Privacy Policy

Last updated: March 2026

1. Information We Collect

Account Information

When you create an account we collect your name, email address, and company name. If you sign in via Google OAuth, we receive your name and email from Google.

Payment Information

Credit purchases are processed by Stripe. We do not store your credit card number, CVC, or billing address on our servers. Stripe handles all payment data under their own Privacy Policy.

Usage Data

We collect basic usage analytics such as pages visited, orders placed, and feature usage to improve the platform experience. We do not use third-party advertising trackers.

2. Scraped Data Handling

Data extracted from LinkedIn through our Service (names, job titles, company names, and other publicly available profile information) is processed on our servers and delivered to you via CSV download or dashboard access.

Scraped data is associated with your account and stored to enable order history and re-downloads.
We do not sell or share scraped data with other customers or third parties.
You may request deletion of your order data at any time by contacting us.

3. Third-Party Services

We use the following third-party services to operate GTM Plays:

Supabase — database hosting, authentication, and file storage.
Stripe — payment processing and billing.
Google OAuth — optional single sign-on authentication.
Vercel — frontend hosting and edge delivery.

Each service operates under its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data Retention

We retain your account information for as long as your account is active. Order data (including scraped results) is retained for up to 12 months after delivery to enable re-downloads, after which it may be automatically purged.

If you delete your account, we will remove your personal data within 30 days. Some data may be retained in anonymised form for analytics or where required by law.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under GDPR:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate data.
Erasure — request deletion of your personal data.
Portability — request your data in a machine-readable format.
Objection — object to processing of your data for certain purposes.

To exercise any of these rights, email us at support@gtmplays.io. We will respond within 30 days.

6. Cookies

GTM Plays uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

Authentication cookies — keep you signed in across page navigations.
Preference cookies — store UI preferences such as theme settings.

You can disable cookies in your browser settings, but this may prevent the Service from functioning correctly.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted database connections, and secure authentication flows. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at support@gtmplays.io.