Plain-language privacy.

What ghostwork is

ghostwork helps an HR team with the steps between a candidate accepting an offer and their first day. It works through the HR person’s own Gmail and Google Drive.

What we keep

For the HR user: name, email address and encrypted Google sign-in tokens.

For candidates: name, email address, role, joining date, the status of each onboarding step, and links to documents in the company’s own Google Drive.

For the teams involved (IT, Finance, Admin, hiring managers): their work email addresses and the status of their tasks.

An audit log of actions and decisions. It never contains email text or document contents.

If you request early access: your name, work email, company and anything you write in the form.

What we don’t keep

We don’t store the text of emails or the contents of documents in our database. Documents stay in the company’s Google Drive.

We don’t read any email outside the onboarding threads described on our Security page.

AI processing

To understand replies and recognise document types, the relevant email text or file is sent to an AI service (Anthropic) for processing. ghostwork doesn’t store what is sent.

Where data lives

The app runs on Vercel, with its database on Supabase. Documents stay in the customer’s Google Drive.

Your choices

You can remove ghostwork’s access to your Google account at any time from your Google Account settings.

To see, correct or delete your data, or to withdraw an early-access request, email hr@zerospinearnings.com.