Privacy Policy

Effective Date: May 15, 2026

Gallic ("we," "us," or "our") operates the Gallic platform, including work.gallic.com, compute.gallic.com, and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

1. Information We Collect

Account Information: When you create an account, we collect your email address, password (stored in hashed form), and, if you use Google OAuth, your Google account identifier.

Organization Data: Information you provide about your business, including company name, employee records, financial data, customer records, inventory, and other business information entered into the Service.

Payment Information: If you subscribe to a paid plan, we collect payment details through our payment processor, Stripe. We do not store your full credit card number on our servers.

Usage Data: We automatically collect information about how you access and use the Service, including IP addresses, browser type, pages visited, and timestamps.

Communications: If you contact us for support or send messages through the Service, we retain those communications.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send you service-related communications, including account verification emails and security alerts
• Respond to your requests and provide customer support
• Detect, prevent, and address technical issues, fraud, or security breaches
• Comply with legal obligations

3. Data Storage and Security

Your data is stored on secure servers. We implement industry-standard security measures, including encryption in transit (TLS/SSL), hashed passwords, CSRF protection, and access controls. Business data is logically segregated per organization through our multi-tenant architecture.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party vendors who assist us in operating the Service, including Stripe (payments), email delivery services, and infrastructure providers. These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Third-Party Integrations

The Service may integrate with third-party services such as Plaid (banking data), Google (authentication), and others. Your use of these integrations is subject to the respective third party's privacy policy. We only access the data necessary to provide the requested functionality.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide you the Service. Business data you enter into the Service is retained until you delete it or close your account. We may retain certain data as required by law or for legitimate business purposes, such as fraud prevention.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Export your data in a portable format
• Object to or restrict certain processing of your data

To exercise these rights, contact us at support@gallic.com.

8. Cookies and Tracking

We use session cookies to maintain your authenticated state. These cookies are essential for the Service to function and are not used for advertising or tracking purposes.

9. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date." Your continued use of the Service after such changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@gallic.com

Website: https://gallic.com