Privacy Policy

01Introduction and Scope

Galaxy Ball ("we," "us," "our," or "the Company") provides online productivity services, including Digital Planner Solutions, Productivity Calendar Systems, Smart Notebook Workspace, Goal & Habit Planning Tools, Task Organization Platform, Personal Productivity Templates, and Workflow & Schedule Management (together, the "Services"). This Privacy Policy applies to personal information we process when you browse our websites, create or use an account, purchase a Subscription or Template Pack, contact our support team, or otherwise interact with us.

This policy does not cover third-party websites, products, or services that you may connect to the Services or reach from them; those are governed by the privacy practices of the relevant third party. Where you use the Services as a member of a team workspace administered by your employer or another organization, that organization may control certain workspace data, and its own policies may also apply to you.

02Information We Collect

We collect information in three ways: directly from you, automatically when you use the Services, and from a small number of service providers acting on our behalf. The categories are:

• Account information — name, email address, password credentials (stored in hashed form), plan selections, workspace names, profile preferences, and, for team workspaces, your role and the name of the administering organization.
• Billing information — handled by our payment processors. We receive limited details such as card brand, the last four digits of the card, billing region, and transaction history. We never receive or store full payment card numbers.
• Content you create — planner entries, calendar events, tasks, notes, goals, habit records, and customized templates you store in the Services. We treat this content as yours and process it only to provide the Services.
• Usage information — features used, pages viewed, actions taken, timestamps, session length, referral source, and diagnostic logs such as crash and performance data.
• Device and technical information — IP address, browser type and version, operating system, screen size, language, time zone, and similar identifiers.
• Cookies and similar technologies — as described in Section 5 and, in full detail, in our Cookie Policy.
• Communications — the contents of support requests, survey responses, and other messages you send us.

03How We Use Your Information

We use personal information for the following purposes:

• Providing the Services — creating and maintaining your account, storing and syncing your content, and delivering the features of your plan.
• Billing and account management — processing payments, free trials, renewals, cancellations, and refunds, and sending transactional messages such as receipts and renewal reminders.
• Personalization — remembering your preferences, such as time zone, language, and default views.
• Improvement and analytics — understanding how features are used in aggregate so we can fix problems and build better tools.
• Security and fraud prevention — authenticating logins, detecting abuse, protecting accounts, and maintaining the integrity of our systems.
• Support — responding to your questions and troubleshooting issues you report.
• Marketing — sending product news and offers where permitted, always with the ability to opt out as described in Section 10.
• Legal compliance — meeting our obligations under applicable law and enforcing our Terms of Service.

We do not use the contents of your planners, notes, or tasks to build advertising profiles, and we do not sell personal information.

04Legal Bases for Processing

Where laws require a legal basis for processing personal information, we rely on the following. Performance of a contract: most processing is necessary to deliver the Services you signed up for, including account management, content storage, and billing. Legitimate interests: we process limited information to secure our systems, prevent fraud and abuse, measure and improve the Services, and communicate with existing customers, balancing these interests against your rights. Consent: we rely on your consent for non-essential cookies and for marketing communications where the law requires it; you may withdraw consent at any time without affecting prior processing. Legal obligation: we process and retain certain records where required by tax, accounting, consumer protection, or other applicable laws, and to respond to lawful requests from public authorities.

05Cookies and Similar Technologies

We use cookies and similar technologies, such as local storage, to keep you signed in, remember preferences, secure the Services, and understand aggregate usage. Cookies fall into strictly necessary, functional, analytics, and preference categories. You can manage non-essential cookies through our consent banner, through the cookie settings control on our site, and through your browser settings. For a full description of each cookie we set, its purpose, and its duration, please see our Cookie Policy, which is available on our website under the same legal section as this policy.

06How We Share Information

We share personal information only in the limited circumstances below, and we never sell it:

• Service providers (processors) — vendors that host our infrastructure, process payments, deliver email, provide analytics, or power our support tools. They act under contracts that restrict them to processing data on our documented instructions and require appropriate security measures.
• Workspace sharing — content you deliberately share within a Workflow & Schedule Management workspace is visible to the teammates you share it with, and workspace administrators can see member names, email addresses, and workspace-level activity.
• Legal reasons — where disclosure is reasonably necessary to comply with law or legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of Galaxy Ball, our users, or the public.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy and with notice to you of any material change.
• Aggregated or de-identified data — we may share statistics that cannot reasonably be used to identify you.

