Privacy Policy.
Ghost Orchid Labs ("Ghost Orchid Labs," "we," "us") is a forensic capital governance firm. This Privacy Policy explains how we handle information in connection with this website and our forensic engagements. We treat data as evidence and hold it to a chain-of-custody standard.
Information We Collect
Inquiry information you provide directly, such as your name, business email, organization, and the contents of any message you send to us.
Limited technical information generated when you visit the site, such as basic log and device data used to operate and secure the site.
Advertising platform data accessed only under explicit client authorization during an engagement. This is account-level advertising and spend data held by platforms such as Google Ads, Meta, Microsoft Advertising, TikTok, and similar services.
How We Use Information
We use information to respond to inquiries, to scope and perform forensic engagements, to produce audit findings and reclamation deliverables for the authorizing client, and to meet our legal and contractual obligations.
Advertising Platform Data
When a client authorizes us to access an advertising account, that access is read-only and is used solely to perform the forensic audit and produce deliverables for that client. We do not use advertising platform data to serve advertising, we do not sell it, and we do not share it beyond what the engagement requires. Platform data is handled under confidentiality and chain-of-custody controls and in accordance with the applicable platform's API and data-use requirements.
How We Share Information
We do not sell personal information. We share information only with service providers bound by confidentiality obligations, with parties you direct us to, and where required by law or to protect legal rights.
Data Security
We operate on sovereign infrastructure with access controls, least-privilege handling, and encryption of data in transit and at rest. Engagement evidence is segregated and retained under a documented chain of custody.
Data Retention
We retain information only as long as necessary to fulfill the purposes described here, to perform an engagement, and to satisfy legal obligations. Engagement data is handled and dispositioned according to the governing engagement agreement.
Your Choices and Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete personal information we hold about you. To make a request, contact us at engage@ghostorchidlabs.ai.
Third-Party Platforms
Our access to third-party advertising platforms under client authorization is also governed by those platforms' terms and policies. We comply with applicable platform requirements for the handling of data accessed through their interfaces.
Children
This site and our services are directed to businesses and institutional clients and are not intended for individuals under 18. We do not knowingly collect information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. The date above reflects the most recent revision.
Contact
Questions about this policy can be directed to engage@ghostorchidlabs.ai.