Privacy Policy

Who we are

SpendGhost (“SpendGhost,” “we,” “us,” or “our”) is a product operated by NPC Labs, Inc. This Privacy Policy explains how we handle personal information when you use SpendGhost over a messaging channel such as iMessage, Telegram, or Slack, when you use our dashboard, or when you visit our website. By using SpendGhost, you agree to the practices described here.

Information we collect

We try to collect only what we need to actually do the job you asked for — find a product, pay for it, and get it shipped to you.

Information you give us

• Your phone number or messaging handle. This is how we recognize you across conversations and connect your account to a wallet.
• Your messages. The contents of your conversations with the agent — what you want to buy, your preferences, and the back-and-forth needed to complete an order.
• Shipping and contact details. The names, postal addresses, and any delivery instructions you provide so orders reach the right place.
• Support communications. Anything you send us when you ask for help or contact our team.

Wallet and transaction data

• Custodial wallet information. SpendGhost provisions and holds a custodial USDC wallet for you. We store the wallet address, its balance, and a record of deposits, conversions, purchases, refunds, and fees.
• Order history. The items you bought, order status, tracking information, totals, and the addresses each order shipped to.
• On-chain activity. Blockchain transactions are public by nature. We may read and record the transactions associated with your wallet to keep your balance and order records accurate.

Information we collect automatically

• Usage data. Basic, largely aggregated signals about how the service is used — for example, that a message was received, an order was placed, or a page loaded — so we can keep the service running and improve it.
• Device and log data. Standard technical information such as approximate request timing, error logs, and similar diagnostics needed for security and reliability.

We do not ask for or store payment cards or bank account numbers. SpendGhost runs on crypto, so there is no card on file and no bank login.

How we use your information

• To understand your requests and find the products you ask for.
• To fund, place, and track orders, and to move funds between your wallet and the parties needed to complete a purchase.
• To deliver goods to the address you provide.
• To operate, secure, debug, and improve the service, and to prevent fraud and abuse.
• To communicate with you about your orders, your account, and support requests.
• To comply with applicable law and enforce our terms.

How we share your information

We share only the minimum needed to complete what you asked for, and only with the categories of service providers below. These providers are bound to use your information solely to perform their service for us:

• Payment and swap providers. To accept deposits and convert between assets so your balance is spendable.
• Order fulfillment providers. To purchase the goods you want and arrange shipping. To ship an item, these providers necessarily receive the relevant shipping address and order details.
• Messaging carriers and platforms. The networks that carry your conversation with the agent (for example, the operators of the messaging channels you choose to use).
• AI model providers. To interpret your requests and help the agent respond. We send the content needed to handle your request and avoid sending more than necessary.
• Infrastructure and security providers. Hosting, storage, and tooling that keep the service available and protected.

We may also disclose information if required by law, to respond to valid legal process, to protect the rights, property, or safety of our users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

We do not sell your data

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing. Your messages, addresses, and purchase history are not a product we monetize.

Data retention

We keep your information for as long as your account is active and for as long as needed to provide the service — for example, to maintain your balance, fulfill open orders, handle returns or disputes, and meet legal, tax, and accounting obligations. When information is no longer needed, we delete it or de-identify it. You can also ask us to delete it sooner, as described below.

Your rights and choices

You are in control of your data. Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To exercise any of these, reach out using the contact details below.

“Forget me” — delete everything

SpendGhost includes a one-step data wipe. When you ask us to forget you (from your dashboard or by messaging the agent), we erase your account data — your messages, saved addresses, wallet record, order history, and points. This action is permanent and cannot be undone.

Please withdraw any remaining wallet balance before you wipe: once your wallet record is erased, any funds left behind may be unrecoverable. We will warn you if you still have a balance when you start a wipe. Some limited records (such as on-chain transactions, which are inherently public, or information we must retain for legal and accounting reasons) may persist after a wipe.

Security

We protect your information with industry-standard safeguards, including encryption at rest for sensitive data and encryption in transit, access controls that limit who can see your information, and ongoing monitoring. Custodial wallet keys are managed using secure key management practices. No method of storage or transmission is ever perfectly secure, but we work hard to protect your data and to limit how much of it we hold in the first place.

A note on crypto and privacy

SpendGhost is designed to let you spend privately. There is no payment card, no bank account, and no credit check involved. You fund a wallet with crypto and the agent spends from that balance on your behalf. Keep in mind that blockchain transactions are public and permanent, and that the merchants and carriers who ship your goods will see the destination address — privacy from us is not the same as anonymity from the wider world.

Children

SpendGhost is intended only for adults. You must be at least 18 years old to use the service. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used SpendGhost, contact us and we will delete the information.

International users

SpendGhost is operated from the United States, and your information may be processed in the United States and other countries where we or our service providers operate. Data protection laws in these countries may differ from those where you live. By using SpendGhost, you understand your information may be transferred to and processed in those locations.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, let you know through the service. Your continued use of SpendGhost after an update means you accept the revised policy.

Contact us

If you have questions, requests, or concerns about your privacy, please reach out to NPC Labs, Inc. at privacy@spendghost.com. For general help, you can always message the ghost or email support@spendghost.com.