Skip to content
Galdocompany memory

Privacy Policy

Last updated: 27 October 2026.

Galdo (“we”) operates the Galdo API. This policy describes what we collect, how we use it, and the controls you have.

Information we collect

  • Account data: email, name, hashed password, MFA enrolment, SSO identifiers. Collected when you sign up.
  • Workspace content: memories, documents, search queries, and metadata you submit via the API. Stored encrypted at rest; encrypted in transit.
  • Usage data: per-tenant counters (request counts, latency), audit logs of admin actions, IP address, user agent. Used for billing, security, and service improvement.
  • Cookies: a session cookie after login. On getgaldo.com, our marketing site, Google Analytics measures visits and sets its own cookies, but only if you accept in the cookie banner; you can change your choice any time with "Cookie settings" in the footer. No advertising cookies.

How we use your data

We do not train AI models on your content. AI processing on hosted Galdo uses the providers listed under Sub-processors below. None of them uses your content to train models.

  • Operate the Service (store, index, retrieve your memories).
  • Provide support, bill accurately, prevent abuse.
  • Communicate product updates and security-relevant notices.
  • Comply with legal obligations.

Galdo Capture (browser extension)

Galdo Capture records nothing unless a workspace administrator switches it on and each person consents in their own browser. It then records activity only on the sites the administrator allows.

  • What is recorded: page addresses and titles, the labels of clicked controls, form submissions, and selected options. Text typed into a field is read once, when the person leaves the field, then redacted on the device and again on our servers (emails, phone numbers, payment card numbers, credentials and similar) and cut to 200 characters. Administrators can switch off typed text for the workspace; then only the field's label is kept.
  • What is never recorded: password, payment and hidden fields; incognito windows; individual keystrokes or the clipboard; screenshots, audio or files; any site the administrator has not allowed.
  • How it is used: activity is grouped into work sessions, each summarised by a large language model run by our provider Anthropic, and the summaries are used to build step-by-step procedures shared within that workspace once seen at least twice. Workspace owners and admins can see which sessions a procedure came from. We don't sell this data and we don't use it to train models.
  • Retention: raw events are deleted automatically after the workspace's retention period (30 days by default, adjustable from 1 to 90). Session summaries and procedures are kept until deleted.
  • Your choices: each person can pause capture, withdraw consent for a browser, and delete everything recorded from them (or everything from a chosen moment) from My Capture in the dashboard; deleting it also removes it from procedures, except steps a workspace owner or admin has since rewritten by hand, which stay with the procedure. Administrators can delete all captured data for their workspace, which also deletes every procedure, rewritten ones included, and closing your account deletes your captured data.

Sub-processors

  • US-hosted infrastructure — hosting: application servers, database and backups (United States).
  • Microsoft Azure OpenAI — embeddings for search (United States).
  • Anthropic — AI models: extracting memories, answering questions in Ask and the Slack app, and Capture session summaries and procedures. Keeps inputs/outputs up to 30 days; not used for training (United States).
  • Resend — transactional email: verification, invitations and digests (United States).
  • Google — sign in with Google (Global, only if used).
  • GitHub — sign in with GitHub (Global, only if used).
  • Slack — the Company Brain Slack app, for workspaces that install it (Global, only if used).
  • Connected apps — Notion, Jira, Outlook, OneDrive and the other tools on /connectors that a workspace chooses to connect (Global, only if used).
  • Google Gemini — understanding YouTube videos you add to Galdo, only if used (Global).
  • Google Analytics — visit analytics for the getgaldo.com marketing site only (Global).

Data residency

Galdo stores your data in the US. Per-workspace region selection (EU) is on the roadmap. Some sub-processors may process data outside the US; each one's location is listed above.

Retention

Workspace content is retained for the lifetime of your account. When you delete a workspace, we start a 30-day grace period and then purge permanently. Audit logs are append-only and aren't deleted on a schedule. Database backups are kept for 30 days, then deleted automatically.

Your rights

You can access, export, correct, or delete your data at any time via the dashboard. EU/UK residents have additional rights under the GDPR (right to object, right to restrict processing, right to lodge a complaint with a supervisory authority).

Security

We use argon2id for password hashing, TLS 1.2+ for transport, AES-256 for encryption at rest, and continuous audit logging. MFA (authenticator app) is available on every account; with single sign-on, your identity provider's MFA applies. Report vulnerabilities to security@mnemohq.com.

Contact

Questions? Email privacy@mnemohq.com. Our Data Protection Officer can be reached at the same address.

Explore Galdo