Privacy Policy

GhoSTR is a ghostwriting tool for short-term rental hosts. It keeps track of your reservations through your listing's calendar link, and uses those stays and your guests' feedback cards to help draft personalized guest messages. GhoSTR never contacts your guests directly, never accesses your Airbnb or VRBO account, and never accesses your email inbox.

We collect only what's necessary to deliver the service:

• Google account info — your email address and display name, provided when you sign in with Google.
• Reservation data — check-in and check-out dates and the confirmation code, read from the calendar link (iCal) you add for each property, plus anything you enter yourself or import from a CSV file, such as guest first name and guest count. We store the calendar link so your reservations stay in sync.
• Guest feedback card data — responses your guests write on the physical card or submit digitally: where they explored, where they ate, how accommodations made them feel, improvement suggestions, visit reason, and any registration details the card asks for (such as phone number).
• Billing information — processed by Stripe. GhoSTR does not store credit card numbers. Stripe's privacy policy governs billing data.

• To create reservation records in your GhoSTR dashboard.
• To generate draft guest messages using the Anthropic Claude AI API. Reservation and guest card data is sent to Anthropic solely to produce your drafts. Anthropic's usage policies govern how they handle API inputs.
• To deliver your completed drafts to your inbox via SendGrid.
• To process per-reservation billing via Stripe.

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except the service providers listed above (Supabase, Anthropic, SendGrid, Stripe, Vercel), each of which processes data only as needed to run GhoSTR.

GhoSTR stores guest first names and stay dates as part of reservation records. Physical feedback card responses, including any registration details the card asks for, are stored to generate your drafts. You are responsible for obtaining appropriate consent from guests before sending them any messages GhoSTR drafts on your behalf.

As the account owner, you can invite collaborators — co-hosts or assistants — to help run your properties. You choose which properties each collaborator can access, and you can remove that access at any time. Collaborators sign in with their own accounts and can view the reservation and guest card data, including any registration-card details, for the properties you grant them. They cannot access your billing. You are responsible for who you invite and for how they handle guest data.

Your data is retained for as long as your GhoSTR account is active. To request deletion of your account and all associated data (reservations, guest cards and drafts), email support@ghostr.co. We will process deletion requests within 30 days.

Data is stored in Supabase with row-level security. Each host can access only their own records, plus those of any collaborators they explicitly invite (see Collaborator access above). All data is transmitted over HTTPS.

We may update this policy as GhoSTR evolves. Material changes will be noted on this page with an updated effective date. Continued use of GhoSTR after changes constitutes acceptance.

Questions about this policy? Email support@ghostr.co.