Privacy Policy

This Privacy Policy explains how Ghost Investing Club LLC (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use Ghost Investing Club (the “Service”), including the web application, the private member Discord, and member Zoom calls. By using the Service, you agree to the practices described in this Policy. If you do not agree, do not use the Service.

1. Information We Collect

We collect the following categories of information:

Account information. When you create an account, we collect your email address and password (stored as a cryptographic hash, not in plain text). If you join community channels, you may also provide a display name and avatar.

Portfolio and trading information.When you use the Service, you provide information about your investment activity, including: brokerage account names you create within the app; symbols you track; option positions you record (cash-secured puts, covered calls, assignments, expirations, rolls); share lots, dividends, and transfers you log; alerts and watchlists you configure; and the strikes, expirations, and contract counts you enter. You choose what to enter — Ghost Investing Club does not connect to your brokerage or pull data from it.

Billing information. When you subscribe to a paid plan, payment processing is handled by our third-party payment processor. We do not receive or store your full payment card details. We do store records of your subscription, including amount charged, billing period, tier at time of purchase, and subscription status.

Community information. If you participate in our private Discord or weekly Zoom calls, your messages, posts, voice contributions, and (where applicable) video are visible to other members and to us. We may retain recordings of group Zoom sessions so members can refer back to them.

Contact and support information. If you submit a contact form or email us, we retain your message and email address so that we can respond.

Usage and log data. We log basic activity such as account creation, acceptance of these Terms, and key actions within the Service for operational, security, and audit purposes. We do not use third-party analytics, telemetry, advertising, or cross-site tracking services.

Device information. Our servers receive standard technical information from your browser, such as IP address, browser type, and request timestamps. This information is used for security, rate limiting, and troubleshooting.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Generate the calculations, visualizations, and alerts you configure.
• Authenticate your account and maintain your session.
• Operate the private Discord, run weekly Zoom calls, and host the recording library.
• Process subscription payments and manage your account status.
• Send operational communications such as billing receipts, security notices, and service updates.
• Respond to support and contact requests.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

We do not use your portfolio or trading information to give you investment advice or recommendations, and we do not sell or rent your personal information to anyone.

3. How We Share Information

We share information only in the following limited circumstances:

Service providers. We use third-party vendors to operate the Service. These providers process information on our behalf under contractual obligations to protect it. See Section 4 for the specific providers we use.

Other community members. Anything you post in the Discord or say on a group Zoom call is, by design, visible or audible to other members of the community. Treat the community as you would any other shared space.

Legal compliance. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or violations of our Terms.

Business transfers. If Ghost Investing Club LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With your consent. We may share information for other purposes with your explicit consent.

We do not sell, rent, or trade your personal information to third parties for their marketing or advertising purposes.

4. Third-Party Services

We use the following third-party service providers to operate the Service:

• Supabase— Provides our database, authentication, and file storage. Your account and portfolio data is stored on Supabase infrastructure.
• Finnhub— Provides market data including symbol search, quotes, and option chains. Only symbol-level queries are sent; your personal information is not shared with this provider.
• Resend— Delivers transactional email such as confirmations, password resets, and contact-form messages. Resend processes your email address and the contents of those messages.
• Discord— Hosts our private member community. If you join, your Discord profile, messages, and presence in the server are governed by Discord's own privacy policy in addition to ours.
• Zoom— Hosts our weekly group calls and 1-on-1 coaching sessions. If you join a call, Zoom processes your name, email, audio, and (where you enable it) video; recordings of group calls are stored and made available to members.
• Payment processor— Processes subscription payments and one-time charges for optional add-ons. The processor receives your payment card details directly; we do not store them. Their use of your information is governed by their own privacy policy.

These providers are bound by their own privacy practices and by contractual obligations with us. We recommend reviewing their policies if you would like more information about how they handle data.

5. Data Storage & Security

Your data is stored in encrypted databases operated by our service providers. Passwords are hashed using industry-standard one-way algorithms and are never stored or transmitted in plain text. Connections between your browser and our servers are encrypted using TLS (HTTPS).

While we take reasonable measures to protect your information, no system is perfectly secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access.

6. Data Retention

We retain your information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within thirty (30) days, except where we are required to retain records for legal, accounting, tax, fraud-prevention, or audit purposes. Payment and billing records are typically retained for at least seven (7) years to comply with tax and accounting requirements. Recordings of group community sessions may be retained indefinitely as part of the member library; messages you posted in the Discord may remain visible to other members after your account is closed unless you remove them yourself or request removal.

Aggregated or de-identified information that no longer identifies you may be retained indefinitely.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to correct inaccurate or incomplete information.
• Deletion. Request that we delete your personal information, subject to the retention obligations described in Section 6.
• Portability. Request a copy of your data in a portable, machine-readable format.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time.

Most of these rights can be exercised directly from your account settings. For any request not supported in-product, contact us at the address in Section 16.

Response times. We will acknowledge your request within ten (10) days and aim to respond substantively within forty-five (45) days. Where a request is complex or we have received a high volume of requests, we may extend this period by an additional forty-five (45) days and will notify you of the extension.

Identity verification. Before fulfilling a request, we may need to verify your identity by matching information you provide against the records we hold about you. If we cannot verify your identity to a reasonable degree of certainty, we may decline to act on the request and will notify you.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your rights.

We do not sell your personal information and have not done so in the preceding twelve (12) months. We also do not share your personal information for cross-context behavioral advertising.

Sensitive Personal Information. We do not collect or process Sensitive Personal Information (as defined under the CCPA) for the purpose of inferring characteristics about you, and we do not use or disclose it for any purpose beyond what is reasonably necessary to provide the Service.

Authorized agents. You may designate an authorized agent to submit a CCPA request on your behalf. We will require the agent to provide written, signed permission from you, and we may also ask you to verify your own identity directly with us before we act on the request.

Right to non-discrimination. We will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised your CCPA rights.

To exercise a CCPA right, contact us at the address in Section 16.

9. Other U.S. State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, or another U.S. state with a comprehensive consumer privacy law, you have rights similar to those described in Section 7, which generally include the right to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain forms of profiling. As described elsewhere in this Policy, we do not sell personal information, do not engage in targeted advertising, and do not use your information for profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at the address in Section 16. If we deny your request, you may have the right to appeal that decision; instructions will be provided in our response.

10. EU/UK Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and similar laws, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing. You also have the right to lodge a complaint with your local data protection authority.

Our lawful bases for processing your information include (a) performance of a contract (providing the Service you requested), (b) our legitimate interests in operating and securing the Service, (c) compliance with legal obligations, and (d) your consent where applicable.

11. Cookies & Tracking

We use cookies and similar technologies that are strictly necessary for the Service to function, including authenticating your session and remembering your preferences. We do not use advertising cookies, third-party analytics, or cross-site tracking technologies.

12. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18, and specifically not from children under the age of 13 as defined by the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

13. Community Recordings

Group Zoom sessions hosted by Ghost Investing Club may be recorded so that members who could not attend live can review them later. By joining a session, you consent to being recorded. Recordings, including any audio, video, or chat content you contribute, are stored in the member recording library for the duration of the Service and used solely to provide the community feature; they are not used for advertising or shared outside the membership. If you would prefer not to be recorded, you may attend without enabling video and avoid unmuting, or skip the live session and review the recording afterward.

14. International Data Transfers

Ghost Investing Club LLC is based in the United States, and our service providers may store or process data in the United States or other jurisdictions. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States, which may have different data protection standards than your country of residence.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. For material changes, we will make reasonable efforts to notify you via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, please contact us at support@ghostinvestingclub.com.