Privacy policy

Who is responsible

Galo Montacuto, through JUST MG GROUP LLC, a company registered in Florida, United States. Mailing address: 7901 4th St N #36457, St. Petersburg, FL 33702, USA. Contact: info@galomontacuto.com.

What data is collected

When you book a session: name, email, company or website and your answers to the pre-session questionnaire.

When you take the diagnostic or request the AI Direction Sheet: your answers, the description of your business and your email.

When you fill in a form or apply to the 4D Program: the details and answers you write.

If you are a client or student: your account, the messages, comments, files and approvals in the portal and your course progress.

When you buy: the purchase details. Card data is processed by Stripe; this site never receives or stores it.

Technical data: where you came from (UTM tags, referring site and first page seen), your IP address to limit abuse and a security activity log.

How it is used

To provide what you hired or requested: prepare and hold the session, run projects, give you access to courses and send what you asked for.

To write to you. Follow-up emails and sequences only start after you confirm your address, and each one has a one-click unsubscribe link.

To understand which channels bring inquiries, improve the site and protect it from abuse.

To meet accounting and tax obligations on sales.

We don't sell or rent your data.

Who it is shared with

Only with the providers that run the site, and only for that: Vercel (hosting), Supabase (database and sign-in), Stripe (payments), Resend (email delivery), Google (session calendar and, if you accept it, Google Analytics), Meta (if you accept it, the pixel that measures visits from ads), Anthropic (generates the AI Direction Sheet from what you write; under its commercial terms it doesn't use that data to train its models), Cloudflare (bot checks on forms) and Plausible (cookieless visit statistics), when enabled.

These providers operate mainly in the United States, so your data may be transferred to and stored there.

Cookies

Necessary cookies: the portal session and short notices after an action (for example, "Message sent").

Visit origin cookie (gm_src, 90 days): remembers where you first came from, to learn which channels work. It isn't set if your browser sends the Global Privacy Control signal.

Google Analytics and the Meta pixel only load if you accept them in the cookie notice. Your choice is stored in your browser and you can change it by clearing the site's data.

How long it is kept

Inquiries and leads who didn't buy: up to 24 months from the last contact.

Clients, purchases and invoicing: 5 years, for accounting and tax obligations.

Email confirmation requests never confirmed: 30 days.

Security logs: 12 months.

If you unsubscribed, your address stays on the suppression list so we never write to you again.

Your rights

You can ask for access to, correction, deletion or a copy of your data, and object to receiving communications, by writing to info@galomontacuto.com. We reply within 30 days.

Minors

The services are for people over 18. We don't knowingly collect data from minors.

Changes

If this policy changes, it is updated on this page with its date.