Legal
Ghostbox Privacy Policy
Last updated: 2026-05-01
This Privacy Policy explains how Ghostbox handles information.
Summary
Ghostbox is designed to run primarily through your own local machine, your GitHub account, your private control-plane repository, and third-party services you configure.
DO-SAY-GO does not currently operate user accounts for Ghostbox and does not intentionally collect the contents of your repositories, terminal sessions, commands, secrets, agent prompts, agent outputs, or temporary machines through the Ghostbox CLI.
Information processed by third parties
When you use Ghostbox, information may be processed by third-party services, including GitHub, Cloudflare, Tor, OpenAI, Anthropic, Google, package registries, and other tools you configure.
Those services are governed by their own privacy policies and terms.
Website data
The Ghostbox website may receive ordinary web request information such as IP address, user agent, requested URL, timestamp, and referrer through hosting, CDN, logging, or security infrastructure.
If analytics are added later, this policy should be updated.
CLI data
The Ghostbox CLI may store local configuration, machine metadata, logs, and state on your device, such as under `~/.ghostbox` or `~/.config/dosaygo/ghost`.
Ghostbox may also write configuration, workflow files, and machine state into your private GitHub control-plane repository.
Secrets
Ghostbox may help you reference or expose selected GitHub repository secrets to temporary machines. DO-SAY-GO does not ask you to send those secrets to DO-SAY-GO.
You are responsible for the secrets you configure, where they are stored, and which machines, scripts, agents, packages, and tools can access them.
No sale of personal data
DO-SAY-GO does not sell personal data.
Security
No system is perfectly secure. You should treat temporary machines, third-party actions, packages, scripts, and agents as potentially risky and grant only the access needed for a task.
Changes
This Privacy Policy may be updated as Ghostbox changes.
Contact
Contact DO-SAY-GO with privacy questions.