Privacy policy

This policy covers x-Arbiter at x-arbiter.com, made by Ghost Works LLC. The Ghost Works website (ghost-works.ai) has its own policy for that site. The x-Arbiter software you install runs in your own repository and on your own machine; this policy covers what it sends here, which is described below.

• Your account: your email address, your name if you give one, and your sign-in and second-factor settings.
• Your projects: each project's name, its kind, an optional short description, and who is on it.
• Governance records your repositories send: metadata about governance events, findings and versions. Never your code.
• Companion conversations: only if you turn this on, and your own prompts only if you also choose to share them.
• Billing: your plan and its status. Card details are held by Stripe, never by us.
• Included AI use: how many replies each project has used this month, as a count. Never the words.

Your startup ideas and research. The story, the Lean Canvas, research notes, assumptions and evidence live in your own folder, or in your browser until you save them there. When you use the included AI, your words pass through x-Arbiter to the AI provider to be answered and are not stored here.

Your code.x-Arbiter's governance records are metadata. Your code stays in your repository.

Your keys.Keys for your own AI or your repository go where you put them (your computer's protected storage, or your repository's secret settings). Nobody at Ghost Works sees them.

We never use your ideas, your work or your data to train AI, and we never sell them.

• Vercel hosts x-arbiter.com.
• Supabase holds the database and handles sign-in, including sign-in emails.
• Stripe handles billing and card details.
• GitHub, through the x-Arbiter GitHub app, only for repositories you connect.
• xAI answers the included AI in Explore, only when you use it. xAI keeps API requests for 30 days for abuse checks and then deletes them, and states that it never trains on them without permission.

Your account and projects are kept until you delete them. A deleted project waits 30 days in Recently deleted, where you can restore it, and is then removed for good. Deleting your account removes what is kept for it. Billing records are kept as long as the law requires.

You can see what x-Arbiter has recorded about you, export it, correct it, or delete it, from your account and your projects, or by writing to us. We answer every request.

If this policy changes, the date above changes, and for anything that affects your ideas or your data we tell you in the product before it applies.

Questions about privacy: info@ghost-works.ai. The terms for using x-Arbiter are in our Terms of use.