Terms & Privacy
In effect from .
In short
- Your keys are made on your device and never reach us. We cannot recover them.
- Your files and notes are encrypted before they leave your device. Nodes, including ours, hold only what they cannot read.
- Some things are public and permanent by design: anything written to a blockchain, Proof of Origin claims and their titles.
- Ghostdrive is for people and the agents they direct, for lawful use only. Report abuse or illegal content to us and we act on what we run.
- The testnet uses test DRIVE, which has no value. Points and credits are not money and not a promise of tokens.
- No account, no email, no tracking inside the app. One anonymous member count, which you can turn off.
Who we are and what these terms cover
Ghostdrive is open-source software for private files, notes, documents, calls and AI agents. It runs on your devices, on nodes people choose to run and on networks such as DRIVE 369 Network, Base, IPFS and Filecoin. It is provided by Drive 369 DAO LLC and built with NeyraLabs and the Ghostdrive contributors. In these terms, “we” means Drive 369 DAO LLC and “you” means the person using Ghostdrive.
These terms cover the Ghostdrive apps (web, desktop and phone), the services we run (our relay, storage nodes, faucet, network AI operators we list, the explorer at explorer.ghostdrive.com) and the networks as far as we operate them. They include our privacy notice and our acceptable use and takedown rules.
By creating a vault, signing in with a passkey or a wallet, running a node or using our services, you accept these terms. If you do not accept them, do not use Ghostdrive.
What Ghostdrive includes
Live: Drive (encrypted files), Notes and documents to fill and sign, Sign (signature envelopes), Pass (passwords, passkeys and one-time secret links), Terminal and Office (AI that works on your own memory), Skills (research rooms with agents), Calls (end-to-end encrypted video), Groups (shared vaults), Radar (a digest worked out on your device), AI memory over MCP, Proof of Origin, the node software and the DRIVE 369 Network explorer.
Testnet and preview: test DRIVE and the faucet, storage deals, the DAO board and points run on Base Sepolia; City369 is a closed preview. They may be reset, changed or ended at any time.
Each feature says in the app what it does with your data. Where this page and a feature’s own notice differ, the stricter one for your privacy applies.
Who can use it: people, for lawful use
You must be at least 18 years old and able to agree to these terms. You may not use Ghostdrive if you are the target of sanctions, if you live in or act for a country or region under comprehensive sanctions, or where using it would break the law that applies to you.
Ghostdrive is for people. Every vault, Ghost ID and wallet you use should belong to a real person or an organisation acting through one. AI agents in Ghostdrive act for you: you set what they may do, and what they do with your approval is your responsibility. Fleets of fake identities, bots posing as people and automated accounts made to collect rewards, votes or test tokens are not allowed.
If you use Ghostdrive for an organisation, you confirm you may bind it to these terms.
Your keys are yours alone
Ghostdrive is self-custodial. Your keys come from a passkey, from your 24 recovery words or from a signature of your wallet, and they are made and kept on your devices. We never receive them, never store a copy and cannot reset, recover or reissue them.
If you lose your passkeys, your devices and your 24 recovery words, nobody can open your vault again, including us, and the data in it is lost. Write the 24 words on paper and keep them offline. Anyone who has them can open your vault.
Your wallet is yours too. We do not hold, move or control your assets. A transaction you sign is final and we cannot reverse it.
How your data is stored
Files and notes are encrypted on your device before they go anywhere. Peers, your own nodes, our storage nodes and networks such as IPFS and Filecoin hold only encrypted blocks, padded to size classes, that they cannot read.
A decentralised network can keep copies we do not control. When you delete something, your vault forgets it, but encrypted copies may remain on peers and storage networks. Storage is not guaranteed to stay available: keep your own copy of anything you cannot lose.
Links you share (a note, a file, a secret, a signature envelope) carry their key in the part of the address after “#”, which browsers do not send to us. Our relay holds only the sealed bytes. You can revoke your links; a revoked link stops opening.
You are responsible for what you store and share, and for having the right to do so.
DRIVE 369 Network and the public chains
DRIVE 369 Network is our own permissioned ledger (chain id 6290369). It records fingerprints, seals and anchors: vault seals, Proof of Origin checkpoints, signature seals and agency credits. It has no gas and no token. Today its four validators are all run by the 369 team and only accounts we admit can write to it; it is a pilot without an external audit. Its newest block is checkpointed on Base about every ten minutes, and anyone can read and check it at explorer.ghostdrive.com.
Base (Ethereum layer 2) carries the DRIVE token, the testnet contracts and the DAO. IPFS and Filecoin can carry encrypted blocks. These networks are run by others under their own rules; we do not control them.
Anything written to a ledger is public and permanent: wallet addresses, Ghost IDs, fingerprints, votes, claims, names, transactions and the time they happened. Nobody, including us, can edit or remove it. Do not put personal or secret information in a title, a memo or anything else that goes on chain.
