Privacy Policy
Last updated: June 2026
1. Who We Are
GALGO is an academic platform operated by Nuria Alonso García and Alison Caplan at Providence College. This policy describes what personal information we collect, how we use it, and your rights with respect to it.
2. Information We Collect
We collect only the information necessary to operate the platform:
- Account information — your name and email address, collected when your account is created via invitation or when you sign in with Google OAuth.
- Authentication data — a hashed password if you use email/password login. We never store plaintext passwords.
- Usage data — annotations and notes you create, which project roles you hold, and administrative actions you take (recorded in an audit log).
- Reading progress — your scroll position in texts is stored locally in your browser (localStorage) and is not transmitted to our servers.
We do not collect payment information, location data, device fingerprints, or behavioral tracking data beyond what is described above.
3. How We Use Your Information
Your information is used solely to:
- Authenticate you and enforce project-level access permissions.
- Display your name in annotations visible to authorized project members.
- Send transactional emails — invitations, welcome messages, and password resets.
- Maintain an audit log for administrative accountability.
We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes.
4. Third-Party Services
We use a small number of third-party services to operate the platform:
- Neon — cloud PostgreSQL database hosting. Your account data and content are stored on Neon’s infrastructure, subject to their data processing agreement.
- Google OAuth — if you sign in with Google, your name and email are provided to us by Google in accordance with their privacy policy. We do not receive your Google password or any other Google account data.
- Resend — transactional email delivery. Your email address is passed to Resend only to deliver messages you have requested (invitations, password resets).
5. Data Retention
Your account and associated content are retained for the duration of your active enrollment or research affiliation with the platform. Accounts that remain inactive for more than two academic years may be deactivated. You may request deletion of your account and associated personal data at any time by contacting the platform administrators.
6. Data Security
We take reasonable technical measures to protect your information, including encrypted connections (HTTPS), hashed credential storage, and role-based access controls. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights
You have the right to access the personal data we hold about you, request correction of inaccurate data, and request deletion of your account. To exercise any of these rights, please contact your course instructor or the platform administrators directly. We will respond within 30 days.
8. Cookies
This platform uses a single session cookie to keep you logged in. No advertising cookies, analytics cookies, or third-party tracking cookies are set. Reading progress is stored in your browser’s localStorage, which you can clear at any time through your browser settings.
9. Changes to This Policy
We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the platform after an update constitutes acceptance of the revised policy.
10. Contact
Questions or requests regarding your privacy should be addressed to the platform administrators at Providence College.