Privacy Policy

1. Introduction

Galini ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

Galini is operated by Johan van der Boog and Geert Tibosch, based in the Netherlands. We comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile photo (optional)

Business and Customer Data

When you use the Service, we process:

• Business name and settings
• Customer email addresses and names you provide
• Event data (appointments, services, purchases)
• Email layouts and templates
• Images you upload for emails

Analytics Data (with consent)

If you accept analytics cookies, we may collect:

• Pages visited and features used
• Device type and browser information
• General location (country/region)

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Generate personalized emails using AI
• Manage your account and authenticate you
• Send important service notifications
• Improve the Service based on usage patterns (with consent)
• Process payments for subscriptions
• Comply with legal obligations

4. Legal Basis for Processing

We process your data based on:

• Contract: To provide the Service you requested
• Consent: For analytics and marketing communications
• Legitimate interest: To improve our Service and prevent fraud
• Legal obligation: To comply with applicable laws

5. Data Storage and Security

Your data is stored securely on servers located within the European Union. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS)
• Secure authentication mechanisms
• API key hashing
• Regular security updates
• Access controls and monitoring

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your account information is permanently deleted
• All your business data and customer records are permanently deleted
• All email history and uploaded images are permanently deleted

We may retain certain data for longer if required by law or for legitimate business purposes (e.g., payment records).

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Delete your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at the email address below or use the relevant features in your account settings.

8. Cookies

We use cookies and similar technologies for:

• Essential cookies: Required for the Service to function (authentication, security)
• Analytics cookies: Help us understand how you use the Service (only with your consent)

You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.

9. Third-Party Services

We use the following third-party services:

• AI providers: For generating email content
• Email providers: For sending emails on your behalf
• Payment processors: For handling payments securely
• Cloud hosting: For storing and serving your data (EU-based)

These services have their own privacy policies. We only share the minimum data necessary for them to provide their services.

10. Children's Privacy

The Service is intended for business use and is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or by email. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your rights have been violated.