Last updated: 2 November 2026
1. Controller and scope
Digital GalaxAI is operated by [insert the legal name or business owner and address]. This policy explains how information is handled when visiting the site or using review monitoring, reply automation, and notification services. Use the services only if you are authorized by the business to connect the relevant accounts.
2. Information we may process
- Business and account data: business name, account and page identifiers, and access permissions granted through official authorization flows.
- Review data: reviewer name when public, review text, star rating, review time, review identifier, and related public information.
- Messaging data: WhatsApp numbers, message identifiers, delivery statuses, and message content needed for notifications, subject to account settings and approved templates.
- Contact and support data: name, email, phone number, and information a client provides when requesting service or support.
- Technical data: operation and error logs, request timestamps, and security information needed to operate and protect the service.
3. How we use information
- Provide review monitoring and display reviews to the connected business.
- Generate AI-assisted reply drafts according to client instructions and settings.
- Send operational notifications through messaging channels connected by the client, subject to applicable templates and policies.
- Operate, maintain, and secure the service, handle support requests, and comply with legal obligations.
4. Artificial intelligence services
Review text or business context may be sent to the contracted AI provider to generate a reply draft. The operator must identify the actual provider and its terms before launching the service. AI outputs are suggestions that require review; we do not guarantee they are error-free or suitable for every situation.
5. Sharing and service providers
Data may be processed through Google business and review services, Meta WhatsApp and APIs, the hosting provider, an automation platform such as n8n, and the AI provider actually used. This list must be updated to reflect all actual vendors and their agreements before publication. We do not sell personal data.
6. Data retention and security
We retain information as long as needed to provide the service or as required by contract or law. The operator must define retention periods for each data type, including n8n logs, backups, and messages, before launch. We use appropriate technical and organizational safeguards, but no internet-connected system can be guaranteed absolutely secure.
7. User rights and deletion requests
Depending on applicable law and technical or legal constraints, account owners may request access, correction, deletion, or revoke authorization. See the Data Deletion page or contact us through the published support email. We may need to verify the requester’s identity and authority.
8. Cookies and third-party links
The site may use essential cookies for WordPress operation, form security, and preference storage. External links and services are governed by the policies of their respective operators.
9. Children and changes
The service is intended for businesses and their representatives and is not designed for children. We may update this policy and will publish the revised version and update date on this page.
10. Contact
Operator: [insert legal entity]. Email: hasan.ali.riyati@gmail.com