1. Who operates GhostRate
GhostRate is operated by Cresentrix Solutions Private Limited ("GhostRate", "we", "us"). This policy applies to the GhostRate websites, applications, and services.
2. Data we collect
For account holders, we process contact details, organization details, authentication data, billing status, support messages, and service usage needed to operate and secure the service. Passwords are stored only as password hashes.
For respondents, GhostRate is designed not to retain a link between an invite identity and a submitted response. Invite lists are hard-deleted after token dispatch, response records use date-only submission data, and one-time credentials are consumed before a response is stored.
3. How we use data
- Provide, secure, maintain, and improve GhostRate.
- Authenticate account holders and prevent abuse.
- Process subscriptions and send transactional service messages.
- Respond to support, privacy, and legal requests.
4. Service providers
We use service providers for hosting, email delivery, error monitoring, artificial-intelligence features when enabled, and payments. Dodo Payments acts as merchant of record for online purchases and processes payment and tax information under its own privacy terms. We do not store full card details.
5. Retention and security
Account and operational records are retained only as needed for the service, security, accounting, and legal obligations. Response payloads are encrypted with AES-256-GCM before database insertion. Data is encrypted in transit using HTTPS.
6. Your choices and rights
You may request access, correction, export, restriction, objection, or deletion of personal data where applicable. Some records may be retained where legally required. Anonymous response content cannot be searched by respondent identity because GhostRate does not store that link.
7. Contact
Privacy enquiries: [email protected]. Support: [email protected].