Privacy Policy

Effective Date: May 15, 2026

// overview

Ghost Architect™ is a CLI-based codebase intelligence tool built for Adobe Commerce architects and development agencies. We take privacy seriously. This policy explains what data we collect, what we don't collect, and how we handle the information that passes through our systems.

// what we do not collect

Ghost Architect™ is designed with privacy at its core. We want to be explicit about what we never see or store:

• Your source code. Ghost Architect™ runs locally on your machine. Your codebase is never uploaded to our servers. All analysis happens through your own Anthropic API key (BYOK — Bring Your Own Key), meaning your code goes directly from your machine to Anthropic's API and back. We are not a party to that transaction.
• Your findings or reports. Reports generated by Ghost Architect™ are written to your local filesystem. On Team and Enterprise tiers, reports are synced to a private GitHub repository that you own and control. We do not host, store, or have access to these reports.
• Your Anthropic API key. Your API key is stored locally on your machine in a configuration file you control. It is never transmitted to Ghost Architect™ servers.

// what we do collect

Ghost Architect™ transmits a small anonymous heartbeat ping to our telemetry endpoint to help us understand install and version adoption. Each ping contains:

• An anonymized install ID (a randomly generated UUID, not tied to your identity)
• The CLI version (for example, 7.0.0)
• The event type (for example, cli-firstrun-docker or cli-install)
• A timestamp

The ping contains no source code, no file paths, no findings, no API keys, and no personally identifiable information. You can disable telemetry entirely by setting the environment variable GHOST_NO_PING=1. For full architectural detail, see our Security & Trust page.

The other personal information Ghost Architect™ collects is through our Early Adopter application form, hosted on Typeform. If you choose to apply for the Early Adopter program, we collect:

• Your name
• Your email address
• Your company name
• Your responses to application questions

This information is used solely to evaluate your application and communicate with you about the Ghost Architect™ Early Adopter program. It is never sold, shared with third parties, or used for advertising purposes.

// data retention

Early Adopter application data is retained for as long as necessary to manage the program. If you would like your application data deleted, contact us at support@ghostarchitect.dev and we will remove it promptly.

Anthropic, the provider of the AI API used by Ghost Architect™, retains API inputs and outputs for up to 7 days before deletion, in accordance with their data retention policy. Ghost Architect™ has no control over or access to this data. For details, refer to Anthropic's Privacy Policy.

// your api key

Ghost Architect™ requires you to provide your own Anthropic API key. Your API key is stored locally on your machine and is never transmitted to Ghost Architect™ servers. You are responsible for keeping your API key secure.

// third-party services

• Anthropic API — for AI-powered codebase analysis. Your code is sent directly from your machine to Anthropic's API using your own API key.
• Typeform — for the Early Adopter application form. Typeform's privacy policy governs data collected through their platform.

// children's privacy

Ghost Architect™ is a professional developer tool not directed at children under 13. We do not knowingly collect personal information from children.

// changes to this policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Ghost Architect™ after changes constitutes acceptance of the updated policy.

// contact

If you have questions about this privacy policy or your data, contact us at:
support@ghostarchitect.dev