Who we are
Galilei Systems LLC, based in Florida, USA, is responsible for the data collected on this site. For any privacy matter, write to us at support@galileihub.com .
What information we collect
- Data you give us in forms: name, email, phone, your agency name and size, your role and county, and the message or time preference you include (waitlist, demo, Charter Program, or contact).
- Attribution data: the campaign parameters (utm_*, src) from the link you arrived through. They are stored temporarily in your browser and sent with your form so we know where interest comes from.
- Site usage data, to improve it: the date and time, which pages you view and in what order, how far down you scroll on each one, which buttons and links you click, the JavaScript errors you run into, your device type, browser and operating system, your window size, your browser language, and from your IP address: the country, region, approximate city, time zone and your network operator. The IP address itself is NOT stored: we keep a code derived from it that changes every day and whose only job is to avoid counting the same person twice within the same day. This measurement uses no cookies and stores nothing in your browser. Of a click we keep the label of the button, never what you typed into a field.
This site never asks for passwords or handles sessions: authentication lives only in the application.
Data in the Galilei Hub platform
- Account data: name, email, phone, and role of the users an agency creates on the platform.
- Client and lead data: the contact information our customers (real estate agencies and professionals) upload to or receive in their CRM: names, phone numbers, emails, notes, and documents.
- Contacts you import: the names, emails and phone numbers in the file you upload (.vcf or .csv) or in your phone’s address book when you import it from the app. We do not access your Google account for this.
- Communications: the content and metadata of SMS, WhatsApp, and email messages, and the call records sent or received through the platform, including phone numbers and delivery and read statuses.
For client and lead data we act as a data processor: we process it solely on the instructions of the agency that controls it, and we never use it for our own purposes, for advertising, or for model training.
When you open the signup
The signup screen at app.galileihub.com measures how it is used, including when you never finish it. It is the only place where we collect anything from someone who does not have an account yet, so we say it here before you type anything.
- What is collected: your IP address and, derived from it, your approximate country, region and city, the name of your network operator, and whether that IP belongs to a data centre or an anonymising network; your browser, operating system and device type; your language, time zone and window size; where you arrived from and the campaign parameters of the link; and which path you chose, which fields you entered, which ones you left empty, which error messages you saw, and how long you took.
- What is NOT collected: what you type inside the fields. We store the name of the field and what happened to it (you touched it, you left it empty, a warning appeared), never its contents. Passwords are not recorded in any form. The one exception is the email address you submit the form with, and it is there for one specific thing: to know whether that attempt ended in an account.
- What for: to fix what gets in the way. A field people get stuck on, or an error that keeps coming up, are our defects, and without measuring them they stay invisible.
- Who sees it: only us, from the administration panel. It is not shared with third parties, it is not used for advertising or profiling, and it is not linked to your account beyond the submitted email address.
- How long it lasts: 90 days. After that it deletes itself, with all of its detail.
We use no cookies for this. While you fill in the form, your browser stores a random identifier in session storage (cleared when you close the tab) whose only purpose is to keep what happens within one visit from being counted as several.
Your public profile (Marketplace)
If you are an agent, broker or independent realtor, creating your account publishes a page with your professional profile. It is born published, with nothing to switch on, and it is open to anyone and indexable by search engines. This is publication of personal data by default, which is why we say it here before it happens.
- What becomes public: your name, title, photo if you uploaded one, license number, brokerage or independent status, headline, bio, languages, areas, specialties, years in the business, certifications, awards, website, social profiles, transaction figures, rating and approved reviews, and which brokerages you were at.
- What does NOT become public: your phone number. It never travels in the page; it is served by a separate request, with an hourly cap, and only if you chose to show it.
- Where it comes from: your account details and the activity recorded in the platform. While your profile is incomplete, some fields are filled with what we already know (the area from your brokerage’s city, the language from the one you use in the platform) and the bio may be written by artificial intelligence from those same details. The page states when a bio is generated.
You can take the page down at any time from your panel, without asking anyone: once off, its address answers like a page that does not exist. The public profile is yours and your brokerage does not decide about it.
Reviews are written by third parties and are published under the name their author signed with. The email of whoever leaves a review is never published: it is kept so we do not duplicate submissions and so we can write to them if the review is disputed. No review is published without going through Galilei’s moderation.
WhatsApp, Facebook and Instagram (Meta)
Galilei Hub integrates the WhatsApp Business Platform as a Meta Tech Provider. When a customer connects their WhatsApp Business Account, we process on their behalf the phone numbers and message content needed to send and receive WhatsApp messages, and to create and manage message templates and check their approval status.
That data is transmitted to Meta Platforms, Inc. and to our messaging solution provider, Vonage, and is subject to the WhatsApp Business Terms and Meta’s privacy policies. We do not use WhatsApp message content for advertising, profiling, or model training.
Facebook and Instagram lead ads: if a customer connects their Facebook Page to Galilei Hub, we receive, on that customer’s behalf and through Meta’s Lead Ads API, the information that people submit in the customer’s lead forms on Facebook and Instagram (such as name, phone number, email, and the answers to the form’s questions), together with the name of the campaign, ad, and form that generated it. We use that information solely to create and manage the lead in the customer’s CRM account and to run the follow-up the customer configures. We do not use it for our own advertising, for profiling, or to train models, and we do not sell or share it with any other party.
