Privacy Policy

Last updated 18 July 2026

GhostPay (“we”, “us”) is operated as a UK-based service at getghostpay.com. This policy explains what information we collect, why, and how you can control it.

Information we collect

When you create an account, we collect your email address and (optionally) your name. When you use the dashboard, you provide the information you choose to store: client names, client email addresses, invoice amounts, currencies, due dates and notes. This is data you enter about your own clients, for your own record-keeping.

If you use the free reminder generator without an account, the details you type in (client name, amount, tone) and your email address, if you provide one, are stored so we can follow up about GhostPay. You do not need to create an account to use the free generator.

When you send or schedule a reminder, we store the generated subject and body, the recipient address, and delivery status, so you have a record of what was sent and when.

How we use it

We use your information to operate the service: to authenticate you, to display your invoices and clients back to you, to generate and send reminder emails on your behalf, to process payments, and to respond if you contact us for support.

We do not sell your data, and we do not use your client data for advertising.

Third-party services we use

GhostPay is built on a small number of infrastructure providers, each of which processes a limited slice of your data to do its job:

• Supabase: hosts our database and handles authentication. Your password is never visible to us; Supabase stores it in hashed form.
• Stripe: processes subscription payments. We never see or store your full card number; Stripe handles that directly.
• Resend: delivers the reminder emails you send through GhostPay.
• Vercel: hosts the application itself.

Your clients’ data

If you store information about your own clients in GhostPay, you are responsible for having a lawful basis to hold and process that information, and for your own communications with your clients. GhostPay acts as a data processor for this information; you remain the data controller.

Cookies

GhostPay uses only the essential session cookies set by Supabase Auth to keep you logged in. We do not currently use advertising or third-party tracking cookies.

Data retention and deletion

We retain your account and invoice data for as long as your account is active. To delete your account and associated data, email us at the address below and we will action it within a reasonable time.

Your rights

You can ask us at any time to access, correct, export or delete the personal data we hold about you.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page.

Contact

Questions about this policy: hello@getghostpay.com