1line Privacy Policy
The short version
- Your workspace is yours. Your messages, your Library, your files. We do not sell personal data, we do not run ads, and we do not use your content to train AI models.
- An agent can only ever reach its own owner's data. That wall is built into the data path, not bolted on as a setting.
- If you connect Gmail, we ask for the smallest access that works, we encrypt the connection token, and you can cut it off in one tap. Revoking works on the very next call.
- You can export everything and leave. Your workspace is owned, not rented.
- Questions go to a human: dalton@galaxyco.ai.
Factual correction, November 7, 2026. This version describes services and diagnostic processing already configured in 1line. It does not grant new processing permissions, change our existing promises, or establish past compliance. The original October 16, 2026 policy remains available in the version history.
Who we are
1line is a product of Galaxy Co LLC, a Texas limited liability company ("1line", "we", "us"). This policy covers the 1line app at 1line.galaxyco.ai, the pages at brain.galaxyco.ai, and the services they run on. When this policy says "you", it means the account holder and, where the context fits, the people and agents they invite into their workspace.
What we collect, and why
The table below describes the account, content and operational information used to provide 1line. The service-provider and diagnostics sections explain additional processing for the features you use.
| What | Why we have it | How long we keep it |
|---|---|---|
| Account details: name, email address, account settings | To run your account, sign you in, and bill the right person | While your account is active |
| Workspace content: messages, Library items, files, agent profiles and rules you create | It is the product. Your agent works from it, and it is shown to the people you share it with | Until you delete it, or 30 days after account closure |
| Sign-in and session data: session cookies, sign-in events | To keep you signed in and to detect account misuse | Session cookies clear on sign-out; sign-in events 12 months |
| Agent connection tokens (for example a Gmail connection) | So your agent can act for you without holding your password | Encrypted at rest, until you revoke the connection or close your account |
| Billing records: plan, invoices, payment status | To run subscriptions and meet tax and accounting law | 7 years, as the law expects; card numbers are held by Stripe, never by us |
| Support messages you send us | To answer you and fix what you reported | 24 months |
Diagnostics and performance. 1line uses Sentry to investigate errors and monitor reliability and performance. Information can include error details and code locations, browser/device information, and sampled page or request timing. Depending on the event and runtime, diagnostic context can also include request URLs and text in an error or diagnostic breadcrumb. That context can contain personal information or content. Built-in filtering of common credential fields does not make all diagnostic context anonymous or guarantee that every sensitive value is removed.
Provider operational records. Retention of operational records, such as API usage and security logs, email delivery records and diagnostics, depends on the service, data category, applicable account settings and terms, and security or legal requirements. Sentry applies different retention settings to different diagnostic categories and plans. We do not claim zero provider retention or a single universal period for those operational records. This explanation does not extend the account or workspace-content retention periods above or change our deletion commitments. The provider information linked below describes service-level processing and retention criteria. For privacy or deletion requests, contact dalton@galaxyco.ai.
Connected accounts: Gmail and Google Calendar
Connecting Google is always your choice, per account, and you can undo it from your account page at any time.
- Scopes. We request read access, draft creation, and sending for Gmail, and read plus event drafting for Calendar. Sending mail and creating calendar events never happen silently: a send your agent proposes waits for your approval in 1line, and denial kills it.
- The wall. A connection belongs to one participant. An agent token can only ever resolve to its own owner's mailbox. There is no setting, parameter, or support request that widens it, and attempts to cross it are refused and logged.
- Limited Use. 1line's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: Google data is used only to provide and improve the features you asked for, it is never sold, never used for advertising, and no human at Galaxy Co reads your mail or calendar as part of normal operations.
- Token storage. Refresh tokens are encrypted at rest with a dedicated escrow key, never logged, never shown in the product, and never included in exports of your content.
- Revocation. Revoking in 1line, or in your Google account, blocks agent access on the next call. Your own Gmail is untouched.
Who sees your data
- People in a chat see that chat's content, because that is what a chat is for. Content in one chat is never visible in another.
- Service providers. 1line uses Clerk for accounts and sign-in, Vercel for hosting, Neon for its database, Stripe for payments, Google when you connect a Google account, OpenAI for Editor AI writing, Ollama for Librarian cloud processing, Resend for transactional email, Cloudflare for encrypted file storage, and Sentry for error monitoring and sampled performance information. These providers run parts of 1line under contract, only for the job they do. Which services receive information depends on the features you use and the accounts you connect. These service-operated features are separate from an external AI agent you choose to connect to 1line.
- The law. We disclose data when a valid legal order requires it. Where the law allows, we tell you first.
- A sale of the company. If Galaxy Co is ever sold or merged, data moves with the business. If that happens, we announce it here and by email before the transfer, and this policy's promises travel with the data.
AI processing within 1line. An Editor AI-writing request sends your instructions and the source material selected for that request to OpenAI. Librarian cloud tasks send the material needed for the task to Ollama. Depending on the task, that material can include your question, relevant Library excerpts and Project facts, a note being formatted, item titles or folder names, or lines from a saved memory item being organized. The Librarian can also request search embeddings for text. These requests are processed by cloud services, not solely on your device. They are distinct from requests made by an external agent under your own account with that agent provider.
Provider information. OpenAI data controls, Ollama privacy, Resend data processing, Cloudflare data processing, and Sentry retention describe the services and their processing or retention criteria. These references do not change the commitments we make in this policy.
Nobody else. No data brokers, no advertisers, no affiliates buying access.
Security
- All traffic is encrypted in transit (TLS). Connection tokens and Vault entries are encrypted at rest.
- Access inside Galaxy Co is limited to what a task requires, and agent access is fenced per owner by design (see the wall above).
- No system is perfect. If we learn of a breach that affects your data, we will notify you and the relevant authorities within the time the law requires, and say plainly what happened.
Your rights
Wherever you live, we honor these for every account:
- See it. Your content is visible in the product, and your agent can fetch an export of your workspace on your instruction.
- Take it. Export your Library in open formats, any time, without asking permission.
- Fix it. Edit or ask us to correct anything inaccurate.
- Delete it. Delete content in the product, revoke connections, or close your account. Closing your account starts a 30 day window: export anything you want during it, and at the end of the window your workspace and content are deleted, except billing records the law requires us to keep.
- Object or limit. Write to us and a human will work it out with you.
Exercising a right never changes your price and never degrades your service.
Children
1line is a work tool. It is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.
Changes to this policy
This page is versioned. Material changes are announced in the product and by email at least 14 days before they take effect, and the changelog below records every version. Continuing to use 1line after a change takes effect means you accept the new version; if you do not, export and close before the date, and the old version governs until then.
Contact
Privacy questions, requests, or complaints: dalton@galaxyco.ai. We answer within 5 business days, usually faster. If we ever get it wrong, you also have the right to complain to your local data protection authority, and we would rather hear it from you first.
Changelog
- 1.1 (November 7, 2026): Factual correction: named the configured OpenAI, Ollama, Resend, Cloudflare and Sentry services; explained service-operated AI, diagnostic information and operational-record retention criteria; and corrected the cookies description. This describes existing configured processing, grants no new processing permissions, changes none of our existing promises, and does not establish past compliance. Version 1.0 remains available in the version history.
- 1.0 (October 16, 2026): First published version, including the Google connected-accounts section ahead of the email connect launch.