Privacy policy

About this policy

This policy covers the Galite website, waitlist, and early-access product. The current focus is Career context: bring a résumé or your own words, review proposed facts, and choose what to publish. This policy also covers records and connections from earlier financial-document workflows, which are not part of current Career onboarding. Contact Galite at ahmed@galite.ai with privacy questions or requests.

Information we handle

• Waitlist information. Your email address, signup time, and consent record when you request launch updates.
• Account information. Account identifiers, name, email address, profile information supplied at sign-in, and information needed to maintain your session.
• Workspace content. Documents you upload or import, extracted text, private notes and clarification answers, proposed and accepted facts, corrections, resource files, conversations, and assistant responses. Existing financial records remain covered by this policy.
• Publication information. The profile content and evidence links you select, publication versions, audience choices, recipient permissions, and records of profile access.
• Connection information. Linked account identifiers, permissions you grant, OAuth tokens, source references, and connection or import status.
• Operational information. Activity records, revision history, timestamps, and error information used to operate and troubleshoot the service. Hosting providers may also process request information such as IP addresses and browser details.

Private sources and deliberate publication

Uploaded sources, private notes, and proposed facts belong to your private workspace. Keeping or correcting a Career fact does not publish it. Publishing requires a separate preview and approval of the selected content and audience.

A public profile makes that selected publication available to anyone. A restricted profile requires an authorized recipient. Private source text and filenames are not included in the publication; only evidence links you explicitly choose are shared. A later private correction does not change a published version until you publish again.

Unpublishing or revoking a recipient's access stops future reads through Galite. It cannot recall a downloaded résumé, a copied profile, or information already received by another person or AI service. Those services have their own data practices.

Desktop imports and additional AI connections are being developed. Availability is stated separately from the product direction; this policy does not mean those features are already available. Joining the waitlist does not connect an AI tool or grant access to files on your device.

Existing Gmail and financial-document workflows

Gmail is an optional connection from the financial-document workflow. Career onboarding does not require it. The following disclosures apply to existing Gmail connections and imports.

Signing in with Google does not by itself grant Galite access to your mailbox. If you choose Connect Gmail, we request Google's Gmail read-only permission. This permission allows access to email messages and settings; it does not allow Galite to send, edit, or delete your email.

When you start a Gmail import, that flow searches recent messages for PDF and image attachments. It reads matching messages to find their attachments, then saves supported files and source references in your Galite workspace. A matching attachment is not necessarily a financial document, so imports may include other kinds of files.

Imported originals and information extracted from them support your document review, financial records, and answers in conversation. The Google permission is broader than the particular messages the current import searches.

How we use information

We use this information to authenticate you, provide the workflows you request, keep your records and their sources connected, save your corrections and conversations, operate the service, respond to support requests, and protect accounts from misuse. Waitlist signup information is used for launch updates and managing your subscription.

We do not sell Google user data or use it for advertising. We follow the Google API Services User Data Policy and its Limited Use requirements for information obtained through Google APIs.

AI processing and service providers

Uploading a Career source or saving a note does not by itself start AI drafting. When you explicitly request a draft with Anthropic, selected source text, accepted Career facts, and your stated drafting preferences are sent for processing. This drafting flow excludes unselected sources, conversations, and financial context. Its proposals still require your review.

Other AI requests, such as conversations, may send your messages and relevant workspace information to our AI provider. In the existing financial workflow, that can include financial facts and text derived from uploaded or Gmail-imported documents. The current provider is Anthropic through its commercial API.

Anthropic states that commercial API inputs and outputs are not used for model training by default. We do not authorize Google user data to be used to train general-purpose AI models. AI processing does not mean zero retention: provider retention and security practices also apply.

Galite uses Convex to store and process application records, private files, and authentication data; Netlify to host the public website and frontend; and Neon to store waitlist signups. Google handles Google sign-in and the Gmail permissions you grant. These services receive information needed for their role and may process it outside your country.

We limit access to Google user data to providing the features you authorize. Human access requires your specific permission, except where permitted for security, legal obligations, or other exceptions in Google's Limited Use requirements.

Retention, disconnecting, and deletion

Your workspace keeps documents, records, conversations, and revisions so you can return to your work. Archiving a record hides it from active views; it is not permanent deletion.

Disconnecting Gmail stops further imports through that connection. It does not erase previously imported originals, extracted facts, conversations, or saved connection credentials. It also does not revoke the permission granted at Google. Revoke that permission in your Google Account connections; use the deletion contact below to request removal of saved data.

To request deletion of an original, associated records, conversations, your account, or a waitlist signup, email ahmed@galite.ai. Identify the account and what you want deleted; please do not send passwords or copies of sensitive documents. We may need to verify that the request comes from the account owner.

Deletion from active systems may not immediately remove copies in provider backups or records that must be retained for security or legal reasons. We will explain any applicable retention limits when handling your request. We do not promise immediate deletion from every provider or backup.

Your choices

You can choose which Career sources to add, review and correct facts, and decide whether to publish selected content. Existing Gmail connections remain optional. You can request access, correction, export, or deletion by contacting us. To stop launch emails, use the unsubscribe option provided with the message or contact us.

The application uses browser storage and session information to keep you signed in and preserve interface preferences. The public waitlist page does not include advertising trackers.

Changes to this policy

We will update this page as Galite changes and revise the date above. If a change introduces a new use of Google user data, we will explain it and obtain consent where required before using data that way.