Proof of Origin, the notary and signatures
Proof of Origin and the notary record that a Ghost ID signed a file’s SHA-256 fingerprint no later than a given time. The file itself is never sent. The log is public: anyone can see the fingerprint, size, kind, the optional title you give and the Ghost ID that signed. It is append-only, so a claim cannot be withdrawn.
A claim is evidence of time and order, not of authorship, ownership or copyright, and not of who is behind a Ghost ID. A signature made in Sign proves which Ghost ID signed which exact document. It is not a qualified electronic signature or a certified time stamp under laws such as the EU’s eIDAS or Indonesia’s electronic signature rules unless a certified provider is named on the document.
AI agents and AI safety
Nothing from your vault reaches an AI model unless you allow it. You choose where answers come from. A model on your device or on your own node keeps your prompts there. With your own API key, the app sends the prompt straight to that provider, under its own policy. The Ghostdrive network AI is off until you turn it on: an operator’s machine then reads each request to run the model, so it is not end-to-end private; we only use operators we list, and each signs a receipt for every answer.
Agents ask before they act. Paying, sending to a new recipient, signing in and deleting outside your vault always need your approval, and a Stop key halts everything at once. An “always allow” covers one kind of action for one recipient on one channel, never money or file shares. Every use of your data by AI is written to a log in your vault that you can read.
Anything you or your agents share with others first passes a safety gate: network rules, a scan for prompt injection, data leaks and hidden characters, and a judge model that runs on your device unless you allow another. Whoever receives it runs the same checks again. These checks lower risk; they do not remove it.
AI output can be wrong. You decide what to do with it and you are responsible for the actions you approve.
Acceptable use: good uses only
Use Ghostdrive lawfully and in good faith. You may not use it, or let your agents use it, to:
create, store or share child sexual abuse material (we have zero tolerance and report it to the authorities, including NCMEC in the United States); content that promotes or supports terrorism or violent extremism; intimate images of anyone without their consent; content that threatens, harasses or exposes someone’s private information (doxxing);
infringe copyright, trademarks or other rights; defraud, phish or impersonate anyone; launder money, finance terrorism or evade sanctions; sell or arrange illegal goods or services;
spread malware, attack or overload the network, other people’s nodes or our services, probe for weaknesses outside our security policy, or get around rate limits, approvals or safety checks; scrape or collect other people’s data;
game the faucet, points, rewards or votes with fake identities, bots or automation, or send spam.
Running a node or a relay does not change these rules for what you serve. Security research is welcome through our security policy.
Reports, takedown and law enforcement
What we can and cannot do. We cannot read your vault, your messages or your calls, and we cannot delete encrypted copies held by peers, other nodes or storage networks, or anything written to a ledger. We can act on what we run: stop serving a share link, secret link or envelope through our relay; stop showing a public title in our apps and explorer; revoke a City369 pass; hide a DAO proposal with a public reason; refuse a Ghost ID, wallet or network at our relay, faucet and network AI; and remove an operator from our lists. Each node operator decides the same for its own node.
To report illegal content or abuse, write to hello@ghostdrive.com with: the link, Ghost ID, fingerprint or transaction it concerns; what is wrong and why it is illegal or breaks these terms; and how to reach you. You may report anonymously, except for the notices below. Reports of child sexual abuse material are handled first.
Copyright and other rights. Send a notice to hello@ghostdrive.com with: the work or right concerned; where the material is (link, Ghost ID or fingerprint); your contact details; a statement that you believe in good faith the use is not authorised; a statement that the notice is accurate and that you are the rights holder or act for them; and your signature. If we act on it, we tell the person concerned where we can. They may send a counter-notice with the same details, explaining why the material was removed in error, and we may restore it unless the rights holder starts proceedings. We end access to our services for people who infringe repeatedly.
We answer with a receipt, look at each notice, and act without undue delay when it is valid. We may ignore notices that are incomplete or clearly abusive, and we may act without a notice when the law requires it or someone is at risk.
Authorities. We respond to valid legal orders served on Drive 369 DAO LLC at hello@ghostdrive.com. Because of how Ghostdrive is built, we hold very little: no accounts, no emails, no content we can read. What we may hold is listed under Privacy below. We do not build ways around the encryption.
Running a node, storage and validation
Anyone can run the open-source node: as a personal or backup node for their own vault and groups, as a storage provider on the testnet, or as a public relay. A node stores and passes on encrypted blocks it cannot read. As an operator you are responsible for your node, your machine and following the law where it runs; you may choose what your node stores and serves, and block content on it. Do not try to read, alter or withhold other people’s data beyond what the protocol allows.
