WATERMELON GHOST
Menu
How it worksWhat you getPricingAboutContact Sign up for a demo
Legal

Privacy Policy.

Effective date: February 1, 2026 · Last updated: July 19, 2026

1. Who We Are

Watermelon Ghost Inc. (“WG,” “we,” “us,” “our”) is a Delaware corporation providing Generative Engine Optimization (GEO) intelligence services to hospitality businesses. Our website is www.watermelonghost.com.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we protect it. By using our website or purchasing our services, you agree to the practices described here.

2. Information We Collect

Information you give us directly

When you sign up for early access or request more information via our website form, we collect:

  • Your name and title/role
  • Your work email address
  • Your hotel or property name
  • Your website URL

When you purchase a service, our payment processor Stripe collects:

  • Your name and email address
  • Billing address
  • Payment card information (we never see or store your raw card data — this is handled entirely by Stripe)

During the delivery of our services, you may share:

  • Business information about your property
  • Competitor names and market context
  • Any additional context you provide to inform your audit

Information we collect automatically

When you visit our website, our hosting provider (Cloudflare) and our analytics providers (Cloudflare and Plausible Analytics) automatically collect certain information, including:

  • Pages visited and time spent on each page
  • Referring website or source
  • Device type, browser, and operating system
  • General geographic location (country/city level — not precise location)
  • IP address (anonymised where required by applicable law)

This data is aggregated and used to understand how people find and use our site. We do not use it to identify you personally.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To deliver your audit report and schedule your strategy call
  • To manage your subscription, process payments, and send billing communications
  • To respond to enquiries submitted via our website form
  • To follow up with leads and manage our sales pipeline via HubSpot
  • To send service-related communications (delivery confirmations, renewal reminders, material updates to these Terms or this Policy)
  • To improve our website, services, and methodology using aggregated, anonymised analytics data
  • To comply with legal obligations

We do not sell your personal information. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Who We Share Your Information With

We share your information only with the third-party service providers necessary to operate our business. These providers are contractually required to handle your data securely and only for the purposes we specify.

Stripe

Payment processing. Stripe collects and processes your payment and billing information directly. We do not store your card details. Stripe’s privacy policy is available at stripe.com/privacy.

Cloudflare

Website delivery, security, and analytics. Our website is delivered through Cloudflare’s network, which acts as a content delivery and security layer and may collect network-level data such as IP addresses and traffic patterns to protect against threats and optimise performance. We also use Cloudflare’s first-party, cookieless analytics — Web Analytics for aggregate page views and traffic sources, and Analytics Engine to record when a visitor submits our waitlist or property intake form. These analytics tools do not use cookies to identify you across sessions, do not track you across other websites, and are not used for advertising. Because analytics are processed on Cloudflare’s edge rather than in your browser, they are not affected by browser content blockers. Cloudflare does not use this data for advertising purposes. Cloudflare’s privacy policy is available at cloudflare.com/privacypolicy.

Plausible Analytics

Privacy-friendly website analytics. We use Plausible to understand aggregate page views, traffic sources, and referrers so we can improve our site and reporting for partners. Plausible is EU-hosted, does not use cookies, does not collect or store personal data, and does not track visitors across websites. No personal identifiers are sent to Plausible. Plausible’s data policy is available at plausible.io/data-policy.

HubSpot

Customer relationship management. We use HubSpot to manage contact records, track our sales pipeline, and store information about enquiries and client relationships. HubSpot’s privacy policy is available at legal.hubspot.com/privacy-policy.

We do not share your personal information with any other third parties, except where required by law (for example, in response to a valid legal request from a government authority).

5. How Long We Keep Your Information

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Active client records are retained for the duration of the relationship plus 3 years
  • Payment records are retained for 7 years to comply with financial recordkeeping requirements
  • Enquiry and lead data in HubSpot is retained for up to 2 years from last contact if no purchase is made
  • Website analytics data is retained by Cloudflare in accordance with Cloudflare’s standard retention settings, in aggregated, anonymised form

You may request deletion of your data at any time (see Section 7).

6. How We Protect Your Information

We take reasonable technical and organisational measures to protect your personal information, including:

  • Payment data is processed exclusively by Stripe, which is PCI DSS Level 1 compliant — the highest level of payment security certification
  • Access to client data in HubSpot is restricted to WG team members who need it to deliver services
  • We use secure (HTTPS) connections across our website
  • We do not store payment card information on our own systems

No method of transmission over the internet is 100% secure. While we use commercially reasonable practices to protect your data, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information, subject to legal retention requirements
  • Opt out of marketing communications at any time by replying to any email or contacting us directly
  • Request that we restrict processing of your information in certain circumstances

To exercise any of these rights, contact us at georgina@watermelonghost.com. We will respond within 30 days.

If you are based in California, you may have additional rights under the California Consumer Privacy Act (CCPA). If you are based in the EU or UK, you may have additional rights under GDPR. We will honour applicable rights regardless of where you are located.

8. Cookies & Tracking

Our website does not use analytics or advertising cookies. We measure visitor behaviour using Cloudflare’s cookieless, first-party analytics and Plausible Analytics — a privacy-friendly, EU-hosted service that does not place cookies in your browser, does not collect personal data, and does not track you across other websites.

Our website may use strictly necessary cookies for essential functionality (such as bot verification). You can control or disable non-essential cookies through your browser settings; disabling strictly necessary cookies may affect how some parts of our website function.

9. Children’s Privacy

Our services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify active clients by email. Continued use of our website or services after an update constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Watermelon Ghost Inc. is a Delaware corporation. For the purposes of applicable privacy law, WG is the data controller for personal information collected via this website and our services.