Last updated: August 2, 2026
GaleOps ("we," "our," or "us") collects information you provide directly: your name, email address, phone number, and company information when you book a consultation, purchase a service, or subscribe to our newsletter.
We also collect standard web analytics data through Google Analytics (page views, referral sources, browser type) and our first-party analytics counter (page load events).
We use your information to:
We do not sell your personal information. We share data only with trusted service providers who help us operate our business (Stripe for payment processing, Calendly for scheduling, Google Analytics for analytics). These providers are contractually bound to protect your data.
Engagement-specific data — system prompts, agent configurations, findings reports — is never shared outside of GaleOps without your explicit consent.
We retain engagement data (findings reports, system prompts shared for testing) for the duration of the engagement plus 12 months, unless you request earlier deletion. Newsletter subscriber data is retained until you unsubscribe.
You may request access to, correction of, or deletion of your personal data at any time by emailing mattgale87@gmail.com. We will respond within 30 days.
We implement appropriate technical and organizational measures to protect your data. All engagement-related communications are handled over encrypted channels. Findings reports are delivered via encrypted email or secure download.
We use minimal cookies: Google Analytics for aggregate site usage and Stripe for payment processing. No tracking cookies are used for advertising or cross-site tracking.
GaleOps provides AI security assessment, guardrail implementation, red team testing, and compliance consulting services as described on our website. Each engagement is scoped in a written statement of work or engagement letter before work begins.
Published service prices are fixed fees unless otherwise stated. Payment is due via Stripe (credit card) at the time of booking for published services. Enterprise invoicing (net-30) is available for engagements over $10,000. All prices are in USD.
Each engagement is scoped to the specific AI agent, MCP server, or AI system identified in the statement of work. Findings are based on the configuration and access provided at the time of testing. Changes made after the engagement may introduce new vulnerabilities not covered by the original assessment.
Client agrees to provide reasonable access to the systems, configurations, and information needed to perform the assessment. This typically includes read-only API access, system prompts, agent configurations, or a test environment. Production access is not required for most engagements.
All findings, system prompts, agent configurations, and other engagement materials are treated as confidential. GaleOps will not disclose findings to third parties without client consent, except as required by law.
GaleOps performs assessments based on the information and access provided. No security assessment can guarantee the absence of all vulnerabilities. Our liability is limited to the fee paid for the specific engagement giving rise to the claim.
Client retains all rights to their system prompts, agent configurations, and data. GaleOps retains the right to use anonymized, non-identifiable findings in case studies, blog posts, and methodology documentation.
Engagements may be cancelled within 48 hours of booking for a full refund. After 48 hours or once work has begun, the engagement fee is non-refundable. Retainers may be cancelled with 30 days' written notice.
These terms are governed by the laws of the State of Minnesota. Any disputes shall be resolved in the courts of Hennepin County, Minnesota.
For privacy or terms inquiries: mattgale87@gmail.com or 845-750-5549.