Storage providers on the testnet take deals through on-chain contracts on Base Sepolia and are paid per proven period in test tokens, which have no value. Terms for paid storage and for public relays will be published before they open.
Validators. DRIVE 369 Network is permissioned: validators are admitted by name, under a separate written agreement, and today they are all run by the 369 team. Organisations that want their own validator or their own network can contact us.
Test DRIVE, DRIVE, points and credits
The testnet runs on Base Sepolia. Test DRIVE has no monetary value, cannot be sold and is not DRIVE. The faucet gives a small amount of test DRIVE each day to try the DAO, Office, storage and the rest. The testnet, its contracts and its balances may be reset, changed or ended at any time.
DRIVE is a token on Base with a fixed supply of 369,000,000. Ghostdrive’s mainnet is planned after an external audit. Nothing here is an offer to sell any token or a promise about its value, price or listing.
Verified work earns points, as listed on the Points page. The DAO may use points to decide a future reward wave of DRIVE on Base. Points are not a promise, a payment, an investment or a claim on any token. Whether a reward happens, its size and who is eligible are decided later, at the DAO’s discretion, and may require eligibility and sanctions checks. Points earned with fake identities, bots or other abuse are not counted.
Organisations may buy service credits (such as IndoDrive Credits) for storage, AI, notary and signatures. Credits are an accounting unit for using the service: they cannot be transferred outside the organisation, sold or exchanged, and they are not money or a token.
Nothing on Ghostdrive is financial, legal or tax advice.
Privacy: what we see
There is no account with us: no email, no password, no profile on a server. Inside the app nothing is tracked. The public pages of ghostdrive.com are counted in aggregate with Vercel Web Analytics: no cookies, the page path only, never app pages, never the desktop app, and nothing at all if your browser sends Do Not Track or Global Privacy Control.
The network sees what it needs to work. Our relay (behind Cloudflare), the faucet, the storage nodes, wallet services and the public Base RPC providers see your IP address when you connect to them; Cloudflare and these providers keep logs under their own policies. To stop abuse, the faucet keeps a log of claims for 24 hours with salted hashes of your Ghost ID, your wallet and your network address, and a claim links your Ghost ID to the wallet you claim with.
Web search in Terminal goes through our relay to Brave Search: Brave sees the words you search for, our relay does not store them and keeps only salted network hashes in memory to limit abuse. Secret links record each view’s time, device kind and country, never the IP address, for their owner to see.
The relay also keeps traps: addresses no person or app ever opens (such as /.env or /wp-login.php), and a decoy key. If something tries one, the relay records its IP address, network, country, the address it tried and its software name, never anything it sent, blocks that network on the relay for 24 hours and alerts our team. These records are deleted after 30 days.
One count is on by default: “Count me among members” (Settings › Privacy) sends one anonymous ticket per vault, with how you sign in and no name, address or key, so the site can show how many people joined. Turn it off there at any time.
If you write to us through the Contact page, your message is sealed to our team and signed with your Ghost ID, so we see which Ghost ID wrote; the email you give is used only to answer you. Abuse and legal reports you email us are kept as long as needed to handle them and as the law requires.
You can ask what we hold about you, and ask us to correct or delete it, at the address below. Most of your data is on your own devices and only you can see or delete it.
The code is open source, so every claim on this page can be checked: github.com/NeyraLabs/ghostdrive.
Your content and our software
What you create stays yours. You give us only the permission needed to store, carry and deliver it in encrypted form as you direct, and, for anything you make public, to show it. The Ghostdrive software is open source under the licences in its repository; the Ghostdrive and DRIVE 369 names and marks are ours.
No warranty, limited liability
Ghostdrive is provided “as is” and “as available”, without warranties of any kind. It is beta software: it can have bugs, lose data or be unavailable.
To the fullest extent the law allows, Drive 369 DAO LLC, NeyraLabs and the Ghostdrive contributors are not liable for lost keys or recovery words, lost or unreadable data, bugs in software or smart contracts, the actions of wallets, networks, node operators or other third parties, or any reward, token or value you expected and did not receive. Where liability cannot be excluded, it is limited to the amount you paid us in the twelve months before the claim, or 100 US dollars if you paid nothing.
You are responsible for claims that arise from your content, your node or your breach of these terms.
Suspension and ending
You can stop using Ghostdrive at any time; your vault stays on your devices. We may refuse or end your access to the services we run if you break these terms or the law, or to protect people or the network. We cannot lock you out of your own vault or your own node.
Changes
We may change these terms. The date at the top shows the current version, and the app asks you to accept a new version before you continue. We may change or end the testnet, points or any feature at any time.
Contact
Questions about these terms or your privacy: hello@ghostdrive.com or the Contact page. Abuse reports: hello@ghostdrive.com. Copyright notices: hello@ghostdrive.com. Legal requests: hello@ghostdrive.com.