GhostPulse IndexNow
Last updated: 27/05/2026
This Privacy Policy explains how GhostPulse collects, uses, stores, and protects personal data when you use the GhostPulse IndexNow service.
GhostPulse is a tool for Ghost CMS websites that helps submit published or updated URLs to search engines through the IndexNow protocol.
1. Data controller
The data controller is:
Ricardo Antonio Piana
Registered address: Via Giuseppe Garibaldi, 85 - Aci Bonaccorsi (CT)
VAT / Company number: IT05444220874
Contact email: ricardo@ghostpulse.it
For privacy questions, contact us at: ricardo@ghostpulse.it
2. What data we collect
We collect only the data needed to operate, secure, bill, and improve GhostPulse.
Account data
When you create an account or subscribe, we may collect:
- Email address.
- Name, if provided.
- Account identifier.
- Login/session information.
- Subscription status.
- Plan information.
- Billing-related metadata.
Website and integration data
When you connect a Ghost site, we may collect:
- Ghost site URL.
- Site name or publication name.
- Connected site identifier.
- IndexNow key or key location.
- Webhook configuration data.
- Technical configuration needed to verify and process the site.
- Number of connected sites under your plan.
Webhook and submission data
When your Ghost site sends webhook events to GhostPulse, we may process:
- Published or updated URL.
- Event type.
- Timestamp.
- Ghost post/page identifier, where applicable.
- Site identifier.
- Submission status.
- IndexNow response status.
- Error messages, if any.
- Retry or queue status.
Payment and billing data
Payments are processed by third-party payment providers, such as Stripe.
We may receive limited billing metadata, such as:
- Customer ID.
- Subscription ID.
- Plan.
- Payment status.
- Invoice status.
- Billing email.
- Tax-related information, where applicable.
We do not store full credit card numbers.
Technical and security logs
For security, debugging, abuse prevention, and service reliability, we may collect:
- IP address.
- User agent.
- Request timestamps.
- Error logs.
- Authentication logs.
- API/webhook request logs.
- Rate-limit data.
- Server logs.
- Diagnostic information.
Communications
If you contact us, we may process:
- Your email address.
- Message content.
- Support history.
- Attachments or screenshots you choose to send.
3. Data we do not intentionally collect
GhostPulse does not need the full content of your Ghost posts to provide the IndexNow service.
The service is designed to process URLs and technical events, not to read, analyze, or republish your editorial content.
However, URLs may contain words from post titles, slugs, tags, or other public information chosen by you.
You should not send sensitive personal data through support messages, webhook payloads, URLs, slugs, or configuration fields unless strictly necessary.
4. How we use your data
We use your data to:
- Create and manage your account.
- Authenticate users.
- Manage subscriptions and plan limits.
- Connect and verify Ghost sites.
- Receive and process Ghost webhooks.
- Submit URLs to IndexNow-compatible search engines.
- Monitor service health.
- Debug errors.
- Prevent abuse, spam, fraud, and security incidents.
- Provide customer support.
- Send important service notices.
- Improve the service.
- Comply with legal obligations.
We do not sell your personal data.
5. Legal bases for processing
If you are in the European Economic Area, the United Kingdom, or another jurisdiction requiring a legal basis, we process personal data under the following bases:
Contract
We process account, subscription, integration, webhook, and submission data to provide the GhostPulse service you requested.
Legitimate interests
We process technical logs, security data, diagnostics, and limited analytics to maintain, secure, debug, and improve the service.
Legal obligations
We may process billing, tax, accounting, and compliance data where required by law.
Consent
Where required, we may ask for consent for optional cookies, marketing communications, or non-essential analytics.
6. IndexNow and search engines
When GhostPulse submits a URL through IndexNow, the submitted data may be sent to IndexNow-compatible search engines or endpoints.
The submitted data may include:
- URL.
- Host.
- IndexNow key.
- Key location.
- Technical request metadata.
Search engines process submitted URLs according to their own policies, systems, and legal terms.
GhostPulse does not control whether search engines crawl, index, rank, store, or display submitted URLs.
7. Cookies and similar technologies
GhostPulse may use cookies or similar technologies for:
- Authentication.
- Session management.
- Account access.
- Subscription management.
- Security.
- Preferences.
- Analytics, if enabled.
Essential cookies are required for the service to function.
Optional analytics or marketing cookies, if used, will be managed according to applicable consent requirements.
8. Third-party service providers
We may use trusted third-party providers to operate GhostPulse, including:
- Hosting and server infrastructure providers.
- Database providers.
- Payment processors.
- Email delivery providers.
- Ghost CMS / Ghost Members / Ghost Portal.
- Analytics providers.
- Logging and monitoring tools.
- Security and anti-abuse tools.
- IndexNow-compatible search engines.
These providers process data only as needed to provide their services to us, subject to their own terms, privacy policies, and data processing obligations.
9. International transfers
Your data may be processed in countries other than your country of residence.
Where required, we use appropriate safeguards for international transfers, such as:
- Standard Contractual Clauses.
- Data processing agreements.
- Adequacy decisions.
- Other legally recognized safeguards.
10. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Typical retention periods may include:
- Account data: retained while your account exists.
- Subscription and billing data: retained as required for accounting, tax, and legal obligations.
- Webhook and submission logs: retained for a limited period needed for debugging, retries, analytics, abuse prevention, and support.
- Security logs: retained for a limited period needed to protect the service.
- Support messages: retained as long as reasonably useful for support history and legal protection.
When data is no longer needed, we delete or anonymize it, unless we are legally required to keep it.
11. Security
We use reasonable technical and organizational measures to protect personal data, including access controls, secure infrastructure, authentication, logging, and operational safeguards.
However, no online service can guarantee absolute security.
You are responsible for securing your Ghost site, API credentials, webhook configuration, email account, and GhostPulse login credentials.
12. Your rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion.
- Restrict processing.
- Object to processing.
- Request data portability.
- Withdraw consent, where processing is based on consent.
- Lodge a complaint with a data protection authority.
To exercise your rights, contact us at [PRIVACY EMAIL].
We may need to verify your identity before responding.
13. Deleting your account
You may request deletion of your GhostPulse account by contacting us at ricardo@ghostpulse.it
Some data may be retained where necessary for legal, tax, accounting, fraud prevention, dispute resolution, or security reasons.
Deleting your GhostPulse account does not delete data held by third-party services, search engines, payment processors, or your own Ghost site.
14. Children
GhostPulse is not intended for children under 16.
We do not knowingly collect personal data from children.
If you believe a child has provided personal data to us, contact us and we will take appropriate action.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If changes are material, we will take reasonable steps to notify users, such as posting a notice on the website or sending an email.
The updated version will apply from the stated effective date.
16. Contact
For privacy questions, requests, or complaints, contact:
ricardo@ghostpulse.it