Privacy in Galta.

Your canvas and references

Canvases, imported text and media, source URLs, versions and conversation records are stored in your browser profile. The Mac runtime also stores local workspaces, task records and generated files. Galta does not upload your canvas to an Aha Labs cloud workspace or sync it between browsers.

Galta’s collection control runs on supported pages so you can keep images and text while browsing. When you collect something, Galta reads the chosen content and its source page information. It may request the chosen media from its original host. Galta does not collect your general browsing history or transfer your browser cookies or site credentials to agents.

Agents and generation services

When you connect an agent and ask it to work, your request, relevant conversation and canvas context can be sent to that agent’s service. The agent can inspect the whole canvas, including content beyond a selection. Page access you grant for a task can include the page’s text and screenshots. Local files you authorize the agent to use may also become part of its context.

Chat in Galta uses Codex and your own OpenAI sign-in. External agents, including Codex and Claude Code, use their own accounts and privacy policies. Galta does not read their authentication files or browser cookies.

If you connect BytePlus, OpenRouter, fal or Higgsfield for generation, requests and reference media needed for the generation are sent to that provider. Your provider bills you directly. API keys are stored only in Galta’s protected settings file on your Mac and are used for provider requests; they are not put in the canvas, conversation, exports or agent tool results.

These services process and retain submitted data under their own terms: OpenAI, Anthropic, BytePlus, OpenRouter, fal and Higgsfield.

Optional Aha Labs account

If you choose to sign in, the Aha Labs account service processes your email and sign-in information; Google sign-in can also supply your name and profile image. The extension stores a session token in local extension storage. Web pages and content scripts cannot read that token. Signing out removes the extension’s session.

The Aha Labs account privacy notice covers account storage, email delivery and account deletion. Account sign-in is optional and separate from agent and generation accounts.

Web content, website and updates

Web pages displayed on a canvas run in a sandbox without access to Galta’s extension APIs or account token. Their code and external resources can contact their own services. Network requests to any service expose ordinary connection information such as your IP address to that service.

galta.art uses Cloudflare for hosting and aggregate Web Analytics. The site stores a language preference cookie when you choose a language. The extension does not include an analytics or advertising SDK. The Mac app checks Galta’s update feed for new releases.

Use, sharing and your choices

Galta uses this information to provide the canvas, collection, connected tasks, sign-in and updates you choose. We do not sell your personal data, use canvas or browsing data for advertising, or send it to Aha Labs for model training. Galta’s use and transfer of information received from Google APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Your local work remains until you remove it or clear the browser’s extension data. Export important work before removing Galta or clearing data: local history is not a cloud backup. Removing the Mac application does not automatically delete local workspaces or provider settings. Disconnect providers in Settings to remove their saved keys. Your connected provider may retain submitted data separately; use that provider’s controls or contact it for deletion.

Contact and changes

For questions, deletion assistance or privacy requests, contact hello@galta.art. If our data practices change, we will update this page and its date, and provide additional notice or consent where required.