1. Introduction

Galoy Inc. (“Galoy,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website galoy.io.

2. Information We Collect

Information you provide

We may collect information you voluntarily provide, including:

• Contact information (name, email address, phone number)
• Company/organization information
• Job title and role
• Messages and communications you send us
• Information submitted through forms (demo requests, contact forms)

Automatically collected information

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Geographic location (country/region level)

Cookies and tracking technologies

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. We use:

• Essential cookies: Required for website functionality
• Analytics cookies: Used to understand how visitors use our site (Google Analytics 4, set only with your consent)

3. How We Use Your Information

We use collected information to:

• Respond to your inquiries and requests
• Provide information about our products and services
• Send marketing communications (with your consent)
• Improve our website and services
• Analyze website usage and trends
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers: Companies that help us operate our business (hosting, analytics, email services)
• Professional advisors: Lawyers, accountants, and other advisors
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. When information is no longer needed, we securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have rights including:

• Access to your personal information
• Correction of inaccurate information
• Deletion of your information
• Objection to processing
• Data portability
• Withdrawal of consent

To exercise these rights, submit a privacy inquiry, or report a privacy incident, contact us at privacy@galoy.io. We will confirm receipt and respond within 30 days.

8. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

9. Children’s Privacy

Our website is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website with a new “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, need to submit a data subject request, or need to report a privacy incident, please contact us:

Galoy Inc.
Email: privacy@galoy.io

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information).

14. European Privacy Rights

If you are in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing personal information includes consent, contractual necessity, and legitimate interests. You may lodge a complaint with your local data protection authority.