Loading…
Ghostprobe Privacy Policy
Oct 28, 2026
1. Who we are
Vlasiu Alexandru Robert PFA, a Romanian authorised natural person with tax identification number RO42774813, registered at Str. Bradului nr. 69, Arad 310205, Romania, trading as Ghostprobe ("Ghostprobe", "we", "us"), is the controller of the personal data described in this policy. Contact us at contact@ghostprobe.io.
2. What this policy covers
This policy explains how we use personal data about people who visit our website, use our platform, buy from us, or whom we contact about our services.
When we test a customer's systems, any personal data we see there belongs to that customer. We process it only on their instructions, under our Data Processing Agreement at ghostprobe.io/dpa. If your data is in one of our customers' systems, please contact that customer.
3. What we collect
CategoryExamplesWhere it comes from
Account detailsName, work email, job title, company, hashed passwordYou
Billing detailsBilling contact, company address, VAT number. Card details go to Stripe, not usYou and Stripe
Authorisation recordsName and title of the person who signed a Scope, IP address, time, the Scope itselfYou and our systems
Support and messagesEmails, website chat messages, call notes and meeting bookingsYou, through email, our chat widget (Chatwoot) and Calendly
Usage and device dataIP address, browser, pages visited, actions in the platformOur systems and cookies
Business contact details for salesName, job title, work email, company, public profile linksPublic sources such as company websites and professional profiles, and B2B contact data providers. Our first email to you says where we got your details
We do not ask for sensitive data such as health, religion or ethnicity, and our services are not designed to collect it.
4. How we use your data and why
What we doLawful basis
Provide the platform and manage your AccountContract
Take payment and keep financial recordsContract and legal obligation
Keep authorisation and ownership records for each JobLegitimate interests: showing testing was authorised and defending legal claims
Send service emails (Job updates, security alerts, changes to terms)Contract
Keep the platform secure and prevent fraud and misuseLegitimate interests
Improve the platform using usage dataLegitimate interests
Market our services to business contactsLegitimate interests, or consent where the law requires it
Meet legal duties and answer lawful requests from authoritiesLegal obligation
Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details.
We never use your personal data, or any customer data, to train AI models. We do not make decisions about you by automated means that have legal or similarly significant effects.
You can opt out of marketing at any time using the link in any email or by writing to contact@ghostprobe.io.
7. International transfers
We are based in Romania and our platform is hosted in Germany. Some of our providers process data in other countries, including the United States (our AI provider, Stripe, Google Workspace, Chatwoot and Calendly). Where a country does not have an adequacy decision, we use the Standard Contractual Clauses approved by the European Commission, and may also rely on the EU-US Data Privacy Framework where the provider is certified. Contact us for a copy.
8. How long we keep it
DataHow long
Account detailsWhile your Account is open, then deleted within 90 days
Billing recordsAs long as Romanian accounting and tax law requires, currently up to 10 years
Authorisation records6 years after each Job
Support and messages2 years after our last contact
Usage data and security logs12 months
Sales contact details2 years after our last contact, or sooner if you object
9. Security
We protect personal data with encryption in transit and at rest, multi-factor authentication for staff, least-privilege access and regular security testing of our own platform. Annex 2 of our Data Processing Agreement lists our measures.
10. Your rights
You have the right to:
- access the personal data we hold about you;
- correct it if it is wrong;
- have it deleted;
- restrict how we use it;
- receive it in a portable format;
- object to how we use it, including an absolute right to object to direct marketing; and
- withdraw consent at any time, where we rely on consent.
To use these rights, email contact@ghostprobe.io. We will reply within one month. Some rights have limits, and we will explain if one applies.
If you are unhappy with how we handle your data, please tell us first. You can also complain to Romania's data protection authority (ANSPDCP) at dataprotection.ro, or to the authority where you live or work.
11. Children
Our services are for businesses and are not aimed at anyone under 18.
12. Changes to this policy
We will post any changes here and update the date at the top. If a change is significant, we will tell account holders by email.
13. Contact
Vlasiu Alexandru Robert PFA, trading as Ghostprobe, Str. Bradului nr. 69, Arad 310205, Romania. Email contact@ghostprobe.io.