Privacy Policy

Ghost Automation LLC ("Ghost Automation," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our software platform, our mobile and web applications operated for our retail clients (the "Apps"), or our website at ghostautomation.tech (the "Website").

By using the Apps or Website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Apps or Website.

1. Who we are

Ghost Automation LLC is a Nevada limited liability company that builds and operates a multi-tenant software-as-a-service platform for specialty retailers, including vape shops, indoor sports facilities, and other regulated retail operators. Our platform powers white-label customer applications, loyalty programs, and admin dashboards on behalf of our retail clients.

When you use one of the Apps, you are interacting with software built and operated by Ghost Automation on behalf of the retailer whose brand the App carries. Ghost Automation is the data controller for personal information processed through the Apps and Website.

2. Information we collect

Information you provide directly

• Account information: mobile phone number, one-time verification codes (OTP), and any optional profile information you choose to provide such as your name or birthday.
• Communications: messages you send to us by email or through the Apps.

Information collected automatically

• Device and usage data: device type, operating system, app version, IP address, and basic interaction events (such as which screens you view) used to operate and improve the Apps.
• Loyalty events: points earned, rewards redeemed, tier changes, streak progress, and challenge completions generated through your use of the Apps.

Information from our retail clients and their POS partners

• Transaction data: when you scan a receipt QR code with the App, we retrieve transaction details from the retailer's point-of-sale provider — including the items purchased, total amount, applied discounts, and timestamp — to validate your purchase and award loyalty points.
• Customer linkage data: if you have an existing customer record with the retailer, we may retrieve a customer identifier from the POS provider to link your loyalty profile to your purchase history.

We do not collect or store payment card numbers, bank account information, or government-issued identification. All payments occur within the retailer's existing point-of-sale and checkout systems, not within Ghost Automation's platform.

3. How we use your information

We use personal information to:

• Create and authenticate your account, including sending one-time verification codes by SMS.
• Operate the loyalty program: award points, calculate tiers, issue rewards, track streaks, and complete challenges.
• Send you notifications you have opted into, such as points-earned confirmations, reward availability, and tier changes.
• Validate receipt scans against transactions on the retailer's point-of-sale system.
• Provide customer support and respond to your questions.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.
• Improve the Apps, Website, and Ghost Automation's platform.

4. SMS program and consent

The Apps send SMS messages to the mobile number you provide for two purposes:

• Account verification. When you sign up or sign in, we send a one-time passcode (OTP) by SMS to confirm you control the phone number.
• Loyalty notifications. If you opt in, we may send transactional notifications such as points earned, rewards available, and tier changes.

You opt in to SMS by entering your phone number in the App and requesting a verification code. Message frequency varies by activity, typically 1–3 messages per signup or transaction. Message and data rates may apply, set by your wireless carrier. We do not sell, rent, or share your mobile number with third parties for marketing purposes.

Reply HELP to any message for help or support information. Reply STOP to any message to opt out of further SMS messages from that program. Opting out of SMS does not delete your account; it only stops further SMS to your number.

5. How we share information

We share personal information only as described below:

• With the retailer whose App you are using. Your account information and loyalty activity are visible to the retail client whose App you signed up through, so they can operate the loyalty program and recognize you as a customer at the register.
• With service providers who help us operate the platform. See Section 6 below.
• To comply with law. We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, the rights of others, or public safety.
• In connection with a business transfer. If Ghost Automation is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to the protections in this Privacy Policy.

We do not sell personal information, and we do not share personal information with third parties for their own marketing purposes.

6. Third-party service providers

We use a small number of trusted service providers to operate the platform. These providers process information on our behalf, under contracts that limit their use of the information to providing services to us:

• Twilio — sends SMS verification codes and transactional notifications on our behalf. Twilio's privacy practices are at twilio.com/legal/privacy.
• Point-of-sale providers. Our retail clients use third-party point-of-sale systems to process in-store transactions. When you scan a receipt or your account is linked to a customer record in a retailer's point-of-sale system, we exchange transaction-validation data with that provider solely to confirm the transaction and apply loyalty activity. These providers process this data on our and the retailer's behalf and do not use it for their own marketing purposes.
• Cloud infrastructure providers. We use third-party cloud hosting and database services to run our platform and store backups. These providers do not access your personal information for their own purposes.

7. Data retention

We retain personal information for as long as your account is active and as necessary to provide the Apps to you, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion, we delete or de-identify personal information within a reasonable time, except where retention is required by law (for example, certain financial or tax records) or necessary to maintain the integrity of records the retailer is required to keep.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit, encryption at rest for sensitive credentials such as third-party API keys, access controls, and regular backups. No system is perfectly secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at kalub@ghostautomation.tech.

9. Your rights and choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your personal information.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority in your jurisdiction.

To exercise these rights, email us at kalub@ghostautomation.tech. We will respond within a reasonable time and may need to verify your identity before completing your request.

You can also control SMS by replying STOP to any message, and you can uninstall the Apps at any time. Uninstalling the Apps does not automatically delete your account or your data; to delete your account, contact us at the email above.

10. Children's privacy

The Apps are not directed to children. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, do not use the Apps. If we learn we have collected personal information from a child, we will delete it. If you believe a child has provided us with personal information, contact us at kalub@ghostautomation.tech.

11. Age requirements

The Apps are operated by retailers and are intended for use only by adults of legal age in the jurisdiction where the retailer operates. Where the retailer sells products subject to age restrictions, the applicable minimum age applies (for example, age 21 or older in Nevada for certain regulated products). By using the Apps, you represent that you meet the legal age requirement of the retailer's jurisdiction. The retailer remains solely responsible for verifying customer age at the point of sale.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If we make material changes, we will notify you through the Apps, by email, or by other reasonable means before the changes take effect.

13. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Ghost Automation LLC
Email: kalub@ghostautomation.tech
Nevada, United States