Privacy Policy

1. What this policy covers

• The website at ghostcoders.net, including its contact form.
• Apps published by Ghostcoders that let you sign in with, or connect, a Google or Meta (Facebook, Instagram, WhatsApp) account. An app that needs more data than described here lists it in its own section of this policy before it asks for it.

It does not cover systems we build or maintain for clients. Those are operated by our clients under their own privacy policies.

2. The website and contact form

When you send an enquiry through the contact form, we receive:

• your name and email address;
• your company or organisation, if you give one;
• the type of help you need and your project details;
• the date and time, and your IP address (used to limit repeated submissions and to block spam).

We use this only to reply to you and to discuss and deliver the work you ask about. Each enquiry is stored on our web hosting server and sent to our business email, which is hosted by Google Workspace.

3. Cookies, analytics and local storage

If you accept the cookie banner, we use Google Analytics to understand how visitors use the website, such as which pages are viewed, how long visits last, and the type of device, browser and approximate location (country or city). Google Analytics sets the _ga and _ga_* cookies, which last up to two years, and Google processes this data for us under its data processing terms. We do not use it for advertising, and we do not combine it with your enquiries.

Nothing is sent to Google Analytics until you accept. If you reject, or later change your mind with the Cookie settings link at the bottom of every page, we stop loading it and delete its cookies. Your choice, and your light or dark theme if you pick one, are kept in your browser's local storage and never sent to us.

The site is served through Cloudflare, which protects it from abuse and may set strictly necessary security cookies. If the contact form shows a Cloudflare Turnstile check, Cloudflare processes information about your browser to tell people from bots. These do not need your consent and cannot be switched off.

4. Apps that use Google or Meta sign-in

When you sign in to one of our apps with Google or with a Meta account, the provider shares the basic profile information you approve on its consent screen: usually your name, email address, profile picture and an account identifier. We use it only to create your account, sign you in, keep the account secure and contact you about the service.

We ask only for the access an app needs. If an app requests anything beyond basic sign-in, such as access to your calendar, files or business pages, this policy will say what it requests, why, and how that data is used, before the app asks for it.

Google user data

Ghostcoders' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:

• use Google user data only to provide and improve the features you use;
• do not sell it, and do not use it for advertising;
• do not use it to develop, improve or train generalised artificial intelligence or machine learning models;
• do not let people read it, except with your permission, for security reasons, to comply with the law, or when it has been aggregated and anonymised for internal operations.

Meta user data

Data we receive through Meta products is used only for the app you connected and in line with Meta's Platform Terms. We do not sell it or use it for advertising. To have it deleted, see Data Deletion.

5. Sharing

We do not sell personal data. We share it only with service providers that help us run the website and our apps (web hosting, Cloudflare, Google Workspace for email, Google Analytics if you accept it, and the infrastructure an app runs on), when the law requires it, or with your consent. These providers may process data outside Malaysia.

6. How long we keep data

We keep enquiries for as long as needed to respond to you and to keep business records, and app data for as long as your account is active. When it is no longer needed, or when you ask us to, we delete it, unless the law requires us to keep it.

7. Security

We protect personal data with encrypted connections (HTTPS), access restricted to people who need it, and up-to-date systems. No method of transmission or storage is completely secure, but we work to protect your data and will act promptly if something goes wrong.

8. Your choices and rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is inaccurate or out of date;
• stop using, or delete, your data, and withdraw your consent.

Email hello@ghostcoders.net and we will respond within 21 days. You can also remove an app's access at any time from your Google Account or your Facebook settings, as described on the Data Deletion page.

9. Children

Our website and apps are not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We will update this page when our practices change or a new app is published, and change the effective date above. If a change affects how an app uses data you have already shared, we will tell you in the app or by email.

11. Contact us

Ghostcoders Information Technology (Registration No. 202303187314 (KT0551104-H)), Malaysia. Email: hello@ghostcoders.net.