Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Galiax collects, uses and protects information, both the details you provide through this website and the data handled by Merge, the platform we operate for our clients.
Information we collect
When you submit the contact form we collect the name, email, optional company and message you provide, solely to respond to your inquiry.
How we use it
We use your information only to reply to your request and, where applicable, to provide the services you ask about. We do not sell your data.
Financial data (Merge platform)
When a bank account is connected to Merge, our operations platform, the connection is made through Plaid, a regulated financial data provider. Galiax never sees, receives or stores online banking credentials: they are entered directly with Plaid, which returns only a read-only access token. Through that token we read account balances and transaction history in order to display them and reconcile payments. The access is read-only — it cannot move funds — and we do not sell this data or share it with third parties for advertising or any other purpose.
Data retention and deletion
Access tokens for bank connections are held only in our server environment configuration and are not written to any database. Conversations handled by our messaging assistant are retained for one month. A bank connection can be revoked at any time, from your own bank or by asking us: revoking it ends our access immediately and the corresponding token is deleted.
How we protect your data
Traffic between clients and our servers is encrypted in transit using TLS 1.2 or higher, and data stored with our providers is encrypted at rest. Access to production systems is restricted to named team accounts protected with multi-factor authentication, and credentials are kept in environment configuration, never in source code.
Third parties
Form submissions are processed by Netlify (our hosting provider). Their handling of data is governed by Netlify's own privacy policy.
Cookies and analytics
We use Google Analytics to understand, in aggregate, how the site is used. These cookies are only enabled if you give your consent in the cookie notice; you can change your choice at any time from the “Cookie preferences” link in the footer.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting us.
Contact
For any privacy question, reach us through the contact form on this site.