Privacy Policy

Last updated: October 14, 2026

1. What We Collect

When you use Galley, we collect and process:

• Document text — the text you submit for fact-checking (full document or selected portion)
• Account information — your Google account email and display name, used for authentication and attribution
• Run history — the results of each fact-checking run, including claims, verdicts, sources, and cost estimates
• Feedback — any feedback you provide on claim verdicts (correct/wrong)
• Feature usage — when you use suggested fixes, we record which actions were taken (for example, a fix applied or undone) and how many, without any text
• Diagnostics — when something goes wrong in the Galley extension (for example, a sign-in that fails, a document that won't load, or a check that errors), it automatically sends us a report: the error and where it occurred, recent warnings and failed requests from the extension itself, the address of the page it was open on (without any query string), your browser and extension version, the Google account the extension was using, and a one-way hash of your IP address. Reports never include document text or claims. They are stored to help us troubleshoot and may be emailed to our team.

2. How We Use Your Data

• Document text is sent to AI models (Anthropic Claude) for claim extraction and synthesis, and to web search APIs (Brave Search, Google ClaimReview) for evidence gathering
• Run results are stored in your organization's workspace for team visibility and historical reference
• Verified claims are cached to speed up future checks of similar content
• Feedback is used to evaluate and improve fact-checking accuracy
• Aggregate usage statistics (run counts, timing) are used to estimate processing times
• Diagnostic reports and feature-usage records are used only to find and fix problems and to understand which features are used

3. Data Isolation

Each organization has an isolated workspace. Your document text, run history, rules, and feedback are only visible to members of your organization and system administrators. Members of other organizations cannot access your data.

4. Third-Party Services

Galley uses the following third-party services to process your data:

• Anthropic (Claude) — AI models for claim extraction, filtering, and verdict synthesis
• Brave Search API — web search for evidence gathering
• Google ClaimReview API — structured fact-check data from published fact-checkers
• Voyage AI — text embeddings for claim similarity and caching
• Google Firebase — authentication, data storage, and hosting

Document text is sent to these services for processing and is subject to their respective privacy policies. We do not sell your data to any third party.

5. Data Retention

Run history and claim data are retained indefinitely for your organization's reference. Cached claims have a configurable TTL (time-to-live) after which they are re-verified. You may request deletion of your organization's data by contacting us.

6. Google API Services

Galley's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google Docs content only when you explicitly initiate a fact-check, and we do not use this data for advertising or any purpose unrelated to providing the fact-checking service.

7. Security

Data is transmitted over HTTPS and stored in Google Firebase with role-based access controls. Authentication is handled through Google OAuth and Firebase Authentication. Only authorized members of your organization can access your workspace data.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Your team lead or system administrator can remove your membership, which revokes your access to the organization's workspace.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by updating the "Last updated" date above.

10. Contact

For questions about this policy, contact john_randolph@alumni.brown.edu.