Galal Academy is operated by Galal Consulting LLC, a Wyoming limited liability company. This policy explains what personal information we collect, why we use it and the choices available to you. Last updated 31 August 2026.
1. Information we collect
We may collect your name, email address, optional profile photo, phone number, company and job information, optional postal address, account and authentication information, newsletter preferences and consent records, subscription and invoice identifiers, membership and document-access status, support messages, and basic technical information such as device, browser, IP address and security logs. When you purchase a subscription, Stripe processes your payment details; Galal Academy does not receive or store your complete card number.
2. How we use information
We use personal information to create and secure accounts, provide subscriptions and protected resources, process and reconcile payments, send service and renewal communications, deliver requested newsletters and relevant marketing where permitted, maintain communication preferences and suppression records, answer support requests, prevent abuse, maintain records, improve the website and comply with applicable legal obligations.
3. Legal bases
Where applicable law requires a legal basis, we process information to perform our contract with you, comply with legal obligations, protect our legitimate interests in operating and securing the Academy, and obtain consent where consent is required.
4. Service providers and disclosures
We use service providers that process information on our behalf, including Stripe for billing, Supabase for account and communication-preference data, Vercel for website hosting, Zoho for operational email, Sender for newsletter delivery, tawk.to for website chat and support conversations, and Google or YouTube for linked or embedded content. We may also disclose information when required by law, to protect users and the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information or share it for cross-context behavioural advertising.
5. Google and YouTube data
Connecting YouTube is optional. For a learner connection, Galal Academy requests read-only YouTube access and retrieves the connected channel ID, display name and profile image. We use that information only to associate the learner’s Academy account with the correct YouTube membership record and determine eligibility for protected member benefits. Your Google email address does not need to match your Galal Academy sign-in email.
For the official Galal Academy creator connection, the authorised administrator permits the service to read the channel’s membership levels and current members, including the membership level, status and member-since information needed to manage entitlements. This creator connection is not available to ordinary members.
A learner’s Google access token is used only while completing the connection and is not retained by Galal Academy. The creator connection requires a refresh token, which is stored securely on the server and is never exposed in the browser. Galal Academy does not use these permissions to upload, edit or delete YouTube content, post on anyone’s behalf, sell Google user data, serve advertising, or train general-purpose artificial-intelligence models.
You can disconnect YouTube from My account, revoke authorisation in your Google Account, or follow our Google and YouTube data-control instructions. Disconnecting removes the linked channel data and YouTube-derived entitlements from your Academy account. Operational audit records may retain only the fact and time of disconnection, without the deleted channel details.
6. International processing
Galal Academy serves an international audience. Information may therefore be processed in the United States, the European Economic Area and other locations where our service providers operate. Where required, we rely on contractual and other lawful safeguards for international transfers.
7. Retention and security
We retain information only as long as reasonably needed to provide the service, maintain business and tax records, resolve disputes, enforce agreements and meet legal obligations. We use access controls, private storage, encrypted connections and other reasonable technical and organisational measures, but no online service can guarantee absolute security.
8. Your privacy choices and rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or a portable copy of your personal information, and to object to certain processing. Newsletter subscribers can update their interests or unsubscribe using the links included in each marketing email. You may also withdraw consent where processing relies on consent and lodge a complaint with your local data-protection authority. We retain minimal suppression information after an unsubscribe so that the address is not accidentally reactivated.
9. Cookies, analytics and similar technology
We use essential cookies or similar browser storage to keep you signed in, protect sessions, remember your privacy choice and operate account features. Vercel Web Analytics provides privacy-focused aggregate page and performance information. The tawk.to chat service may use cookies or similar technology to maintain a conversation, remember chat preferences and prevent abuse.
With your permission, we may also use Google Analytics 4 to measure page journeys and campaign conversions, and Microsoft Clarity to provide aggregated heatmaps and privacy-protected session replays that help us identify confusing pages. These optional tools are not loaded when you choose “Essential only.” You can reopen Cookie choices in the website footer at any time. Campaign parameters, page paths and funnel steps may be recorded; we do not intentionally send payment-card details, passwords or support-message contents to analytics providers.
10. Children
The service is intended for professional and adult learners and is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, please contact us.
11. Changes and contact
We may update this policy as the service or applicable requirements change. The effective date above shows the latest revision. Privacy questions and requests can be sent through the Galal Academy support form.