GalSol Privacy Policy

1 Our Role in Data Processing & Indian Law Compliance

GalSol is headquartered in Chennai, Tamil Nadu, India. We comply with applicable Indian laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDP Act), 2023.

GalSol acts primarily as a Data Processor for the "Creators" (event organizers, educators, businesses) who use our platform to build forms and send emails.

• Pass-Through Data: For standard GS Forms and Bulk Mail campaigns, we route participant data directly into the Creator's connected Google Sheets and Google Drive. We do not permanently store this general submission data on GalSol servers.
• Entry Pass Data Storage: If a Creator utilizes the "Digital Entry Pass" feature, GalSol stores specific, limited data (Name, Email, Pass Token, and check-in status) securely to facilitate QR code scanning. This is stored strictly for access-control purposes.

2 Google API Services & Limited Use Disclosure

GalSol relies on Google Workspace APIs to function. When you authenticate your account, you grant GalSol access to specific scopes (including Gmail Send, Google Drive full access, Google Sheets, and Google Slides).

3 Artificial Intelligence (Gal AI)

GalSol integrates "Gal AI," powered by Google's Gemini 3 Flash model.

• We do not send your participants' Personally Identifiable Information (PII) to the AI models.
• Your prompts and data are not used by Google to train their foundational AI models.

4 Information We Collect About You (The Creator)

To provide our service, we collect your Google Profile information (Name, Email, Avatar) via OAuth, alongside platform usage metadata (number of campaigns, storage limits) to enforce billing and service quotas.

5 Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit. Entry Pass data stored on our servers is protected using modern database security protocols. However, the security of your generated certificates and sent emails ultimately relies on the security of your personal Google Account.

6 Information for Form Respondents (End-Users)

If you are an individual filling out a registration form, RSVP, or Mini Site powered by GalSol (an "End-User"), please note the following regarding your personal data under the DPDP Act, 2023:

• Data Fiduciary vs. Data Processor: The event organizer or business that created the form is the Data Fiduciary. They are responsible for obtaining your consent and determining how your data is used. GalSol acts strictly as a Data Processor providing the technical infrastructure.
• General Submissions: Your general submission data is routed securely and directly into the Data Fiduciary's private database. GalSol does not intercept or permanently store this data.
• Entry Pass Ticketing Data: If the form generates a Digital Entry Pass (QR Code) for gate check-in, GalSol temporarily stores a limited subset of your data (Name, Email, and a Unique Pass Token) on our secure servers exclusively to facilitate the organizer's live QR scanning tools.
• Exercising Your Rights: Under the DPDP Act, you have the right to access, correct, or erase your personal data. To exercise these rights, you must contact the Data Fiduciary (the event organizer) directly. GalSol will assist the Data Fiduciary in fulfilling your technical requests upon their authorized instruction.

7 Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

If you have data deletion requests or privacy inquiries, please contact us immediately.