Privacy Policy

1. Introduction

GTME ("we," "us," or "our") operates the website gtmeagency.com and related products and services, including advertising technology tools that integrate with third-party platforms such as LinkedIn. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our website, products, and services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Data We Collect

2.1 Information You Provide Directly

• Name, email address, company name, and job title (via forms on our website)
• Messages or communications you send to us
• Account credentials when you sign up for our products
• Billing and payment information (processed by third-party payment providers)

2.2 Information Collected Automatically

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, and referral URLs
• Cookies and similar tracking technologies (see Section 7)
• Company identification via visitor deanonymization tools (e.g., RB2B) for B2B purposes only

2.3 Data Collected via LinkedIn Integration

When you connect your LinkedIn account to our advertising tools, we may collect the following data in accordance with LinkedIn's API Terms of Use and Marketing API Program Terms:

• LinkedIn profile information (name, profile URL, profile picture)
• LinkedIn advertising account data (ad performance metrics, campaign analytics, billing data)
• Lead generation form response data (submitted by LinkedIn members through your ads)
• Organization page data (for pages you administer)

We collect this data only after you have explicitly authorized access through LinkedIn's OAuth consent flow. You can see exactly what permissions are requested before granting access.

2.4 Data Collected via Other Integrations

When you connect CRM platforms (HubSpot, Salesforce), email tools, or other third-party services, we collect data as authorized by you during the connection process. This may include contact records, deal data, email activity, and campaign performance metrics.

3. How We Use Your Data

We use your data for the following purposes:

• To provide, operate, and improve our website, products, and services
• To respond to your inquiries and provide customer support
• To send marketing communications (with your consent, which you can withdraw at any time)
• To analyze website traffic and user behavior to improve our offerings
• To manage and optimize advertising campaigns on your behalf via LinkedIn and other platforms
• To generate reports and analytics on ad performance for your accounts
• To fulfill our contractual obligations to you as a client
• To comply with legal obligations and protect our legal rights

3.1 LinkedIn Data Usage

Data obtained through LinkedIn's APIs is used strictly for:

• Reporting and analytics on advertising campaign performance for your accounts
• Managing and optimizing your LinkedIn advertising campaigns
• Processing and delivering lead generation form responses to your CRM
• Billing reconciliation and account management

We do not use LinkedIn data for any purpose not explicitly authorized by you and permitted by LinkedIn's API Terms of Use and Marketing API Program Terms.

4. Data Sharing and Disclosure

We do not sell your personal data. We share data only in these circumstances:

• Service providers: We share data with trusted third-party service providers who help us operate our business (hosting, analytics, email delivery, payment processing). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• At your direction: When you instruct us to connect your data with third-party tools (CRMs, email platforms, advertising platforms), we share data as necessary to fulfill your instructions.
• Legal requirements: We may disclose data if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

4.1 LinkedIn Data Sharing Restrictions

In compliance with LinkedIn's terms, we specifically commit to the following:

• We do not sell, license, or commercialize LinkedIn member data to any third party
• We do not provide LinkedIn data to data brokers or data resellers
• We do not combine LinkedIn member data with data from other sources to create member profiles
• We do not derive sensitive information (health, religion, political affiliation, sexual orientation, race, ethnicity) from LinkedIn data
• We do not export or transfer LinkedIn member data out of our application except as explicitly permitted
• Lead generation form response data is delivered only to the authorized LinkedIn ad account holder

5. Data Storage and Retention

We store your data on secure servers provided by our hosting and infrastructure partners. We retain your data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

5.1 LinkedIn Data Retention

In compliance with LinkedIn's data storage requirements, we adhere to the following retention limits:

When a client ceases using our services, we permanently delete stored LinkedIn data within 10 days unless a longer retention period is required by law.

5.2 General Data Retention

• Account data: retained for the duration of your account, plus 30 days after deletion
• Form submission data: retained for up to 2 years or until you request deletion
• Analytics data: retained in aggregated, anonymized form indefinitely
• Email communications: retained for up to 3 years

6. Data Security

We maintain physical, technical, and administrative safeguards to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Secure authentication mechanisms including OAuth 2.0 for third-party integrations
• Monitoring for unauthorized access attempts

In the event of a data breach affecting your personal information, we will notify you and any relevant regulatory authorities as required by applicable law. We will also promptly notify LinkedIn of any breach impacting LinkedIn member data.

7. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

• Essential cookies: Required for the website to function (session management, security). These cannot be disabled.
• Analytics cookies (Google Analytics): Help us understand how visitors use our website. Activated only after you accept cookies via our consent banner.
• Visitor identification (RB2B): Identifies companies visiting our website for B2B sales purposes. Activated only after cookie consent.
• HubSpot tracking: Tracks page views and form submissions for CRM and marketing automation purposes.
• Advertising pixels: We may use LinkedIn Insight Tag, Google Ads, and Meta Pixel for conversion tracking and retargeting. These are activated only after cookie consent.

You can manage your cookie preferences through the consent banner shown on your first visit. You can also clear cookies through your browser settings at any time.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Withdrawal of consent: Withdraw consent for data processing at any time
• Restrict processing: Request that we limit how we use your data

8.1 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@gtmeagency.com. We will respond to your request within 30 days.

8.2 LinkedIn Authorization

You can revoke our access to your LinkedIn data at any time by visiting your LinkedIn account settings under "Permitted Services" and removing our application. Upon revocation, we will delete your LinkedIn data in accordance with our retention schedule.

8.3 Marketing Communications

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly.

9. International Data Transfers and Legal Basis

9.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data on the following legal bases:

• Consent: When you opt in to marketing communications or accept cookies
• Contractual necessity: When processing is necessary to provide our services to you
• Legitimate interest: For website analytics, security, and B2B marketing purposes
• Legal obligation: When required by law

In Designated Countries (EU/EEA), we will re-obtain consent at least annually for continued access to LinkedIn data when member tokens expire.

9.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising these rights.

9.3 International Transfers

Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Third-Party Links and Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes to how we use your data, we will notify you via email or a prominent notice on our website prior to the change becoming effective. For changes that affect our use of LinkedIn data, we will re-obtain consent where required.

We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: