for example: Instagram handle) when booking calls or onboarding
• Messages and communication content (email, DMs, call notes)
• Client-provided business information relevant to delivery (for example: operational metrics, revenue figures, team/process details), if you share it voluntarily

Payment information

• Payments are processed by Whop as Merchant of Record. We do not collect or store your full payment card details. Whop may provide us limited transaction metadata required for service delivery and access management.

Booking data

When you book a call through our scheduling system, we receive your name, email address, and booking details (event type, date, and time) from Cal.com. This is stored internally and linked to your visit session so we can understand which traffic sources lead to bookings.

Technical data

We run our own first-party website analytics - no third-party tracking services. When you visit the site, we record page views, scroll depth, button clicks, outbound link clicks, referral source, UTM campaign parameters, device type, and country. If you arrive from a paid ad (Google, Meta, TikTok, or Microsoft), we also capture the ad click ID from your URL to measure campaign performance.

A random visitor ID is stored in your browser's local storage, and a session ID in session storage. We also store first-touch and last-touch attribution (the source and campaign of your first and most recent visit) in local storage. None of this is linked to your name, email, or any personal account. We do not use it for ad targeting or personal profiling. We may also process basic technical logs through hosting and security providers to keep the site secure and functional.

We may also reconstruct a full timeline of a visitor's activity on the site - pages viewed, buttons clicked, scroll depth, calendar interactions, and any bookings made - tied to that visitor's random ID. If a booking occurred, the timeline will include the name and email submitted at booking. This is used internally only, to understand how people move through the site before deciding to book.

2) Cookies

We do not use advertising cookies.

For functionality and analytics, we use browser local storage and session storage. These store a random visitor ID, session ID, and attribution data (referral source, campaign, and ad click IDs from your first and most recent visit). They are used for site measurement only, not behavioral advertising.

Our analytics respects your browser's Do Not Track (DNT) signal. If DNT is enabled, no analytics data is collected or stored. You may also opt out at any time by contacting us at support@ghostrev.io.

3) How we use information

We use information to:

• Provide and deliver the Services
• Onboard clients and manage access
• Communicate with you (support and project updates)
• Maintain records for operations, accounting, and receipts/invoices where applicable
• Improve internal processes and service quality
• Protect against abuse, fraud, and security threats
• Send marketing communications only if you request them or opt in (not currently active, but may exist later)

4) Legal bases (EEA/UK users)

If GDPR applies, we process personal data on one or more of these bases:

• Contract performance (to deliver the Services)
• Legitimate interests (operating, securing, and improving the Site and Services)
• Consent (when you opt in to marketing, if enabled)
• Legal obligations (recordkeeping where required)

Our website analytics is designed to be anonymous and generally treated as non-personal data. Where any law treats specific technical elements as personal data, we apply the relevant legal basis and protections.

5) Sharing and disclosures

We do not sell personal data.

We may share information with service providers (“processors”) that help us operate, such as:

• Payment processing and Merchant of Record: Whop
• Scheduling and booking: Cal.com, Calendly
• Collaboration and delivery tools: Discord, Notion, Whatsapp, Slack
• Automation/integration tools: Zapier, Make
• Hosting and infrastructure: Vercel, Neon, Supabase, Cloudflare
• Communication tools and email services used to respond and deliver support

We may also disclose information if required by law, to enforce our terms, or to protect rights, safety, and security.

Contractors: We may work with contractors. By default, they do not access client personal data beyond minimal public identifiers (for example: name and social handle) unless strictly required for delivery and authorized by us.

6) International data transfers

Data may be processed in countries outside Moldova depending on where our providers operate (often EU or US). When required, we rely on appropriate safeguards provided by those vendors (for example, standard contractual clauses).

7) Data retention

We keep information:

• As long as needed to provide Services and maintain business records
• Potentially long-term unless you request deletion, correction, or restriction

If you request deletion, we will delete or anonymize what we reasonably can, unless we must keep certain records for legal, security, or legitimate business purposes.

8) Security

We use reasonable security measures such as:

• 2FA where available
• Access control and permission hierarchies
• Limiting team access based on roles

No method of transmission or storage is perfectly secure, but we take protection seriously.

9) Your rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Object to or restrict processing
• Receive a copy of data (portability)

To request any of the above, email legal@ghostrev.io. We may ask you to verify your identity.

10) Children

We do not knowingly collect personal data from children under 13. We also do not offer Services to individuals under 18.

11) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and update the “Last updated” date. If changes are material, we will take reasonable steps to notify you.

12) Contact

For privacy/legal requests: legal@ghostrev.io
For general support: support@ghostrev.io