Privacy Policy

1. Who we are

Ghost Scale is an Instagram content organization, scheduling, publishing and analytics platform. For privacy questions or data-rights requests, contact terbb7@gmail.com or WhatsApp +55 11 91974-6260.

2. Data we process

We process data needed to operate, secure and improve the features you choose.

• Account and profile data: name, email, optional phone number, profile picture, password stored only as a hash, plan type, expiration and access status.
• Usage and security data: login sessions, IP address, browser, device, timestamps, relevant dashboard actions and technical error or access-attempt logs.
• Content: uploaded media, covers, captions, links, folders, campaigns, schedules and publishing preferences.
• Instagram and Meta data: connected account and configured app identifiers, username, picture, follower count, authorizations and tokens, connection status, publications and metrics made available by the API under granted permissions.
• Notifications: preferences and browser technical identifiers required to deliver push notifications.
• Optional settings: information entered into integrations or additional features, including technical credentials, session cookies or connection routes when required by a feature selected by the user.
• Support and purchases: support messages, selected plan, amount, access period, transaction identifier and status. To create a Pix charge, name, email and Brazilian CPF or CNPJ are sent to LeztyPay; the document is not retained by Ghost Scale after charge creation. We receive no banking details and store no card data.

3. How we use data

• create and maintain accounts, authenticate access and manage plans;
• connect authorized accounts and execute requested publications, Stories and campaigns;
• organize the library, process media, collect available metrics and display reports;
• send operational, security and publishing notifications selected by the user;
• provide support, diagnose failures and prevent fraud, abuse and unauthorized access;
• comply with legal duties and establish or defend legal claims.

4. Legal grounds

Processing may be based on performance of a contract or user request, compliance with a legal duty, protection of rights, legitimate interests related to security and service improvement, or consent where required. Consent may be withdrawn without affecting prior lawful processing.

5. Cookies and local storage

We use cookies strictly required for login, security, request protection and language or interface preferences. Blocking them may prevent the dashboard from working. Installable features or extensions may use local device storage under the permissions and instructions shown by that feature.

6. Sharing

We do not sell personal data. We may share the minimum required with hosting, database, media storage, notification delivery, technical processing and support providers; with Meta/Instagram to execute authorized actions; with LeztyPay to create, confirm, reconcile, refund or dispute Pix payments; and with authorities under a valid legal duty or order. These recipients process data under their own terms and, where applicable, contractual safeguards.

7. International transfers

Meta and certain infrastructure providers may process data outside Brazil. We seek reputable providers and safeguards compatible with the LGPD, considering the nature of the service and available protections.

8. Retention and deletion

We retain data while the account is active and as needed to provide the service, comply with legal duties, prevent fraud and exercise rights. Deleting media or disconnecting an account stops future use, while minimum records may be preserved for history, security or legal obligations. Account and related-data deletion requests may be sent to support; we may verify identity before completing a request.

9. Security

We use technical and administrative safeguards appropriate to the risks, including HTTPS, access control, user isolation, session protection, password hashing, encryption of stored secrets, file validation and security logging. No environment is completely immune; users must also protect passwords, devices, Meta accounts and granted access.

10. Your rights

Under the LGPD, data subjects may request confirmation, access, correction, sharing information, applicable portability, anonymization, blocking or deletion in legally applicable cases, objection and withdrawal of consent. Send requests to terbb7@gmail.com. We will respond after verifying identity and considering applicable legal duties.

11. Controlling Meta connections

Users may disconnect accounts in the dashboard and revoke permissions in Meta/Instagram settings. Revocation can stop publishing, metrics and other authorization-dependent features. Contact support to request additional removal of connection-related data.

12. Children

Ghost Scale is not intended for anyone under 18. If we identify an account that violates this rule, we may suspend it and take appropriate steps to remove the data.

13. Changes to this Policy

We may update this Policy to reflect legal, technical or service changes. The current version and date will remain on this page. Material changes may also be announced in the dashboard or through available contact details.