Privacy

GhostClick privacy policy

Last updated: 25 August 2026

GhostClick ("we") is an AI-moderated research interview platform. This policy explains what personal data we collect from researchers and participants, how we use it, where it is stored, and the choices you have. Questions and requests: hello@ghostclick.app.

What we collect

Researchers (people who run studies): your name, email address, and authentication details when you sign up with Google or with email and password; the studies, discussion guides, and reports you create; and billing records when you pay for a study (payments are processed by Stripe; we never see full card numbers).

Participants (people who take interviews): the answers you give in an interview, as text and, if you answer by voice, as audio recordings and their transcripts. Participants do not create accounts. Each participant joins through a unique link and is asked for explicit consent before the interview starts. We do not collect participant names unless a researcher's discussion guide asks for them.

Everyone: standard technical logs (IP address, browser type, timestamps) kept for security and debugging, and error reports.

How we use it

Interview content is used to conduct the interview (the AI moderator reads earlier answers to ask sensible follow-ups), to produce summaries and analysis for the researcher who commissioned the study, and for nothing else. We do not sell personal data, we do not use interview content for advertising, and we do not use it to train our own or third-party foundation models.

Where data lives

Each study selects a storage region: UK, EU, or US. Audio and media files are stored at rest in Google Cloud Storage buckets in that region. Study records are stored in our database (Supabase). AI processing, such as speech transcription (Google Cloud Speech-to-Text), interview moderation (Google Gemini), and voice synthesis (OpenAI), may run outside the selected storage region.

Processors we rely on

Vercel (hosting), Supabase (database and authentication), Google Cloud (storage, speech transcription, AI moderation), OpenAI (text-to-speech), Stripe (payments), and Sentry (error monitoring). Each processes data only to provide its service to us.

Retention and deletion

Study data is retained while the researcher's study exists and is deleted when the researcher deletes the study or asks us to. Participants can request deletion of their interview data at any time by emailing hello@ghostclick.app (mention the study you took part in so we can find your session).

Your rights

If you are in the UK or EU, you have the rights the UK GDPR and EU GDPR give you: access, correction, deletion, restriction, portability, and objection. Write to hello@ghostclick.app and we will respond within one month. You also have the right to complain to your supervisory authority (in the UK, the ICO).

Cookies

We use only the cookies needed to keep researchers signed in. There are no advertising or cross-site tracking cookies.

Changes

We will update this page when the policy changes and revise the date at the top. Material changes affecting participants will be flagged in the interview consent step. For anything this page does not answer, contact us.