Privacy Policy

We collect information you provide and information needed to operate the service.

• Account details such as display name, email address, username, avatar, and IDs.
• Social connection data from platforms such as TikTok, Google, YouTube, X, and Discord, including basic profile information and account identifiers.
• Submitted content URLs, public post metadata, review status, reward status, and XP.
• Zealy campaign identifiers and onboarding details needed to verify participation.
• Technical data such as IP address, device data, browser data, logs, cookies, and session data.
• Messages you send to us, including support and policy requests.

• Provide login, account linking, dashboard access, and ambassador workflows.
• Verify platform identity, submitted content, eligibility, rewards, and XP.
• Prevent fraud, spam, abuse, unauthorized access, and policy violations.
• Maintain, debug, secure, monitor, and improve the service.
• Respond to support, privacy, legal, and compliance requests.

We use connected account data only for ambassador account connection, identity verification, submitted content review, reward administration, security, and support. We do not sell connected account data.

If you connect Google or YouTube, our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, and we do not use it to train generalized AI or machine learning models.

If you connect TikTok or X, we request only the access needed for the displayed connection and ambassador workflow. We do not post to your social accounts unless a future feature asks for separate permission and you grant it.

We share information with service providers and platforms only as needed to operate the service, protect users, comply with law, or complete a user-requested workflow. Providers may include TikTok, Google, YouTube, X, Discord, Clerk, Supabase, and Zealy, hosting, monitoring, analytics, queueing, database, review, and infrastructure providers.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, financing, reorganization, or sale of assets.

We use cookies, local storage, and similar technologies for authentication, session security, preferences, fraud prevention, and product operation. Disabling these may prevent parts of the service from working.

We keep information for as long as needed to operate the ambassador program, maintain security records, resolve disputes, enforce policies, comply with legal obligations, and preserve campaign history. We may delete or anonymize information when it is no longer needed.

You can request access, correction, deletion, or disconnection help by contacting official@galfi.io. We may need to verify your identity before completing a request. Some data may be retained where required for security, legal, fraud-prevention, or accounting reasons.

We use reasonable administrative, technical, and organizational measures to protect information. No internet service is perfectly secure, so we cannot guarantee absolute security.

The service is not directed to children under 13. If you believe a child provided personal information, contact us so we can review and take appropriate action.

We and our providers may process information in countries other than where you live. Those countries may have different data protection laws.

We may update this Privacy Policy from time to time. The effective date above shows the latest version. Continued use of the service after an update means the updated policy applies.

Privacy questions and requests can be sent to official@galfi.io.