Privacy policy (GDPR)

1. Data collected

GhostPurge only collects the data necessary for the service:
- First name, Last name
- Email address
- Phone number (optional)
- Postal address (optional)
- Date of birth (optional)

2. Purpose of processing

This data is used exclusively for:
- Sending erasure requests to data brokers
- Tracking requests
- Contacting you if needed

3. Legal basis

Processing is based on your explicit consent (Article 6.1.a of GDPR) and on the performance of the service contract (Article 6.1.b).

4. Retention period

Your data is kept for the duration of your subscription, then deleted within 30 days after termination.

5. Your rights

In accordance with GDPR, you have the following rights:
- Right of access, rectification and erasure
- Right to restriction of processing
- Right to data portability
- Right to object

To exercise your rights: [email protected]

6. Security

Data is stored securely (encrypted SQLite database, restricted access). No data is resold or shared with third parties.