Legal

Privacy Policy

Last updated: 22 July 2026

Ghostwritten (“we”, “us”) operates ghostwrittenbook.com. This policy explains what we collect, why we collect it, who else touches it, and what you can ask us to do about it. Your project and your writing are treated as confidential.

What we collect

  • Your email address. Given at checkout, or when you ask us to send you the brief template, or when you contact us. Ordering does not require you to set a password: we create your project page from that address and email you a sign-in link.
  • Your commission. The brief, your premise and notes, any files you upload such as cover references or a style sample, and the messages you exchange with us about the order.
  • Your conversations with our concierge. If you use the chat, what you type is stored so the conversation is still there when you come back, and so we can pick up where you left off.
  • Payment details. Payments are processed by Stripe. We never see or store your card number. We keep a payment reference, the amount, and whether it succeeded or was refunded.
  • Reviews you choose to leave. Your star rating, your written comment, and the display name and role you type. See “Reviews” below.
  • Technical and usage data. Pages viewed, rough performance figures, and your IP address. IP addresses are recorded for a short period purely to rate limit abuse and to block attacks.

Cookies, analytics and advertising

We keep this deliberately small, and we want to be exact about it rather than vague.

  • Necessary. A sign-in cookie once you are signed in, so your project page stays yours. The site does not work without it.
  • Analytics. We use Vercel Analytics and Vercel Speed Insights to count page views and measure loading speed. These are aggregate and do not use advertising cookies.
  • Advertising. If and when we run ads, we load the Meta (Facebook and Instagram) pixel so we can tell which adverts actually lead to an order rather than guessing. It records that a page was viewed, that a checkout was started, and that a purchase happened, along with the order value, and that information goes to Meta. The pixel is not loaded at all unless advertising is switched on, and if you are in a region that requires consent before advertising cookies are set, we will ask you before loading it.

Emails we send you

  • About your order. Payment confirmation, your sign-in link, delivery, and anything we need to tell you while the book is being written. These are part of the service and you cannot opt out of them while an order is live.
  • If you start a checkout and do not finish. We may send up to two reminders that your brief is saved. Then we stop. We do not keep chasing.
  • One request for a review, a few days after your book is delivered. Once, not repeatedly.
  • The brief template, if you ask us for it. One email.

Every one of these can be stopped by replying and asking, and we will not add you to a general marketing list without you asking for it.

Reviews

If you leave a review, nothing is published unless you tick the box that says so, and we then have to approve it before it appears. What can appear publicly is your star rating, your comment, and the display name and role you typed, which do not have to be your real name. Your email address, your order and your book are never shown. You can ask us to unpublish it at any time and we will.

How we use your information

To write and deliver your book, to keep you informed about your order, to take payment, to answer you when you contact us, to keep the service secure, and to understand which parts of the site work. We do not sell your personal information. We never share, resell or reuse your manuscript.

Who else handles your data

Only the providers we need to run the studio, and only for that purpose:

  • Stripe, payments.
  • Supabase, database and secure file storage for your brief, messages and finished files.
  • Vercel, website hosting and analytics.
  • Resend, sending the emails described above.
  • AI infrastructure providers, currently Anthropic and Google, whose models power parts of our writing, editing and cover-design tooling. Material from your brief is processed through those tools as part of producing your book. They are used under business terms that do not permit your content to be used to train their models.
  • Meta, only if advertising is switched on, as described above.

We may also disclose information if we are legally required to.

Confidentiality

Your idea and your finished manuscript are private to you, and you own full rights to the completed work. Access is limited to the people working on your commission. We do not name you as a client or show your book as an example without asking you first.

How long we keep it

Order records and invoices are kept for as long as we are legally required to keep financial records. Your manuscript and delivered files are kept so you can download them again, until you ask us to delete them. Chat and technical logs are kept for a short period and then cleared.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or ask us to stop sending you something. Contact us and we will do it. Deleting your account removes your project page and your data from it, and we will tell you first if anything has to be kept for legal or accounting reasons.

Children

This service is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

If this policy changes, the “last updated” date above changes with it.

Contact

Questions about privacy, or want your data removed? Reach us any time via our contact page.