Privacy policy

The controller of your personal data is Ghost World Society, a corporation (C corporation) incorporated under the laws of the State of Delaware, United States, with its registered office at 2810 N Church St STE 89870, Wilmington, DE 19802, United States.

Personal data contact

[email protected]

Postal address

Ghost World Society, 2810 N Church St STE 89870, Wilmington, DE 19802, United States

For personal data of third parties that you have your agents process (your customers, prospects or contacts, for example), you are the controller and we act as your processor, only on your instructions and to run your agents.

Account and session

With your first message, an anonymous session is created: a technical identifier, your IP address and browser type. When you create an account: email address, name, password (stored in irreversibly hashed form), or the information Google shares if you use it (name, email, profile picture).

Conversations and agents

Your messages to the architect, your answers to its questions, attachments, your agents' configuration, their run logs, their results and the websites they build.

Files, tables and memory

The context files you upload, the files produced (PDF, Excel, Word…), the tables shared between agents and the agents' memory (facts, preferences, run summaries, document excerpts).

Connections to your tools

When you connect an app, the authorization (OAuth token or API key) is held by our connector provider; we keep a reference to that connection. During a run, the app data needed for the task (emails, records, files…) is read or changed according to the task you defined.

WhatsApp

If you message Future Agent on WhatsApp: your phone number, profile name, messages and media (images, documents, voice messages and their transcription), and your opt-in or opt-out choices (STOP / START).

Payment and billing

Your plan, your subscriptions, your payment history and your billing details. Payment is processed by Stripe: we never receive or store your card number. For the saved card, we only keep its brand, last four digits, expiry date and the fingerprint provided by Stripe.

Free trial and welcome offer

To check that the welcome offer is granted only once per person and to prevent trial abuse: a pseudonymised fingerprint of the IP address used when the offer is activated and, where applicable, of the linked WhatsApp phone number (computed with a secret key; the address itself is not kept for this purpose), the fingerprint of the saved card, and the dates and status of the offer and of trials. The IP address and phone fingerprints are erased 24 months after the offer ends.

Technical data

Connection and security logs (IP address, date, pages and APIs called), and the number of messages and runs, used to operate the service and enforce its limits. We use no audience measurement or advertising tools.

Voice dictation

If you use dictation in the chat, speech recognition is handled by your browser; depending on the browser, the audio may be processed by its vendor (Google for Chrome, Apple for Safari). We only receive the transcribed text.

To design and run your agents, your messages and the content needed for the task are sent to artificial intelligence models operated by our providers (see the list below). They are used to produce the requested output.

• We do not train any AI model on your content, and we do not sell it.
• Decisions made by an agent (sorting, ranking, drafting) only take effect within the scope you defined. The service makes no decision producing legal effects concerning you based solely on automated processing.
• Do not give an agent sensitive data (health, opinions, full banking details) unless the task requires it.

Your data can be accessed by the Ghost World Society team, to the extent necessary for support, security and billing. It is shared with the following providers, who act on our behalf:

When you connect a third-party app, the data exchanged with it is also subject to its publisher's privacy policy. We do not sell or rent your data.

Ghost World Society is established in the United States, and several providers process data outside the European Union, in particular in the United States and in China (Moonshot AI's language model).

These transfers are covered by:

• the EU–U.S. Data Privacy Framework, for US providers certified under it;
• otherwise, the standard contractual clauses adopted by the European Commission, supplemented where necessary by additional measures (encryption in transit, limiting the data sent to what the task strictly requires).

You can obtain a copy of the applicable safeguards by writing to [email protected].

• Encrypted connections (HTTPS) and passwords stored in irreversibly hashed form.
• Technical secrets (such as WhatsApp access credentials) encrypted at rest; access tokens for your tools held by the connector provider and never displayed.
• Signed, time-limited file links; memory and files isolated per account.
• Generated websites served in an isolated environment (sandbox) to protect your account.
• Administrative access restricted to a named team, with actions logged.

You have the following rights over your data:

• access: find out what data we hold and obtain a copy;
• rectification: correct inaccurate data;
• erasure: have your data and your account deleted;
• restriction: freeze the use of your data while a request is being reviewed;
• portability: receive the data you provided to us in a structured, reusable format (your files and tables can also be exported from the dashboard);
• objection: object to processing based on our legitimate interest;
• withdrawal of consent, where processing is based on it;
• set instructions on what happens to your data after your death (French law).

Write to [email protected] from your account email address, or include it. We reply within one month, which may be extended by two months for a complex request; we may ask you to prove your identity if in doubt. On WhatsApp, reply STOP to stop receiving messages.

Complaints

If you believe your rights are not being respected, you can lodge a complaint with the data protection authority of your country. In France: Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr/fr/plaintes.

The service is not intended for people under 15, who must not use it. Between 15 and 18, the consent of legal guardians is required. If you learn that a child under 15 has sent us data, write to us and we will delete it.

The site only uses cookies that are strictly necessary for it to work, with no advertising or audience measurement. Details are in the cookie policy.

We update this policy when the service or our providers change. The date of the latest update is shown at the top of the page; for a significant change, we notify you by email or in the service.