Privacy Policy
How GALODO collects, uses, protects, and processes information on galodo-system.com.
// ON THIS PAGE
1. Overview
Galodo ("we", "us") operates the website galodo-system.com and provides an automated DDoS resilience-testing platform. This Privacy Policy explains what information we collect through our website and platform, why we collect it, how it is used, and the choices you have regarding your personal data.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data-protection legislation in the United Arab Emirates. By using our website or platform, you acknowledge the practices described in this policy.
2. Information We Collect
2.1 Information you provide directly
- Account data — name, work email address, organization name, and role when you register for an account.
- Contact data — email address and message content when you request a demo or contact our sales team.
- Target authorization data — details required to verify that you own or are authorized to test a target (e.g., domain ownership verification tokens), and records of your approval to run a test campaign.
- Billing data — invoicing details, tax identifiers, and payment status (payment card data is processed by our PCI-DSS-compliant payment providers and never stored by us).
2.2 Information collected automatically
- Usage data — pages visited, features used, test campaigns run, dates and times, and aggregated performance metrics.
- Technical data — IP address, browser type and version, device type, operating system, and diagnostic data collected to keep the platform secure and stable.
- Test telemetry — anonymized, aggregated results of your test campaigns used to improve vector coverage and reporting accuracy.
We do not collect or process the content of third-party systems you do not own or control, and we do not harvest or exfiltrate data from tested targets beyond the minimal connectivity metrics required to produce a test report.
3. How We Use Information
- To provide, operate, and maintain the GALODO platform and website.
- To verify target ownership and enforce two-party approval before any test campaign begins.
- To generate test reports, analytics, and DORA-aligned evidence documentation.
- To communicate with you about your account, campaigns, billing, and support requests.
- To send service notifications, security alerts, and — only with your consent — product updates.
- To detect, prevent, and address technical issues, abuse, and unauthorized use.
- To comply with legal obligations and enforce our Terms of Service.
4. Legal Basis (GDPR)
We process personal data on the following grounds:
- Performance of a contract — to deliver the platform and services you have requested.
- Legitimate interests — to secure the platform, prevent misuse, and improve our services, provided your rights do not override those interests.
- Legal obligation — to comply with applicable law, regulatory requirements, and audit obligations.
- Consent — where required (for example, marketing communications and non-essential cookies), which you may withdraw at any time.
5. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy: account data for the lifetime of your account plus a reasonable post-termination period; test and audit records for the period required by applicable regulations (e.g., DORA record-keeping requirements); and technical logs for up to 12 months. You may request deletion of your personal data at any time, subject to legal obligations.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+), access controls, least-privilege role management, audit logging, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we continuously work to safeguard your information.
7. Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share data only:
- With service providers who process data on our behalf (hosting, email delivery, payment processing) under binding data-processing agreements.
- With regulators or authorities when required by law or to protect our legal rights.
- In connection with a merger, acquisition, or reorganization, with notice to you.
Our website does not use third-party advertising or tracking cookies. All analytics are processed in-house on aggregated, non-identifying data.
8. Your Rights
Under the GDPR and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data.
- Restriction — restrict processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — where processing is based on consent.
- Complain — lodge a complaint with your local supervisory authority.
To exercise any of these rights, email us at contact@galodo-system.com. We respond to all verified requests within 30 days.
9. Cookie Policy
This Cookie Policy explains how GALODO uses cookies and similar technologies on galodo-system.com.
9.1 What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and understand how the site is used.
9.2 Cookies we use
Our website uses only essential/functional cookies:
- Consent preference — stored locally to remember your cookie choice so the banner does not reappear.
- Session/functionality — required for the site to function correctly and to keep the platform secure.
We do not use advertising, tracking, or profiling cookies, and we do not share cookie data with third-party advertisers.
9.3 Managing cookies
You can manage or delete cookies through your browser settings at any time. You can also choose "Essential Only" in our consent banner. Blocking essential cookies may affect how the website functions.
9.4 Consent
A cookie consent banner is displayed on your first visit. By clicking "Accept All" you consent to the use of cookies described above; "Essential Only" limits cookies to those strictly necessary for functionality. You can change your choice at any time by clearing your browser's cookies.
10. International Transfers
Your data may be processed on infrastructure located outside your country of residence. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including adequacy decisions and Standard Contractual Clauses, to ensure your data receives an equivalent level of protection.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the website or by email to registered users.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us:
Galodo
Office 1402, Jumeirah Business Center 1,
Jumeirah Lake Towers, Dubai, UAE
contact@galodo-system.com
+971 4 512 3456