To connect a Page, the customer signs in with Facebook; we store the access credentials Meta issues, encrypted, and only for as long as the connection is active. Customers can disconnect at any time from Galilei Hub or by removing the “Galilei Hub Leads” app in their Facebook settings, and we delete the stored credentials immediately. Lead data received from Meta is kept as part of that customer’s account and deleted under the rules in “Data deletion”; Meta’s own retention of lead forms is governed by Meta’s terms.
Google: sign-in, Calendar and Drive
Galilei Hub integrates with Google for three features that each user turns on (and can turn off) themselves. Each one asks for its own permission on the Google consent screen: none of them is enabled on its own or bundled into another.
- Sign in with Google (openid, userinfo.email, userinfo.profile): we read your name, email address and profile picture to identify you at sign-in and to link your Google account with the account you already have. Nothing else. No account is ever created through Google: the account is created in Galilei Hub, and the Google button is there to get into it, not to open it.
- Google Calendar (calendar.events.owned): we sync your Galilei Hub calendar with your primary Google Calendar, both ways, and with that one only. This permission only covers calendars you own; Galilei Hub uses only your primary calendar and never reads other calendars shared with you. We create, update and delete there the events and tasks that originate in the platform, and we read the changes you make in Google (time, title, guests, cancellation), including the invitations you receive from other people, so the two calendars never contradict each other.
- Google Drive (drive.file): if you turn on cloud backup, we copy to your Drive, into a folder named "Galilei Hub", the documents in your Vault that you can download. The permission is per file: we only see the files the application itself creates, and the rest of your Drive is invisible to us.
The data we receive from Google is used only for those features, all of them visible to you inside the application. We do not use it for advertising, profiling or training artificial intelligence models (ours or anyone else’s) and we do not sell it or pass it to data brokers, ad networks or credit assessment services.
It is only transferred to a third party in these cases:
- If you ask us to.
- When it is necessary to provide you with the features you use inside the platform, and then only to providers acting on our behalf and under confidentiality obligations.
- If the law requires it or a valid legal process compels us.
- If it is necessary to prevent fraud or resolve a security incident.
- As part of a merger, acquisition or sale of assets. Should that happen, we notify users before their data becomes subject to a different privacy policy.
No one at Galilei reads that data. The only four exceptions are the ones Google’s policy allows:
- With your express permission, and only for the specific data you authorise, for example when you ask for help with a support issue.
- Where it is necessary for security: investigating abuse, fraud or a technical incident.
- Where the law requires it or a valid legal process compels us.
- In aggregated and anonymised form, for our internal operations, for example how many accounts have the calendar connected. In that form the data no longer identifies anyone.
Data we receive from Google is never sent to any artificial intelligence provider. The platform’s AI features do not use it: events that come from Google, or that Google changed, are left out of what those features see.
The credentials Google issues are stored encrypted (AES-GCM) on our servers and always travel over encrypted connections. How we protect the rest is set out on our Security page .
You can disconnect your Google account at any time from Settings > Integrations in Galilei Hub, or withdraw the permission directly at your Google Account permissions page . Either way we delete the stored credentials immediately, and calendar syncing and Drive backup stop.
What was already synced is not deleted when you disconnect: the events that reached your Galilei Hub account stay there until you delete them or close the account, and then they are removed under the rules in “Data deletion”, within 30 days. The copies the backup uploaded to your Drive stay in your Drive, which is yours: if you do not want them, you delete them from Drive.
Galilei Hub’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and the same applies to information received from Google Workspace scopes. You can read it at the Google API Services User Data Policy .
Why we use it
- Respond to your request and contact you about Galilei and the Charter Program.
- Understand which channels generate interest so we can communicate better.
- Prevent abuse and spam (honeypot field and anti-bot verification).
How long we keep it
Site data, as long as needed to handle your request and while you remain an interested contact. Platform data, for as long as the account holding it stays active. Site usage data and what the signup screen measures, 90 days for both: that is not a statement of intent, it is an instruction that runs on the server. You can request deletion at any time (see Data deletion).
Your rights
You can access, correct, delete, and export your data, as well as object to processing or withdraw your consent. Write to us at support@galileihub.com and we respond.
Data deletion
You can request deletion of your data at any time by writing to support@galileihub.com from the email associated with your account, stating what you want deleted. We confirm receipt and complete the deletion within 30 days.
From Settings, inside the platform, you can request the deletion of your own account: you have 14 days to change your mind and, once they pass, it is deleted permanently. If you are an agency user, your administrator can also delete your account from within the platform. When an agency disconnects its WhatsApp Business Account or closes its Galilei Hub account, we delete the associated data from our production systems within 30 days, except for what the law requires us to keep.
If you submitted a lead form on a Facebook or Instagram ad and want that data removed from Galilei Hub, write to support@galileihub.com or ask the business that ran the ad. Requests that Meta forwards to us through its own data-deletion process are handled automatically and given a confirmation code.
Security
We encrypt traffic in transit and apply a minimal surface and defense in depth. Learn more on our Security page .
International transfers
We operate from Florida, USA; your information is processed there. If you contact us from outside the USA, you consent to that processing.
Minors
This site is not directed to anyone under 18, and we do not knowingly collect their data.
Changes
If we update this Policy, we will change the date in the header. Material changes will be communicated on this site.