Privacy Policy

1. Information We Collect

Personal Information

When you create an account or use our services, we collect:

• Name and email address
• Professional information (job title, company, industry)
• LinkedIn profile information (when you choose to connect)
• Responses to exercises and assessments
• Profile photos and other uploaded content

Automatically Collected Information

We automatically collect certain information when you use Ghostart:

• Usage data (pages visited, features used, time spent)
• Device information (browser type, operating system)
• IP address and location data
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to:

• Provide and improve our services
• Generate personalized insights and recommendations
• Analyze your LinkedIn profile and provide optimization suggestions
• Train and improve our AI algorithms (in aggregated, anonymized form)
• Communicate with you about your account and our services
• Ensure platform security and prevent fraud
• Comply with legal obligations

3. AI and Machine Learning

Ghostart uses artificial intelligence to provide personalized insights and recommendations. Here's how:

• Your exercise responses are analyzed to generate insights about your personal brand
• LinkedIn profile data is processed to provide optimization recommendations
• Usage patterns help us improve our AI models and platform features
• All AI processing is designed to benefit you directly through better recommendations

We do not sell your personal data or use it for advertising purposes. AI processing is focused solely on improving your experience and providing valuable insights.

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information only in these limited circumstances:

• Service Providers: Trusted third parties who help us operate our platform (hosting, analytics, email services)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption of data in transit and at rest
• Regular security audits and updates
• Access controls and authentication measures
• Secure cloud infrastructure with reputable providers

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to using industry-standard practices.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your personal information
• Export: Download your data in a portable format
• Restrict: Limit how we process your information
• Object: Opt out of certain types of processing

To exercise these rights, please contact us at hello@wearetogethr.io. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze how you use our platform
• Improve our services and user experience
• Ensure security and prevent fraud

You can control cookies through your browser settings, but some features may not work properly if you disable cookies.

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Improve our services and AI models

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we need to retain it for legal reasons.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your information receives adequate protection wherever it is processed.

10. Children's Privacy

Ghostart is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Your continued use of Ghostart after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Legal Basis for Processing (GDPR)

If you are in the European Union, our legal basis for processing your personal information includes:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To provide our services and fulfill our agreement with you
• Legitimate Interest: To improve our services, ensure security, and communicate with you
• Legal Obligation: To comply with applicable laws and regulations