• Home
  • FAQ's
  • More
    • Home
    • FAQ's
  • Home
  • FAQ's

California Consumer Privacy Act (CCPA)

CCPA Compliance Policy


Effective Date: September 1, 2024 Last Updated: November 1, 2025

Ghostpilot, Inc. (“Ghostpilot,” “we,” “us,” or “our”) complies with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), for California residents.

This CCPA Policy supplements our Privacy Policy and applies only to “personal information” (PI) of California residents acting as consumers (not in a B2B or employment context). It does not create rights for non-California residents.

1. Your CCPA Rights

California residents have the following rights, free of charge:

Right What It Means How to Exercise Right to Know (twice in 12 months)Details on categories & specific pieces of PI collected, sources, business purpose, and third parties shared with Submit via privacy@ghostpilot.ai or toll-free 1-888-GHOSTPILOTRight to Delete Request deletion of PI we hold (subject to exceptions)Same channels Right to Opt-Out of Sale/ShareDirect us not to sell or share your PI for cross-context behavioral advertising Click “Do Not Sell or Share My Personal Information” on footer or submit request Right to Correct Fix inaccurate PISame channels Right to Limit Use of Sensitive PI Restrict use of sensitive PI (e.g., precise geolocation, SSN) to core service delivery We do not use sensitive PI beyond what is necessary Non-Discrimination No denial of service, price hikes, or quality reduction for exercising rights  Guaranteed 

Verification: We verify identity via email match, account login, or multi-factor questions. Authorized agents must provide signed permission.

Response Time:

  • Acknowledge: Within 10 business days
  • Fulfill: Within 45 calendar days (extendable by 45 days with notice)

2. Do We Sell or Share Your PI?

Activity CCPA Definition Ghostpilot Practice Sale Exchanging PI for money No – We do not sell your PI Share Disclosing PI for cross-context behavioral advertising No – We do not share for targeted ads 

We honor Global Privacy Control (GPC) signals automatically.

3. Categories of PI Collected (Past 12 Months)

Category (CCPA §1798.140(v))Examples Collected?Identifiers Name, email, IP, account IDYes Customer Records (Cal. Civ. Code §1798.80)Phone, billing address, credit card (via Stripe)Yes Commercial Information Subscription plan, transaction history Yes Internet/Network Activity Pages viewed, time on site, referral URLYes Geolocation Data Approximate location from IP Yes  Professional/Employment InfoCompany name, job titleYesInferencesSEO performance predictions Yes 

Sensitive PI: We collect none beyond what is strictly necessary (e.g., no precise geolocation, no biometric data).

4. Sources of PI

  • Directly from you: Account signup, project uploads, support tickets
  • Automatically: Cookies, analytics, server logs
  • Third parties: OAuth logins (Google), payment processors (Stripe), analytics (Google Analytics – anonymized)

5. Business Purposes for Collection/Use

  1. Provide & improve SEO services
  2. Process payments & prevent fraud
  3. Communicate (transactional & marketing with opt-in)
  4. Analytics & product development (aggregated/anonymized)
  5. Legal compliance & security

6. Categories of PI Disclosed for Business Purposes

Recipient Category of PI Purpose Stripe Identifiers, payment infoBillingAWSAll categoriesHosting & backupsGoogle WorkspaceIdentifiers, communications Internal ops Postmark Email address Transactional emails Sentry Device & error logs Debugging 

No disclosures to ad networks or data brokers.

7. Data Retention

See Privacy Policy Section 5. We retain only as needed for business or legal purposes.

8. Minors Under 16

We do not knowingly collect PI from minors under 16. We do not sell or share PI of minors under 16.

9. Financial Incentives (If Any)

We offer no financial incentives or price/service differences tied to PI collection.

10. Submit a Request

MethodDetailsWeb Formghostpilot.ai/ccpa-requestEmailprivacy@ghostpilot.ai (Subject: “CCPA Request”)

Authorized Agent Submit proof of authorization 

We provide two or more methods as required.

11. Metrics (Published Annually by July 1)

Metric (Prior Calendar Year)CountKnow Requests ReceivedKnow Requests Complied (full/partial)Know Requests Denied Average Response Days Delete Requests Received Delete Requests Complied Opt-Out Requests Received 

Available at ghostpilot.ai/legal/ccpa-metrics

12. Contact for More Information

Privacy Team Ghostpilot, Inc.444 N Michigan Av, Chicago, IL 60611 United States

Email: privacy@ghostpilot.ai Phone: 1-888-GHOSTPILOT

Approved by Kevin G williams – Chief Executive Officer 

Sarah Chen – Chief Compliance & Privacy Officer


Transparency isn’t optional — it’s how we fly.

Ghostpilot: AI GEO/AEO with California-grade privacy.

Copyright © 2026 Ghostpilot - All Rights Reserved.

  • Privacy Policy
  • Terms & Conditions
  • Anti Slavery
  • GDPR
  • CCPA

This website uses cookies.

We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.

DeclineAccept