PG
ProcessGhost
SECURITY, COMPLIANCE & GOVERNANCE

Privacy Policy

Effective Date: January 1, 2026 • Last Updated: October 2026 • Zero AI Model Retraining

1. Core Commitment: Zero AI Model Retraining

At ProcessGhost ("we", "us", or "our", operating the domain processghost.org), we recognize that enterprise transaction workflows, financial ledger records, and distributed cloud traces represent your most sensitive proprietary assets.

• NON-RETRAINING GUARANTEE:
We NEVER use your input prompts, uploaded documents, financial transaction data, or autonomous agent execution telemetry to train, fine-tune, or improve any public foundation models (including Amazon Bedrock, Anthropic Claude, or Meta Llama models).

2. Information We Collect

When you register for ProcessGhost Cloud or integrate our APIs, we collect:

  • Account Information: Name, work email address, company name, and authentication credentials.
  • API Usage & Telemetry Data: Request counts, token consumption, execution latencies, endpoint HTTP status codes, and error logs.
  • Billing Information: Payment transaction metadata, plan tier, and invoicing details processed securely via PCI-DSS compliant payment gateways.

3. How Information Is Processed & Stored

All data processed by ProcessGhost is hosted inside secure Amazon Web Services (AWS) data centers with 256-bit AES encryption at rest and TLS 1.3 encryption in transit. Ephemeral state machines deployed for autonomous micro-agent workflows reside in encrypted in-memory caches and are flushed immediately upon execution completion.

4. Sub-Processors & Infrastructure Providers

We work with trusted enterprise infrastructure providers to deliver our high-availability services:

  • Amazon Web Services (AWS): Cloud compute (Amazon ECS, AWS Lambda), Foundation Models (Amazon Bedrock), and data encryption (AWS KMS).
  • Payment Processors: PCI-DSS Level 1 certified processors for enterprise subscription billing.

5. GDPR & CCPA Compliance Rights

In accordance with the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), users possess the right to access, rectify, export, or permanently delete their personal data at any time without penalty.

6. Data Protection Officer & Inquiries

For privacy inquiries, audit verification requests, or data deletion transmissions, please contact our Data Protection Team directly:

DIGITAL PRIVACY & COMPLIANCE CONTACT:
Direct Privacy Email: privacy@processghost.org
Executive Channel: dana.lowe@processghost.org
Official Web Domain: processghost.org