Chloe

Privacy Policy

Effective date: March 1, 2026

1. Information We Collect

When you use Chloe, we collect information that you provide directly and information generated through your use of our services:

  • Account information: name, email address, and password when you create an account.
  • Billing information: payment method details processed securely through Stripe. We do not store full credit card numbers on our servers.
  • Publication data: content, images, subscriber lists, and settings associated with your Ghost publications hosted on Chloe.
  • Usage data: IP addresses, browser type, pages visited, and interactions with our platform collected via server logs and analytics.
  • Communications: information you provide when contacting our support team.

2. How We Use Your Information

We use the information we collect to:

  • Provision, maintain, and improve your Ghost hosting instances.
  • Process payments and manage your subscription.
  • Send transactional emails (account confirmations, billing receipts, service alerts).
  • Provide customer support and respond to inquiries.
  • Monitor platform performance, security, and uptime.
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use your publication content for advertising purposes.

3. Data Storage & Security

Your data is hosted on Amazon Web Services (AWS) infrastructure in the United States. We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256 via AWS KMS).
  • Network isolation using Virtual Private Clouds (VPCs) with private subnets.
  • Regular automated backups of all databases and media storage.
  • Role-based access controls and audit logging for internal systems.
  • Regular security reviews and vulnerability assessments.

4. Third-Party Services

We use the following third-party services to operate Chloe. Each processes data in accordance with their own privacy policies:

  • Stripe: payment processing. Stripe handles and stores your payment information securely under PCI DSS compliance.
  • Amazon Web Services (AWS): cloud infrastructure, including compute, databases, storage, and email delivery (SES).
  • Cloudflare: content delivery network (CDN), DDoS protection, and SSL certificate management for custom domains.

5. Cookies

Chloe uses cookies and similar technologies for the following purposes:

  • Essential cookies: required for authentication and session management.
  • Analytics cookies: help us understand how visitors interact with our website to improve the user experience.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the platform.

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data, subject to legal retention requirements.
  • Portability: request your data in a structured, machine-readable format.
  • Opt-out: opt out of non-essential data processing and marketing communications at any time.
  • Non-discrimination: we will not discriminate against you for exercising your privacy rights (CCPA).

To exercise any of these rights, contact us at privacy@echloe.com. We will respond within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

  • Account data is retained for the duration of your subscription and up to 90 days after account closure to allow for reactivation.
  • Publication content and media are deleted within 30 days of account termination unless you request an export.
  • Billing records are retained for 7 years to comply with tax and accounting regulations.
  • Server logs are retained for up to 90 days for security and debugging purposes.

8. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@echloe.com

Address: Chloe, Inc.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date.