Privacy Policy – GEO for Ghost

These Product-Specific privacy terms supplement the Website Privacy Policy at https://visitingobjects.com/docs/legal/privacy (the "Site Policy"). Capitalised terms not defined here have the meanings given in the Site Policy.

1. Scope and roles

Visiting Objects operates GEO for Ghost (the "Service") as a processor of the content you choose to format for AI discovery and as a controller of the account, billing and usage data required to run the Service.

2. Data we process

Category	Purpose	Examples
Formatted content	Generate llms.txt and markdown versions for AI discovery	Ghost posts, pages, titles, excerpts, metadata
Usage metrics	Track usage; show analytics in dashboard	Content sync requests, timestamp, content IDs
Operational logs	Maintain security and debug errors	HTTP status, truncated IP address, user-agent
Account & billing	Authenticate users, collect payment	Name, e-mail, Paddle customer ID

No biometric, precise-location, or behavioural advertising data is collected. The Service does not use AI to process your content; it formats your content so AI assistants can discover and read it.

3. Data location

Data is stored in the United States.

Third-party processors:

• Payment processing: Paddle

4. Retention and deletion

Data type	Retention	Deletion timing
Optimized content	While the GEO Instance is active	Removed immediately when you delete the instance; purged from backups within 30 days
Usage metrics	Rolling 30-day window	Older records automatically dropped
Operational logs	≤ 14 days in ephemeral buffer	Not persisted to disk
Backups	Encrypted object storage; 2-week cycle	Overwritten on the next cycle after deletion event

5. Security measures

• Encryption in transit and at rest.
• Access controls and authentication.
• Code review and security testing.

6. International data transfers

For data transfers outside the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum where applicable.

7. Your controls and rights

• Dashboard controls – pause or delete an instance at any time; opt-out of anonymous telemetry.
• GDPR/CPRA rights – access, rectify, erase, restrict, object; response within 30 days via privacy@visitingobjects.com.
• Portability – not applicable; content comes from your own Ghost CMS site and can be exported there.

8. Children

The Service is not offered to individuals under 18. You must ensure your Ghost site complies with children's-privacy laws if it targets minors.

9. Cookies and similar tech

The Service itself does not set cookies on your visitors. Paddle sets essential cookies during checkout; see the Site Policy for details. Plausible Analytics used on the dashboard is cookie-less.

10. Updates

Material changes to this policy will be posted here at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised terms.

---

For questions contact: privacy@visitingobjects.com