Privacy Policy
Last updated: March 2025
At GTM OS (getgtmos.com), we take your privacy seriously. This policy explains what data we collect, how we use it, and your rights as a user.
1. Information We Collect
- Email address — collected when you sign in via OTP (one-time password) authentication
- Playbook, task, and signal data — content you enter into the platform
- IP address and browser type — collected via analytics
- Payment information — payments are processed by Razorpay; we do not store your card details
2. How We Use Your Information
- To provide and continuously improve the GTM OS service
- To send transactional emails (OTP codes, plan updates, billing receipts)
- To generate AI-powered insights from your playbook data
- We do NOT sell your data to third parties
3. Data Storage and Security
- All data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure
- All data is transmitted over HTTPS/TLS encryption
- Authentication is OTP-only — no passwords are ever stored
- We conduct regular security audits and vulnerability assessments
4. Third-Party Services
- Supabase — database and authentication infrastructure
- OpenAI — AI generation; your prompts are not used to train OpenAI models
- Razorpay — secure payment processing
- Vercel — hosting and global CDN
5. Cookies and Tracking
- Session cookies are used for authentication purposes
- We do not use advertising cookies
- Basic anonymized analytics help us understand usage patterns
- See our Cookie Policy for full details
6. Your Rights (GDPR / CCPA)
- Right to access your personal data
- Right to delete your account and all associated data
- Right to export your playbook data
- Right to opt out of non-essential communications
- To exercise any of these rights, contact us at privacy@getgtmos.com
7. Data Retention
- Active account data is retained for as long as your account remains active
- Deleted accounts are purged within 30 days of deletion
- Encrypted backups are retained for up to 90 days before permanent removal
8. Children's Privacy
GTM OS is not intended for users under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
9. Changes to This Policy
We will notify you by email of any material changes to this policy. Continued use of GTM OS after changes are made constitutes your acceptance of the updated policy.
10. Contact
- Email: privacy@getgtmos.com
- Website: https://www.getgtmos.com