Privacy Policy

1. Information We Collect

We may collect different types of information depending on how you use our platform.

1.1 Personal Information

Personal information may include:

• Name
• Business name
• Email address
• Phone number
• Mailing address
• Billing information
• Account login credentials
• Profile details
• Business identification information

1.2 Business Data

GAL-B ERP allows businesses to manage operational data such as products, inventory, orders, customers, suppliers, invoices, bookings, logistics information, and operational analytics. Businesses using GAL-B ERP are responsible for ensuring they have the appropriate rights and permissions to upload and process such data.

1.3 Automatically Collected Information

When you use our platform, we may automatically collect IP address, browser type, operating system, device information, usage activity, login timestamps, system logs, and performance data. This information helps us operate and secure the platform.

1.4 Cookies and Tracking Technologies

GAL-B ERP uses cookies and similar technologies to maintain login sessions, remember user preferences, improve platform performance, analyze system usage, and enhance security. Users can disable cookies in their browser settings, but some platform features may not function properly without them.

1.5 Financial Data

When you choose to connect your bank account through GAL-B ERP, we collect financial information to enable bank reconciliation and bookkeeping features. This financial data may include:

• Bank account name, type, and mask (last four digits)
• Account balances (current and available)
• Transaction history (up to 24 months), including transaction dates, amounts, descriptions, categories, and merchant names
• Routing and account numbers (for account verification purposes only)

This financial data is collected through our integration with Plaid Inc. ("Plaid"), a third-party financial data provider. When you connect your bank account, you are providing your consent for Plaid to access your financial data from your bank on our behalf.

We use your financial data solely for the following purposes:

• Automated bank reconciliation within GAL-B ERP
• Matching bank transactions against invoices and payments
• Displaying account balances and transaction history within the platform
• Generating bookkeeping and financial reports

We do not sell, rent, or trade your financial data to any third party. We do not use your financial data for advertising, marketing to third parties, or any purpose unrelated to the GAL-B ERP services you have requested.

2. How We Use Your Information

We use collected information for the following purposes:

• Providing and maintaining the GAL-B ERP platform
• Creating and managing user accounts
• Enabling ERP features such as inventory, orders, and analytics
• Processing subscriptions and payments
• Providing technical support
• Improving system performance and reliability
• Detecting fraud and preventing unauthorized activity
• Developing new features and services
• Complying with legal obligations

3. AI and Automation Features

GAL-B ERP may include artificial intelligence and automation features to assist users with analytics, forecasting, operational insights, automated workflows, and recommendations. These features may process data entered into the platform.

GAL-B does not use private business data to train public AI models unless explicitly stated. Users should avoid submitting highly sensitive personal information into AI features unless appropriate safeguards are in place.

4. Third-Party Integrations

GAL-B ERP may integrate with third-party services such as payment providers, financial data providers (such as Plaid Inc. for bank account connectivity and transaction data), shipping companies, accounting systems, email services, marketing platforms, analytics tools, and cloud infrastructure providers. When you enable such integrations, certain information may be shared with those services to enable functionality.

We are not responsible for the privacy practices of third-party services.

4A. Financial Data Services (Plaid)

GAL-B ERP uses Plaid Inc. to connect your bank account and retrieve financial data. When you connect your bank account through GAL-B:

• You will be redirected to Plaid's secure interface ("Plaid Link") to log in to your bank
• Plaid will access your bank account information and transaction data on our behalf
• Plaid acts as an intermediary between GAL-B and your financial institution

Plaid's use of your data is governed by Plaid's own privacy policy, which is available at: https://plaid.com/privacy

By connecting your bank account through GAL-B, you acknowledge and agree that:

• You authorize Plaid to retrieve your financial data from your bank
• Your financial data will be transmitted from your bank to Plaid and then to GAL-B
• Plaid may process your data in accordance with Plaid's privacy policy
• GAL-B will use your financial data only for the purposes described in this Privacy Policy

You can manage your Plaid connections and review which applications have access to your financial data through the Plaid Portal at: https://my.plaid.com

5. Sharing of Information

Service Providers

We may share information with trusted vendors who assist with operating the platform, such as cloud hosting providers, payment processors, customer support platforms, analytics services, and security monitoring services. These providers are required to protect information appropriately.

Legal Requirements

We may disclose information if required to comply with legal obligations, respond to lawful requests by authorities, enforce our terms and agreements, or protect users or the public.

Business Transfers

If GAL-B ERP is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

6. Data Storage and Security

We implement reasonable technical and organizational measures to protect information, including encryption, authentication controls, secure cloud infrastructure, system monitoring, and access controls.

Financial data received through Plaid is encrypted at rest using AES-256 encryption and transmitted using TLS 1.2 or higher. Access to financial data is restricted to authorized personnel and systems on a need-to-know basis. We do not store your bank login credentials; all authentication is handled securely by Plaid.

However, no internet system is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain information only as long as necessary to provide our services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer required, it may be securely deleted or anonymized.

7A. Financial Data Retention and Deletion

Financial data obtained through Plaid is retained only as long as necessary to provide bank reconciliation and bookkeeping services within GAL-B ERP. Specifically:

• Transaction data is retained for as long as your bank account remains connected and your GAL-B account is active
• When you disconnect your bank account, we will stop pulling new transaction data
• Upon your written request, we will permanently delete all financial data associated with your account within 30 days, except where retention is required by applicable law

To disconnect your bank account or request deletion of your financial data, you may:

• Disconnect your bank within the GAL-B ERP platform settings
• Revoke access through the Plaid Portal at https://my.plaid.com
• Contact us at privacy@gal-b.com with a written deletion request

8. International Data Transfers

Information may be stored or processed outside Canada if our service providers operate in other countries. In such cases, data may be subject to the laws of those jurisdictions. We take reasonable measures to ensure appropriate protection of transferred data.

9. Your Privacy Rights (Canada)

Under Canadian privacy laws, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of certain data where applicable
• Withdraw consent for certain uses of information

Requests may require identity verification before processing.

9A. Your Rights Regarding Financial Data

In addition to the general privacy rights described in Section 9, you have the following rights with respect to your financial data:

• Right to disconnect: You may disconnect your bank account at any time through GAL-B ERP or through the Plaid Portal at https://my.plaid.com
• Right to data access: You may request a copy of the financial data we hold about you
• Right to deletion: You may request permanent deletion of your financial data
• Right to revoke consent: You may revoke your consent for us to access your financial data at any time by disconnecting your bank account

To exercise any of these rights, contact us at privacy@gal-b.com. We will respond to your request within 30 days.

10. Account Security Responsibilities

Users are responsible for:

• Protecting their login credentials
• Managing permissions for their staff
• Ensuring authorized use of the platform
• Complying with applicable privacy laws when handling customer data

11. Children's Privacy

GAL-B ERP is intended for business users and is not directed toward children under the age of 13. We do not knowingly collect personal information from children. If such information is discovered, it will be removed.

12. Third-Party Links

Our platform may contain links to external websites or services. GAL-B ERP is not responsible for the privacy practices of those websites.

Users should review the privacy policies of any external services they use.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If changes are made, the Last Updated date will be revised.

Continued use of the platform after updates constitutes acceptance of the updated policy.

14. Contact Information

If you have questions or requests regarding this Privacy Policy, please contact:

Location: Ontario, Canada

15. Consent

By using GAL-B ERP, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.