Privacy Policy

1. What we collect

Account information: your email address and password, or the details a sign-in provider shares with us if you sign in that way, and your plan and billing status. Payment details are collected and stored by Stripe, our payment processor; we receive confirmation of payments, the last four digits of your card, and your subscription status, never your full card number.

Project content: the topics, titles, outlines, reader descriptions, manuscripts, and exported files you create in Galley, and the settings you choose for them.

Voice Studio content: if you paste a writing sample, we store that text privately to your account to build your Voice DNA profile. If you record or upload audio, the audio is sent to our transcription provider and processed in memory; the raw audio is never written to storage or a database, and only the transcript you review and approve is kept. Your voice profiles are visible only to your account.

Usage and technical data: pages visited, features used, approximate location from your IP address, device and browser type, and diagnostic events, collected through server logs and the analytics tools described below.

Correspondence: messages you send us at info@galleykdp.com.

2. Why we use it

To provide the service, including generating and storing your manuscripts and voice profiles. To bill you and manage your subscription. To keep the service secure, prevent abuse, and enforce our terms. To understand how Galley is used so we can improve it. To respond when you contact us. To meet legal obligations. We do not sell your personal information, and we do not use your writing samples, transcripts, voice profiles, or manuscripts to train AI models or to generate content for anyone else.

3. Who processes your data

We use a small number of service providers, each bound to process data only for us: Supabase for our database, authentication, and server functions, hosted in the United States; Stripe for payments and billing; Anthropic for AI text generation; OpenAI for audio transcription; Rainforest API for marketplace data, which receives the topic text of a niche search in order to fetch live listing data and receives no account identity; Cloudflare and Lovable for building, hosting, and delivering the website; Google for our email service, for Google Analytics and Google Tag Manager, for web fonts, and for sign-in where you choose it; and Microsoft Clarity, running inside our Google Tag Manager container, for understanding how visitors use the site. When Galley sends your content to an AI or transcription provider, it sends only what is needed to fulfil your request. We also share information when the law requires it, to protect our rights or the safety of others, and in connection with a merger or sale of the business, in which case this policy continues to apply.

4. Cookies and analytics

Galley uses cookies and similar technologies to keep you signed in and to measure how the site is used. Google Analytics and Microsoft Clarity set analytics cookies and may record how you navigate pages. You can block analytics cookies in your browser settings, and Google and Microsoft each provide opt-out tools. We do not run advertising cookies on the site.

5. Where your data lives and international transfers

Our systems are hosted in the United States, and our providers may process data in other countries. Where the law requires safeguards for transferring personal data across borders, we rely on the United Kingdom's international data transfer safeguards alongside our providers' standard contractual protections.

6. How long we keep it

We keep your account and project content while your account is active so your work stays available to you. If you delete your account or ask us to, we delete your personal information and content within thirty days, except records we must keep for tax, accounting, or legal reasons, and backups that expire on their own schedule. Analytics data is retained by our analytics providers according to their settings, which we keep to the shortest practical window.

7. Your rights and choices

You can access and update your account information in the product. You can export your manuscripts at any time. You can ask us to correct, delete, or give you a copy of your personal information, or to stop a particular processing, by emailing info@galleykdp.com; we will respond within thirty days. If you are in the United Kingdom, you also have the right to object to certain processing and to complain to the Information Commissioner's Office; if you are in the European Economic Area or another region with data protection rights, the same rights apply and you may complain to your local supervisory authority. We do not discriminate against you for exercising your rights.

8. Security

We protect your data with encryption in transit, access controls that keep each account's content visible only to that account, and provider infrastructure with independent security certifications. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as the law requires.

9. Children

Galley is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

10. Changes

We may update this policy. Material changes will be announced by email or in the product before they take effect, and the effective date above will change.

11. Contact

Julu Growth Ltd (company number 17183876), registered in England and Wales. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. Email: info@galleykdp.com.