Privacy Policy

Our Commitment to Your Privacy

At GhostPen, we understand that you're trusting us with access to your email communications. This is a responsibility we take extremely seriously. This Privacy Policy explains exactly what data we collect, how we use it, and most importantly, what we don't do with your information.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address - Used for authentication and account recovery
• Firebase authentication token - Secure authentication (we never see your password)

1.2 Email Content (Temporary Processing Only)

When you click "AI Generate" on an email, we temporarily process:

• The email thread you're replying to
• The recipient's email address
• The subject line
• Any content you've already typed in the compose window

1.3 Writing Patterns (Optional Feature)

If you enable the "Learn My Writing Style" feature (Pro and Business plans), we analyze your sent emails to extract writing patterns such as:

• Common phrases you use
• Your typical email structure
• Tone preferences
• Greeting and sign-off styles

These patterns are stored as anonymized metadata (not actual email content) and can be deleted at any time.

1.4 Relationship Data (Optional Feature)

If you enable relationship intelligence (Pro and Business plans), we track:

• Contact email addresses you communicate with
• Communication frequency (number of emails exchanged)
• Tone patterns with each contact

This helps us personalize responses based on your relationship with each contact. This data can be deleted at any time.

1.5 Usage Data

We collect anonymized usage statistics including:

• Number of AI responses generated per day
• Feature usage (which tones are selected)
• Error logs (to improve the product)

2. How We Use Your Information

Data Type	Purpose	Retention
Account email	Authentication, account recovery, service communications	Until account deletion
Email content	Generate AI responses in real-time	Not stored - processed and immediately discarded
Writing patterns	Personalize AI responses to match your style	Until you delete or close account
Relationship data	Adjust tone based on contact relationships	Until you delete or close account
Usage statistics	Enforce plan limits, improve product	Anonymized, kept for analytics

3. What We Do NOT Do

We want to be crystal clear about what we will never do with your data:

• We do NOT store your email content - Ever. Period.
• We do NOT sell your data - To anyone, for any reason
• We do NOT share data with advertisers - We have no advertising
• We do NOT use your emails to train AI models - Your data is not used to improve AI systems
• We do NOT read your emails - Processing is fully automated
• We do NOT track your browsing - Our extension only activates in Gmail

4. Third-Party Services

We use the following third-party services to provide EmailAI:

4.1 Firebase (Google)

Used for secure authentication. Firebase handles your login credentials - we never see or store your password. Firebase Privacy Policy

4.2 OpenRouter / OpenAI

Our AI responses are generated using language models accessed through OpenRouter. Email content is sent to these services for processing but is not stored or used for training. OpenRouter Privacy Policy

4.3 Stripe (for paid plans)

Payment processing is handled by Stripe. We never see or store your credit card information. Stripe Privacy Policy

5. Data Security

We implement industry-standard security measures:

• All data transmission uses HTTPS/TLS encryption
• Authentication tokens expire after 1 hour and are automatically refreshed
• Writing patterns and relationship data are encrypted at rest
• Our servers are protected by Cloudflare
• Database credentials are encrypted and never exposed to the extension

6. Your Rights and Controls

You have full control over your data:

6.1 Access Your Data

You can request a copy of all data we have about you at any time by emailing us.

6.2 Delete Your Data

You can request complete deletion of your account and all associated data. We will process deletion requests within 30 days.

6.3 Disable Features

You can disable writing style learning and relationship intelligence at any time through the extension settings. Existing data for these features will be deleted upon disabling.

6.4 Export Your Data

You can request an export of your stored data (writing patterns, relationship data) in a machine-readable format.

7. GDPR Compliance (EU Users)

If you're located in the European Union, you have additional rights under GDPR:

• Right to access - Request a copy of your personal data
• Right to rectification - Correct inaccurate personal data
• Right to erasure - Request deletion of your personal data
• Right to data portability - Receive your data in a portable format
• Right to object - Object to certain processing of your data

To exercise any of these rights, please contact us at the email below.

8. CCPA Compliance (California Users)

If you're a California resident, you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt-out of the sale of personal information (we don't sell data, so this doesn't apply)
• Non-discrimination for exercising your rights

9. Children's Privacy

EmailAI is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Sending an email to your registered address
• Displaying a notice in the extension
• Updating the "Last updated" date at the top of this page

We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Summary