07Data Retention and Account Closure

We keep personal information for as long as your account is active and as needed to provide the Services. You can export a copy of your data at any time using the self-service export tools in your account settings.

When you close your account, or when it is terminated under our Terms of Service, we retain your data for 60 days. This window allows you to reactivate the account or complete a final export if you change your mind. After the 60-day period ends, your personal information and content are deleted from our active systems, and residual copies are removed from routine backups in the normal rotation cycle shortly afterward. We retain limited records beyond this period only where the law requires it, for example transaction records kept for tax and accounting purposes, or information needed to resolve an active dispute, and we keep such records only as long as those obligations last.

08Data Security

We apply technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These measures include encryption of data in transit and at rest, hashed password storage, role-based access controls and least-privilege practices for our staff, network monitoring, and documented incident response procedures. We review these safeguards regularly as the Services and the threat landscape evolve.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You play an important role too: choose a strong, unique password, do not share your credentials, and notify us immediately using the contact details at the end of this policy if you suspect unauthorized access to your account. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law.

09Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — to request confirmation that we process your information and to receive a copy of it.
• Correction — to have inaccurate or incomplete information corrected; most account details can be edited directly in your settings.
• Deletion — to request deletion of your information, which you can begin at any time by closing your account.
• Portability and export — to receive your data in a structured, commonly used format; self-service export is available at any time from your account settings.
• Restriction and objection — to ask us to limit certain processing, or to object to processing based on legitimate interests.
• Withdrawal of consent — to withdraw any consent you have given, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details at the end of this policy. We will verify your identity, typically by confirming control of the email address on the account, and respond within the time required by applicable law. We will not discriminate against you for exercising your rights. If you are unsatisfied with our response, you may lodge a complaint with your local data protection or consumer protection authority.

10Marketing Communications and Opt-Out

If you receive marketing emails from us, you can opt out at any time by using the unsubscribe mechanism included in every marketing message or by adjusting the communication preferences in your account settings. Opting out of marketing does not affect transactional and service messages, such as receipts, renewal reminders, security alerts, and notices about changes to our terms or policies, which we send because they are necessary to operate your account. We do not send marketing text messages, and we do not share your contact details with third parties for their own marketing.

11California Privacy Rights

This section provides additional information for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"). In the preceding 12 months we have collected the following categories of personal information described in Section 2: identifiers (such as name, email address, and IP address), commercial information (such as purchase and subscription history), internet or other electronic network activity (such as usage logs and cookie data), approximate geolocation inferred from IP address, and limited inferences used to personalize the Services.

California residents have the right to know what personal information we collect, use, and disclose; the right to request deletion; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising these rights. Galaxy Ball does not sell personal information and does not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of; we also do not use or disclose sensitive personal information for purposes requiring a right to limit. You may exercise your rights, or authorize an agent to do so on your behalf, by contacting us using the details at the end of this policy. We will verify requests as described in Section 9 and respond within the timelines the CCPA requires.

12Children's Privacy

The Services are intended for users aged 16 and older, and our Terms of Service prohibit anyone under 16 from creating an account. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete the account and the associated information promptly. If you are a parent or guardian and believe that a child under 16 has provided personal information to us, please contact us using the details at the end of this policy so we can take appropriate action.

13International Data Transfers

Galaxy Ball operates from the United States, and the information we collect is stored and processed on servers located in the United States, where privacy laws may differ from those of your home jurisdiction. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States as described in this policy.

Where we transfer personal information from jurisdictions that restrict cross-border transfers, we implement appropriate safeguards recognized by applicable law, such as contractual data protection commitments with our service providers, and we require comparable protections from processors handling data on our behalf. You may contact us for more information about the safeguards applied to your data.

14Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, in law, or in our practices. When we make changes, we will revise the "Last updated" date at the top of this page. If a change is material, we will provide more prominent notice before it takes effect, such as an email to the address on your account or an in-app announcement, and where required by law we will ask for your consent. We encourage you to review this policy periodically. Your continued use of the Services after an updated policy takes effect means that the updated policy applies to our handling of your information from that date forward.