Effective date: September 16, 2026
This Privacy Policy describes how Ghosts Inc. (“Ghost,” “we,” “us,” or “our”) collects, uses, and protects information through the Ghost Supplier Connect application (the “App”), a Shopify application that suppliers may install and authorize to allow Ghost to retrieve real-time product and inventory data from their Shopify store for the purpose of populating and updating listings on the Ghost platform.
This Privacy Policy applies specifically to the App and the data accessed through the Shopify API in connection with the App. It does not apply to Ghost’s other Services. Any business, account, or contact information you provide to Ghost separately in connection with becoming a Ghost supplier partner outside of the App installation itself is governed by Ghost’s general Privacy Policy, available at ghst.io/privacy-policy.
When a supplier installs and authorizes the App, we request read-only access to the following Shopify Admin API scopes: read_products, read_inventory, and read_locations. Through these scopes, we collect only:
The App does not request, receive, or store access to customer data, order data, checkout data, or any other personal information relating to a supplier’s customers. The App has read-only access and does not write to, modify, or delete any data in a supplier’s Shopify store.
During installation, the App collects only the supplier’s Shopify store domain and the OAuth access token issued by Shopify to authorize API access. The App’s installation flow does not separately collect business, contact, billing, or account information; that information, where applicable, is collected and governed by Ghost’s general Privacy Policy in connection with the supplier’s broader relationship with Ghost.
We generate automated operational and sync logs in connection with the App’s operation, including sync timestamps, the number of items processed, success and error/status codes, and connection lifecycle events (such as installation, disconnection, and uninstallation). The App does not have a supplier-facing user interface beyond the Shopify authorization screen, and we do not collect behavioral or usage-tracking data through the App.
We use the information collected through the App solely to:
We do not sell information collected through the App. Product and inventory information synced through the App is displayed as part of product listings on the Ghost platform for purposes of the marketplace. We may share information collected through the App with service providers who host or operate Ghost’s technical infrastructure and as otherwise described in the “Who We May Share Personal Data With” section of Ghost’s general Privacy Policy.
Information collected through the App is encrypted both in transit and at rest, and access to Shopify API credentials is restricted to authorized personnel and systems. At this time, the App is offered only to suppliers located in the United States, and data collected through the App is stored and processed in the United States.
We retain inventory data synced through the App only for as long as a supplier’s store remains connected to the App. If a supplier disconnects or uninstalls the App, we delete the corresponding synced data within 30 days, and the associated Shopify OAuth access token is revoked immediately upon uninstallation.
Consistent with Shopify’s requirements for all apps distributed through the Shopify App Store, we maintain and respond to Shopify’s mandatory compliance webhooks (covering requests to view, delete, or redact data) within the timeframes Shopify requires, regardless of whether the App processes the type of data at issue.
A supplier may disconnect or uninstall the App at any time from their Shopify admin, which will revoke Ghost’s access to their store. Suppliers may also contact us using the information below to ask what information we hold about their store in connection with the App or to request deletion of that information.
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice.
If you have questions about this Privacy Policy, please contact us at:
[email protected]
6300 Wilshire Blvd. Suite 1200, Los Angeles, CA 90048