Privacy Policy
What Ghostline Is
Ghostline is an automated SMS service. When you text the Ghostline number, you receive automated replies. There are no accounts, no logins, and no sign-ups. The service is inbound-initiated only — Ghostline never texts you first.
What We Collect
When you send a text to the Ghostline number, we process the following:
- Your phone number — immediately converted to an irreversible cryptographic hash (SHA-256 with a secret salt). Your actual phone number is never stored in any database.
- Your message content — encrypted with AES-256-GCM before storage. The encryption key is held separately from the database and is not accessible via any public endpoint.
- Message metadata — timestamps, message count, and conversation state (e.g., active, ghosted). No personally identifiable information is stored in metadata.
What We Do Not Collect
- Names, email addresses, or any account information
- Device information, IP addresses, or location data
- Cookies or tracking pixels (there is no web session)
- Contact lists or address book data
How We Use Your Data
- Intent classification — Your message text is sent to Google's Gemini API to classify the intent of your message (e.g., neutral, flirting). Google's API processes the text in transit but Ghostline does not send your phone number to Google. Google's use of this data is governed by Google's API Terms of Service.
- Automated replies — Based on the classified intent, Ghostline generates and sends an automated SMS reply to your number.
- No human review — No person reads your messages under normal operation. Encrypted transcripts exist solely for abuse investigation and are not browsable through any interface.
Data Retention
- 90-day auto-delete — All encrypted message data and conversation records are automatically purged after 90 days by an automated process.
- Immediate deletion on request — You can request deletion of all your data at any time by emailing privacy@unseriousventures.com. Deletion is permanent and irreversible.
Data Storage and Security
- All data is stored on Cloudflare's infrastructure (Workers, D1, Durable Objects) within the United States.
- Phone numbers are cryptographically hashed before any storage occurs.
- Message bodies are encrypted at rest with AES-256-GCM.
- No public API endpoint exists that returns message content.
- Temporary processing state (e.g., pending reply timers) is held in Cloudflare Durable Objects and cleaned up after each interaction cycle.
Third-Party Services
| Service | What It Receives | Why |
|---|---|---|
| Telnyx | Your phone number, message content (in transit) | SMS delivery — required to send and receive texts |
| Google Gemini API | Your message text (no phone number) | Intent classification |
| Cloudflare | Encrypted data at rest | Infrastructure and compute |
We do not sell, share, or provide your data to any other third parties.
SMS Consent and Data Sharing
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Opt-Out
- Text STOP to the Ghostline number at any time to stop receiving messages. This is handled automatically at the carrier level.
- Text HELP for assistance information.
- You can also email privacy@unseriousventures.com to request data deletion or opt-out.
Geographic Restrictions
Ghostline only operates within the United States. International inbound messages are blocked at the carrier level and are never processed.
Children's Privacy
Ghostline is not intended for use by anyone under the age of 18. We do not knowingly process messages from minors.
Changes to This Policy
If we make material changes to this policy, we will update the "Last updated" date above. Continued use of the service after changes constitutes acceptance.
Contact
For privacy questions, data deletion requests, or concerns:
Email: privacy@unseriousventures.com
Operator: Unserious Ventures LLC