Privacy policy
GTM for One handles two very different kinds of personal data: yours, and that of the business contacts you research. This policy separates them, because the rules and your rights differ.
Who we are
GTM for One, operating from India. Contact: support@gtmforone.com. Postal address: ADD YOUR POSTAL ADDRESS BEFORE LAUNCH.
Your data, as a user
We store what is needed to run the product and nothing else:
- The name and email address you sign your outreach with.
- The domains you research and the campaigns you create.
- Sending mailbox credentials. SMTP and IMAP passwords are encrypted at rest with AES-256-GCM and are never returned to the browser, not even to you. They are decrypted in memory only to open a connection.
- Third-party API keys you supply for enrichment and search providers, used only to make the calls you asked for.
- Cost records: which provider was called, how many units, what it cost.
Business contact data
To find prospects, GTM for One queries third-party providers you have connected and public sources, and stores what comes back: name, job title, employer, business email address, LinkedIn URL, and company firmographics. This is business contact data about people in their professional capacity. Never special-category data, and never consumer or personal-life data.
Under GDPR the lawful basis for processing it is legitimate interest (Article 6(1)(f)) in B2B communication. That basis is conditional, not automatic: it holds only while the outreach is genuinely relevant to the recipient's job, the sender is identifiable, and opting out is easy and honoured. GTM for One enforces the last of those in code (see below) but the relevance of what you send is your responsibility as the sender.
How opting out works
Every email carries an opt-out line that the sender cannot remove, and a List-Unsubscribe header. Where the sending mailbox reads its replies, the opt-out is a reply with the word “unsubscribe”; otherwise it is a link. The link is signed with the address and that one message, so it cannot be reused for another address and it names no campaign.
An opt-out is permanent for the sender that emailed you: every brand and campaign of that account, and of any account that shares its company domain. A complaint applies to every sender on this platform, and so does opting out of two different senders. A hard bounce applies to every sender. Addresses on the do-not-email list are stored as SHA-256 hashes, never in the clear, so the list can never itself be used as a mailing list. Any human reply also stops further emails to that address from the brand.
Where it lives, and who processes it
In a PostgreSQL database on a server run by the operator of this installation. Data is sent to a third party only when a step requires it, and each receives only what that call needs:
- OpenRouter, the gateway for research, qualification and drafting, and the model providers it routes to (currently Google, DeepSeek and Perplexity), with data collection for training switched off.
- Tomba, Datagma, Hunter, Prospeo, LeadMagic and Findymail, for company data and business email lookup.
- Scrubby, Clearout, Kickbox, NeverBounce, MillionVerifier and ZeroBounce, to check an address is deliverable before anything is sent.
- Exa, for company discovery.
- Vercel, which hosts the application.
- Google Firebase, for sign-in.
- Dodo Payments, for billing.
How long we keep it
Campaign data is kept until you delete it. Provider lookup results are cached indefinitely so the same query is never paid for twice, including misses. Suppression entries are kept permanently by design: forgetting that someone opted out would let us email them again, which is the opposite of honouring it.
Your rights
If you are in the EU, UK or a comparable regime you may request access, correction, deletion, restriction, portability, or object to processing. Write to support@gtmforone.com and we will respond within 30 days.
If you received an email and want your data gone: say so in a reply, or use the unsubscribe link. Unsubscribing stops all contact immediately. Ask for erasure and we remove the record itself, keeping only the one-way hash needed to ensure you are never contacted again.
Analytics
On this website, Google Analytics and PostHog run only if you choose “Allow” on the notice. They record the pages you view and the buttons you press. Decline and neither is loaded.
Inside your account, our own servers record how the product is used: that a campaign was started, how many drafts it wrote, that emails were approved, sent, opened or answered. These are counts and categories against your account's id. They are stored with PostHog, acting as our processor, and are how we find what is broken and what is slow.
What is never in them: anything about the people you write to. No recipient's address, name, company, subject line or message is sent to either service, and the code that sends an event strips such fields rather than relying on each caller to leave them out. Your own account is identified by its id, not by your email or name.
Open tracking
Outreach emails contain one invisible 1×1 image served from our domain. Loading it records that the message was opened and when, against the email we sent. We do not store your IP address or device from that request, and we do not use it to build a profile of you. The cookies page explains how automatic pre-fetches by Apple Mail and Gmail are separated from real reads.
What we do not do
- We do not sell data. GTM for One is automation; the data is yours and your providers'.
- We do not use your campaign content to train models.
- We do not rewrite your links to track clicks; your links are sent as you wrote them.
- We do not run advertising trackers, and website analytics run only for visitors who allow them.
Changes
Material changes will be dated here. Continuing to use GTM for One after a change means accepting it.