Privacy policy
Last updated: 17 July 2026
The short version. We store a random install identifier, usage counts and (for paid users) a derived summary of your writing style. We never store LinkedIn content, the text you generate from, or the drafts you receive. Text you submit is passed transiently to Anthropic's API to produce suggestions and is not written to our database. Stripe handles payments. There is no tracking, no analytics and no advertising, on this site or in the extension. If you choose to give your email for bonus generations, we add you to an occasional update list you can leave at any time.
1. Who we are
Reply Ghost is operated by a sole trader based in Prestatyn, United Kingdom, who is the data controller for the personal data described in this policy. Contact for anything in this policy, including data requests: x4f9sj5662@privaterelay.appleid.com.
2. What we collect and why
| Data | What it is | Why we keep it |
|---|---|---|
| Install identifier | A random identifier generated by our server when the extension first registers. It contains nothing about you or your device. | To count free tier usage and apply rate limits. |
| Connection IP address | The network address your request arrives from. It is held in memory only, to apply a short term rate limit, and is not written to our product database. Standard web server logs may record it briefly for security and are rotated. | Rate limiting and abuse prevention. |
| Activation key (hashed) | For paid plans, a key shown to you once at purchase. We store only a cryptographic hash of it, never the key itself. | To recognise paid accounts. A hash cannot be reversed into the key. |
| Usage records | Which mode was used (draft, reply, comment), which model, token counts and a timestamp. These records have no content fields; the database cannot hold your text. | To enforce plan limits and understand our model costs. |
| Voice profile | For paid users who train a voice: a derived summary of your writing style (typical length, rhythm, vocabulary, habits). The posts you pasted to create it are not retained. | To generate drafts that sound like you. You can delete profiles at any time. |
| Billing records | Stripe customer and subscription identifiers, your plan and its status. Card details go directly to Stripe and never reach our servers. | To know which plan you are on. |
| Marketing email (optional) | If you choose to give your email address in exchange for bonus free generations, we store the address and the month the bonus was granted. This is entirely optional; the free tier works without it. | To grant the bonus once, and to send occasional product updates. You can unsubscribe at any time. |
| Support email | Anything you send to our contact address. | To answer you. |
3. What we never collect
- LinkedIn content. Nothing from LinkedIn is stored on our servers. When you ask for a reply to a post, the text reaches us only because you clicked a button or pasted it, it is used for that one generation, and it is not written to our database.
- Cookies. The extension does not read, write or transmit cookies, from LinkedIn or anywhere else. This website sets no cookies either.
- Browsing history, contacts, connection lists or profile data.
- Analytics or tracking of any kind. No pixels, no fingerprinting, no third party scripts. This page makes no network requests to anyone.
4. How generation works
When you request a draft, reply or comment, the text you provided (your topic, or the post you are responding to) is sent from the extension to our server, and from our server to Anthropic's API, which produces the suggestions. This is transient processing: the text exists in memory for the duration of the request and is not saved by us. Anthropic processes API inputs under its commercial terms and does not use them to train its models.
5. Voice training
If you train a voice profile, you paste 20 to 50 of your own posts. They are sent once to the model to produce a style summary, and the summary is what we store. The raw posts are discarded after processing. If any of those posts contain personal data about other people, you are responsible for having the right to use them this way; in practice a style summary retains phrasing habits, not facts about individuals.
6. Legal bases
- Performance of a contract: providing the service you signed up for, including usage counting, key management and billing.
- Legitimate interests: rate limiting and abuse prevention (including the transient use of your connection IP address), and understanding aggregate model costs.
- Consent: voice training only happens when you choose to submit your posts, and you can delete the result at any time. The optional marketing email list works the same way: you join it only by entering your address for bonus generations, and you can unsubscribe whenever you like.
7. Who we share data with
- Anthropic (United States): processes generation inputs transiently, as described above.
- Stripe: processes payments and stores your payment details under its own privacy policy.
- Resend (United States): stores your email address and sends occasional updates, only if you opted in by giving your address for bonus generations.
- Oracle Cloud: hosts our server and database.
We do not sell data, share it with advertisers, or pass it to anyone else. Where processing happens outside the UK, it is covered by the provider's standard contractual safeguards for international transfers.
8. Retention
- Usage records: kept no longer than 24 months, and removed on a periodic basis.
- Voice profiles: kept until you delete them or your account closes.
- Billing records: kept as long as required for tax and accounting law.
- Install identifiers: removed once they have had no activity for 12 months.
- Marketing email: kept until you unsubscribe, or until the install it was given from is removed for inactivity, whichever comes first.
- You can ask us to delete your data sooner at any time (see section 9).
9. Your rights
Under UK GDPR you can ask for access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. Email x4f9sj5662@privaterelay.appleid.com and we will act on a verified request within one month. Erasure requests remove your voice profiles, keys, usage records and any marketing email address; billing records are retained only where law requires.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you think we have handled your data badly. We would rather you told us first.
10. Changes
If this policy changes in any way that matters, the date at the top changes and the new version is published here before it takes effect. We will not quietly broaden what we collect.