Privacy Policy.

1. Who we are

GTM OS is a go-to-market platform operated from London, United Kingdom. This policy explains what we collect, why, and the choices you have. For most processing of your workspace data we act as your processor; for account and billing data we're the controller.

2. What we collect

• Account data: name, work email, company, billing details, support conversations.
• Workspace data: the prospects, companies, lists, notes, sequences and messages you create or import into GTM OS.
• Connected account data: when you connect LinkedIn, mailboxes, calendars or a CRM, we process what's needed to run the features you switch on, such as search results, connection and message activity, and email delivery events including opens.
• Usage data: product analytics and logs that help us keep the service fast and secure.

3. How we use it

To run GTM OS: finding and scoring leads, enrichment, monitoring the signals you enable, drafting outreach for your approval, measuring campaigns and improving the product. We don't sell personal data, and we don't use your workspace data to advertise to anyone.

4. AI processing

Features like Otto, ICP scoring and drafting are powered by AI models. Your data is sent to model providers only as needed to deliver the feature, under contracts that prohibit them using it to train their general models.

5. Sharing and subprocessors

We share data with the service providers who help us run GTM OS: cloud hosting and databases, AI model providers, email and communications infrastructure, and payment processing. Each is bound by contract to protect it. We'll disclose data if the law genuinely requires it, and we'll tell you unless we're prohibited from doing so.

6. The Signal

If you subscribe to The Signal, we use your email to send your market's weekly scan and nothing else. No marketing, ever. Every issue has one-click unsubscribe.

7. Retention

We keep workspace data while your account is active. After termination it's available for export for 30 days, then deleted from production systems in the normal course. Account and billing records are kept as long as the law requires.

8. Security

Data is encrypted in transit and at rest, access is limited to people who need it, and connected account credentials are stored with industry-standard protections. No system is perfect, so we also design for containment: the human approval step means nothing goes out without you.

9. Your rights

Under UK GDPR you can ask for access, correction, deletion, restriction, portability, or object to processing. Prospects whose data an GTM OS customer processes should contact that customer first; we'll help them respond. You can also complain to the ICO.

10. Contact

Privacy questions and requests: [email protected]