Privacy Policy

GhosTag (GhosTag) is built privacy-first. This policy explains what we collect and why, in line with India's Digital Personal Data Protection Act.

What we store.For an owner: your name, email, phone (optional), a hashed password, your tag, and your subscription status. For abuse-prevention we store a salted, one-way hash of a scanner's IP (never the raw IP, never their identity). Proof photos are stored temporarily and auto-deleted within 24 hours.

What we never do. We never share your phone number with anyone. The person who scans your tag never sees your number, and you never see theirs. We do not sell personal data.

Notifications.To send alerts we store your browser's web-push subscription. You can turn this off in your browser at any time.

Payments. Subscription payments are processed by our payment gateway. We do not store your card or UPI credentials; the gateway handles them.

Your rights. You can request access to or deletion of your data via in-app chat support (or the contact details in the footer). Deleting your account removes your tag, push subscriptions, and profile.