Ghost Protocol web app and phone app
- Ghost Protocol posts to Instagram, Facebook, X and LinkedIn through developer apps that you own. To do that for you, we store your app keys and sign-ins, encrypted, on servers Async Systems owns and runs.
- We store the content you upload, your captions and schedules, and the results the platforms report back, only to run the service for you.
- We don't sell your information, don't use it for advertising, and don't train AI on your content.
- If you cancel, you can download your content for 30 days; after that we delete it.
1. Who we are
Ghost Protocol is made by Async Systems LLC ("Async Systems", "we", "us"), 15112 Kentshire Dr, Woodbridge, VA 22191, USA. Questions: [email protected] or (757) 635-6715.
2. What we collect and why
| What | Why |
|---|---|
| Your name, email and password (stored only as a secure hash) | To create and secure your account, and to email you about it |
| Your developer app keys and the sign-ins (access tokens) for Instagram, Facebook, X, LinkedIn and any store you connect | To post for you. Encrypted before they're stored, and used only to do what you set up |
| Content you upload: photos, videos, captions, and products from a store you connect | To post it when and where you choose |
| Your schedules, campaigns, one-time posts, and what was posted when | To run your schedule and show you your history |
| Results the platforms report back (reach, views, engagement) | For your reports and to learn your best posting times |
| Billing details | Handled by Stripe. We never see or store your full card number |
| Phone app notification token | To send you the notifications you've turned on |
| Basic logs (time, action, errors) | To keep the service secure and fix problems. Kept 90 days, then deleted |
What Ghost Protocol learns about your best times and content is calculated for your business only. It is never pooled with other customers' data.
3. Who we share it with
- The platforms you post to (Meta, X and LinkedIn), through your own apps, and only the content you've scheduled.
- Stores you connect (Shopify, WooCommerce or eBay): we read your product listings so they can be posted.
- Service providers we need to run Ghost Protocol: Stripe (payments), SendGrid (email), Cloudflare (the secure connection to our servers), and Expo, Apple and Google (phone app notifications).
- If the law requires it, for example a valid court order.
We don't sell or rent your information, and we don't share it for advertising.
4. Where it's kept and how it's protected
On servers Async Systems owns and runs in the United States. App keys and sign-ins are encrypted before they're stored, and the encryption key is kept apart from the database and its backups. Backups are kept 30 days. Only the Async Systems staff who need access to support you have it.
5. Your choices
- See, change or download your content and settings at any time.
- Disconnect a platform, which deletes its stored sign-in.
- Delete your account from your account settings or the phone app, or by emailing us. We delete your data within 30 days, except what we must keep by law (for example, billing records).
6. Age
You must be 18 or older to create a Ghost Protocol account. If we learn an account belongs to someone younger, we'll close it and delete its information.
7. Changes
If we change this policy in a way that matters, we'll email account holders before the change takes effect.