Privacy Policy

Last updated: October 5, 2026

This policy explains what data GTM Bud collects, how we use it, who receives it, how long we keep it, and how you can contact us. Questions go to [email protected] .

1. Information We Collect

We collect the following categories of data when you use GTM Bud:

  • Account information: your name, your email address, and your password. You sign in with your email address and a password or a code that we send to your email address.
  • Seller profile: information about you and your business that you give us or ask us to read, such as your website and your LinkedIn profile URL, and the value offers that describe what you sell.
  • Connected accounts: the LinkedIn and email accounts that you connect for sending. We keep the account name, profile picture, public profile identifier, connection status, sending limits, sending schedule, and account measures such as connection counts and message credit balances.
  • Prospect and lead data: information about the people and companies that your campaigns target. This includes names, job titles, companies, profile URLs, profile content, recent public posts, and business email addresses. It comes from the accounts that you connect, from public sources, from data providers, and from lists that you upload.
  • Messages and conversations: the messages that GTM Bud sends for you, the replies that you receive, and the conversation threads with your leads on your connected accounts. We also keep a record of which people a connected LinkedIn account already has conversations with, and the time of the latest activity.
  • Campaign content: the campaigns, targeting criteria, message sequences, reply playbooks, exclusion lists, and voice notes that you create or upload.
  • Billing information: your subscription status, billing period, and the number of billed accounts. Stripe processes your payment card. We do not store your full card number.
  • Usage data: pages that you view, actions that you take, errors, and session recordings. See section 5.
  • Anonymous session data: campaign data for visitors who start a campaign before they sign up.

2. How We Use Your Information

We use this data to:

  • Provide, maintain, and improve the Service
  • Find and qualify leads, write messages, send them from your connected accounts, detect replies, and suggest answers
  • Process payments and send transaction-related communications
  • Send sign-in codes, password reset emails, reply alerts, and important service updates via Resend
  • Respond to your inquiries and provide customer support
  • Detect and prevent fraud or abuse

AI processing: GTM Bud uses AI models to do this work. We send the content that a task needs to AI model providers. This content can include your seller profile, your campaign content, lead profiles, and message and reply text. We also record AI inputs and outputs with our analytics provider to monitor quality.

3. Data Storage

Your data is stored using Convex. Access to your account data requires sign-in. Authorized GTM Bud staff can access your account to provide support and to operate the Service.

4. Third-Party Services

We use the following third-party services that may process your data:

  • Stripe: Payment processing. See Stripe's privacy policy for how they handle payment data.
  • Resend: Email delivery service for sign-in codes, password resets, and notifications.
  • Convex: Database and backend infrastructure for storing your campaign data and account information.
  • PostHog: Product analytics and session recording. See section 5.
  • Providers that connect your messaging accounts: They maintain the connection to the LinkedIn and email accounts that you connect, and they carry the messages, replies, and profile data for those accounts.
  • AI model providers: They process the content described in section 2 to generate and analyze text and audio.
  • Search and data providers: They help us find leads and add information about them.
  • Hosting providers: They run the GTM Bud web application.

5. Analytics & Session Capture

We use PostHog for product analytics (page views, clicks, feature usage, and errors) and for session recording. Analytics events are collected for all visitors and users. Session recordings are collected for all visitors and users, except in the European Economic Area, the United Kingdom, and Switzerland. In those places, we record a session only after you allow it.

Session capture records your screen interactions (clicks, scrolls, and what the page shows) so we can identify and fix usability issues.

What is not captured: Password fields are masked in recordings. Card details are entered on pages hosted by Stripe, which we do not record.

Controls: You can allow or decline session recording on this browser at any time: . To ask us to delete recordings of your sessions, email [email protected] .

Data retention: Session recordings are deleted after 30 days. Analytics events are kept by PostHog for the retention period of our PostHog plan. We use them for product improvement and support.

6. AI Assistant Connection

You can connect an AI assistant, such as Claude or ChatGPT, to your GTM Bud account with the GTM Bud connector. You sign in to GTM Bud and select Allow. The assistant then acts with the read and write permissions that you allowed, on your account only.

What the assistant receives: the data that each of its requests asks for. This can include your campaigns and their results, leads and prospect profiles, replies and conversation threads, the status of your sending accounts, reply playbooks, your seller profile, value offers, and message sequences. The provider of your AI assistant handles that data under its own terms and privacy policy.

What we record: for each connector request we record, with our analytics provider, the name of the tool, the reason that the assistant gives for the request, the inputs, and the results. These records can include lead names and message text. We use them for product analytics and support.

How to disconnect: remove the assistant in GTM Bud Settings, under Connected AI apps, or remove the GTM Bud connector in the settings of your AI assistant. See the support page for the steps.

7. Cookies and Anonymous Sessions

We use cookies and browser storage to keep you signed in, to remember your recording choice, and to run analytics. We also use a cookie to maintain anonymous sessions for visitors who start campaigns before signing up. When you sign up, your anonymous campaign data is migrated to your account.

8. Data Sharing

We do not sell your personal information. We may share your information only:

  • With the service providers in section 4, who assist in operating the Service
  • With an AI assistant that you connect, as described in section 6
  • With the recipients of the messages that you send through the Service, and with the messaging services that deliver them
  • When required by law or to protect our rights
  • In connection with a business transfer (merger, acquisition, etc.)

9. Your Rights

You can do the following in GTM Bud:

  • See and correct your name and email address in Settings
  • Change your password in Settings
  • Disconnect a LinkedIn or email account in Settings
  • Delete or archive a campaign

For other requests, email [email protected] . You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete your account and data. If you are a person whose data appears as a lead in GTM Bud, you can use the same address to ask what we hold about you, to ask us to delete it, or to tell us not to contact you.

10. Data Retention

We keep your account data, connected account records, campaign content, lead data, and messages for as long as your account is active. We do not delete this data on a fixed schedule. Some internal operational logs and caches are deleted automatically after a set period.

GTM Bud does not have a self-serve button to delete an account. To delete your account and data, email [email protected] from the email address of your account. We may keep data that the law requires us to keep, such as billing records. Data that our service providers hold, such as analytics events and session recordings, follows the retention described in section 5 unless you ask us to delete it.

When you disconnect a LinkedIn or email account, GTM Bud stops outreach from that account and keeps its history so that you can reconnect it later.

11. Security

We protect accounts with sign-in, we check new passwords against known data breaches, and we send data over encrypted connections. You can sign out of all devices in Settings. However, no method of transmission over the internet is 100% secure.

12. Children's Privacy

GTM Bud is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, email [email protected] . See also the support page and the Terms of Service .