Privacy Policy

Last updated: February 7, 2026

1. Information We Collect

We collect information you provide directly, including:

  • Account information (email address, password)
  • Campaign data and content you create
  • Payment information (processed securely through Stripe)
  • Anonymous session data for users who start campaigns before signing up

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process payments and send transaction-related communications
  • Send verification emails and important service updates via Resend
  • Respond to your inquiries and provide customer support
  • Detect and prevent fraud or abuse

3. Data Storage

Your data is stored securely using Convex. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4. Third-Party Services

We use the following third-party services that may process your data:

  • Stripe: Payment processing. See Stripe's privacy policy for how they handle payment data.
  • Resend: Email delivery service for verification emails and notifications.
  • Convex: Database and backend infrastructure for storing your campaign data and account information.
  • PostHog: Product analytics and session capture. See below for details on what is captured and how to opt out.

5. Analytics & Session Capture

We use PostHog for product analytics (page views, feature usage) and optional session capture. Basic analytics events are collected for all users to help us understand how the product is used.

Session capture records your screen interactions (clicks, scrolls, form inputs) so we can identify and fix usability issues.

For users in the United States: Session capture is enabled by default. You can opt out at any time from your Account Settings under the Privacy section.

For users outside the United States: Session capture is only enabled with your explicit opt-in consent, which you can provide during signup or on the campaign page.

What is never captured: Passwords, OTP codes, and payment information are technically excluded from recordings regardless of your consent setting. These fields are masked or blocked at the code level.

How to opt out: You can disable session capture at any time from your Account Settings under the Privacy section. Disabling it stops all future recordings immediately.

Data retention: Session capture data is retained by PostHog in accordance with their data retention policies and is used solely for product improvement purposes.

6. Cookies and Anonymous Sessions

We use cookies to maintain anonymous sessions for users who start campaigns before signing up. This allows you to create campaigns and complete checkout without immediately creating an account. When you sign up, your anonymous campaign data is migrated to your account.

7. Data Sharing

We do not sell your personal information. We may share your information only:

  • With service providers who assist in operating the Service (under strict confidentiality agreements)
  • When required by law or to protect our rights
  • In connection with a business transfer (merger, acquisition, etc.)

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your campaign data
  • Opt out of non-essential communications

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data, subject to legal retention requirements.

10. Security

We use industry-standard security measures including encryption, secure authentication, and regular security assessments. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

GTMBud is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through your account settings or support channels.