Privacy Policy

1. Categories and Sources of Personal Information

We collect personal information from multiple sources depending on how you interact with the Services.

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Create, administer, or access an account
• Use the Services or interact with features
• Submit prompts, content, files, or data
• Communicate with us via email, chat, or other channels
• Request support, demos, or information
• Enter into transactions or provide billing information

This may include:

• Name, email address, phone number, and contact details
• Company name, role, department, and business information
• Account credentials (usernames, passwords, authentication tokens)
• Billing and payment information
• Communications, feedback, and support requests
• Content submitted to the Services, including prompts, documents, brand context, and other materials

We only require personal information where necessary to provide the Services or fulfill a request.

1.2 Information Collected Automatically

When you access or use the Services, we automatically collect certain information, including:

• IP address and approximate geolocation
• Device identifiers, device type, and configuration
• Browser type, language, and operating system
• Usage data (pages viewed, features used, timestamps, session duration)
• Navigation paths and referring URLs
• Log files, diagnostic data, and error reports

This information is collected using cookies, log files, and similar technologies.

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core functionality of the Services
• Maintain session state
• Analyze usage and performance
• Improve reliability and user experience

Cookies may be session-based or persistent. You may control cookies through your browser settings, though some functionality may be impacted.

1.4 Information from Third Parties

We may receive personal information from third parties, including:

• Payment processors (e.g., transaction confirmations)
• Analytics providers (e.g., usage insights)
• Integration partners (e.g., CRM or data platforms)
• Identity providers (e.g., single sign-on services)
• Customers who provide data to us in connection with their use of the Services

We do not control third-party data collection practices outside our Services.

1.5 Customer-Provided Data (Processor / Service Provider Context)

In many cases, GTMx processes personal information on behalf of its customers. In this context:

• Customers determine what personal information is collected and how it is used
• GTMx processes such data as a service provider or processor

Customer-provided data may include:

• Business contact information
• Brand context, company descriptions, and website content
• Documents, communications, and files
• Operational or analytics data

We process such data only as necessary to provide the Services and in accordance with applicable agreements.

1.6 AI Interaction and Workspace Data

When you use AI-powered features (including GTMx Copilot and the GTMx Workspace), we process:

• Prompts, queries, instructions, and inputs
• Conversation history and interaction context
• Outputs generated by AI systems
• Brand context, voice profiles, and workspace data accessible through integrations or user configuration
• Metadata such as timestamps, usage frequency, and feature interaction

This processing is necessary to generate outputs and enable AI functionality.

2. How We Use Personal Information

We use personal information for the following purposes:

2.1 Service Delivery and Operations

• Provide, operate, and maintain the Services
• Authenticate users and manage accounts
• Enable workflows and integrations
• Process payments and transactions
• Provide customer support

2.2 Product Improvement and Development

• Analyze usage patterns and trends
• Troubleshoot errors and technical issues
• Improve performance, scalability, and reliability
• Develop new features and functionality

2.3 Communications

• Respond to inquiries and support requests
• Send administrative or service-related communications
• Provide updates related to the Services

We do not send marketing communications except where permitted by law.

2.4 Security and Integrity

• Monitor for fraud, abuse, or unauthorized activity
• Protect systems and infrastructure
• Enforce terms, policies, and agreements

2.5 Legal and Compliance

• Comply with applicable laws and regulations
• Respond to lawful requests
• Establish, exercise, or defend legal claims

We do not sell personal information.

3. Artificial Intelligence and Automated Processing

3.1 AI Features

The Services include artificial intelligence and machine learning features that process data to generate outputs such as AI visibility scans, recommendation intelligence, content briefs, brand voice analysis, and win-loss insights.

3.2 Use of Data in AI Systems

When AI Features are used:

• Data submitted is processed to generate outputs
• Customer Data is used only within the scope of providing the Services

By default:

• GTMx does not use Customer Data to train generalized AI models
• GTMx does not use Customer Data to train third-party models

We may use aggregated or de-identified data and system performance data to improve the Services.

3.3 Nature of AI Outputs

AI outputs:

• Are generated automatically
• May be probabilistic
• May contain inaccuracies or omissions

Outputs should be independently reviewed before reliance.

3.4 Monitoring and Misuse Prevention

We may process data to:

• Monitor performance and reliability
• Detect misuse, abuse, or policy violations
• Maintain system integrity

3.5 Automated Processing Disclosure

By using the Services, you acknowledge:

• Data may be processed automatically
• Outputs may be generated without human review
• Decisions or recommendations may be automated

3.6 User Responsibilities

Users are responsible for:

• Ensuring rights to submit data
• Avoiding unnecessary submission of sensitive or regulated data
• Reviewing outputs before reliance

4. Disclosure of Personal Information

We disclose personal information in the following circumstances:

4.1 Service Providers

We share information with vendors and service providers that support our operations, including:

• Hosting and infrastructure providers
• Analytics providers
• Payment processors
• Customer support platforms

4.2 Customers

Where we process data on behalf of customers:

• Personal information may be disclosed to those customers
• Customers determine how such data is used

4.3 Legal and Regulatory Requirements

We may disclose information:

• To comply with laws or legal processes
• In response to lawful government requests

4.4 Protection of Rights

We may disclose information to:

• Enforce policies and agreements
• Prevent fraud or security threats
• Protect rights, property, or safety

4.5 Business Transfers

We may disclose information in connection with:

• Mergers, acquisitions, or financing
• Due diligence or restructuring

We do not sell personal information.

5. Data Retention

We retain personal information only as long as necessary to:

• Provide the Services
• Fulfill the purposes described in this Policy
• Comply with legal obligations

Retention depends on:

• The type of information
• Business needs
• Legal requirements

We may retain anonymized or aggregated data longer.

6. Data Security

We implement reasonable safeguards designed to protect personal information, including:

• Encryption in transit
• Access controls
• Monitoring and logging
• Incident response processes

No system is completely secure.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access personal information
• Correct inaccuracies
• Request deletion
• Restrict or object to processing
• Request data portability

California Residents

You may have rights including:

• Right to know
• Right to delete
• Right to non-discrimination

To exercise rights: privacy@gtmx.ai

8. International Transfers

Personal information may be transferred to and processed in the United States or other jurisdictions where we or our service providers operate.

9. Children's Privacy

The Services are not directed to children under 13 (or 16 where applicable).

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the Services constitutes acceptance of updates.

11. Contact Information

Patri Inc. (d/b/a GTMx)
Email: privacy@gtmx.ai

12. Enterprise and Contractual Terms

Enterprise agreements may include additional data processing terms that supersede this Policy where applicable.