GTM Engine, Inc. PRIVACY POLICY

I. INFORMATION WE COLLECT

We collect the following types of information:

• Personal Information: Your name, email address, and other contact details when you sign up, request a demo, or interact with us through forms or communications.
• Usage Data: Information about how you interact with our platform, such as pages visited, features used, and engagement patterns.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Cookies and Similar Technologies: We use cookies to analyze usage, personalize content, and improve performance. Where required by law (e.g., in the EU or UK), we request consent before placing non-essential cookies. To manage your preferences, please use our cookie consent management widget at the bottom left of every page.
• Online Data Partners When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to this email. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. If you are located in the EU or UK and wish to opt out of the collection of your personal data in compliance with GDPR, you may visit https://www.rb2b.com/rb2b-gdpr-opt-out. If you do not consent to tracking via our cookie consent overlay, these technologies will not be used.

II. LEGAL BASIS FOR PROCESSING

Where applicable under the GDPR or UK GDPR, we process your personal information based on the following legal grounds:

• Consent: For marketing emails, cookies, and other optional data collection.
• Contractual Necessity: To fulfill demo requests or provide services you request.
• Legitimate Interests: To improve our services and protect against misuse.
• Legal Obligations: To comply with applicable laws and regulations.

III. HOW WE USE INFORMATION

• Provide and operate our services
• Respond to demo requests and inquiries
• Communicate with you, including service updates and (where permitted) marketing
• Analyze usage patterns and system performance
• Support security and fraud prevention
• Comply with legal obligations

IV. HOW WE SHARE INFORMATION

• Vendors and Service Providers: Such as Vercel and AWS (including EC2) for hosting and backend infrastructure.
• Legal Authorities: When required by law or in response to lawful requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale.

We do not sell your personal information. We also do not share your data for cross-context behavioral advertising under the CCPA unless you explicitly opt in. California residents may exercise their rights via our cookie consent management widget at the bottom left of every page.

V. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

• Access and correct your information
• Request deletion
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time (if processing is based on consent)

To exercise any of these rights, please contact us at compliance@gtmengine.ai.

VI. DATA RETENTION

We retain your personal information only as long as necessary for the purposes outlined in this policy or to meet legal obligations. Retention periods vary based on data type and regulatory requirements.

VII. SECURITY PRACTICES

We implement technical and organizational safeguards, including:

• Encryption at rest and in transit
• Access controls and audit logs
• Regular infrastructure monitoring
• Role-based access using the principle of least privilege

Our infrastructure partners (e.g., Vercel and AWS) comply with industry standards like SOC 2 and ISO 27001.

VIII. INTERNATIONAL DATA TRANSFERS

If you are located outside the United States, your data may be transferred to and processed in the U.S. or other countries where we or our vendors operate. Where required, we rely on Standard Contractual Clauses (SCCs), Data Privacy Framework participation, or equivalent legal mechanisms to ensure adequate protection.

IX. CHILDREN'S PRIVACY

Our services are not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, please contact us immediately at compliance@gtmengine.ai.

X. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Updates will be posted on this page with the revised effective date. We encourage you to review this policy periodically for the latest information on our privacy practices.

XI. CONTACT US

If you have any questions or concerns, please contact us at:
Email: compliance@gtmengine.ai
Mailing Address: 650 California St, Ste 07-112, San Francisco, CA 94108