Privacy policy

What this policy covers

It covers this website, the client portal our clients sign in to, and the research we do for clients about companies and the people who work at them. Our work for a client is also governed by our agreement with that client.

Visiting this website

We do not add analytics, advertising or tracking tools to this website, and its public pages set no cookies. The one exception is the booking calendar, which is HubSpot’s and is described under the next heading. Some pages remember display choices, such as the view you last picked, in your browser’s local storage. That stays in your browser and is not sent to us.

Like any website, our server and our hosting provider record technical details of each request, such as your IP address, the page requested, the time and your browser, to keep the site running and secure.

The site’s typefaces are served by Google Fonts, so your browser asks Google for them, and Google receives your IP address when it does.

Booking a call

The calendar on our booking page is provided by HubSpot and runs inside our page. As soon as that page loads, before you enter anything, the calendar loads HubSpot’s own analytics and tracking scripts, and HubSpot receives the address of our page and technical details about your browser. When you book, the details you enter, such as your name, your work email and anything you choose to tell us, go to HubSpot and into our HubSpot account. We use them to arrange the call, prepare for it and follow up with you. HubSpot handles all of this under its own privacy policy, and may set its own cookies inside the calendar.

Clients and the client portal

The portal is open only to the people we add at a client’s request, and to our own team. For each person we add, we keep:

• their work email address, and their name if we have it
• a record of each one-time sign-in link we send them (we keep only a scrambled fingerprint of the link, never the link itself), and when they last signed in
• which portal pages they viewed, and when
• comments and replies they leave on a page, and any changes they make to a page they are allowed to edit
• a record of the emails we send them: sign-in links, and notices of new comments and replies

If someone we have not added enters an email address on the sign-in page, we send nothing, but we keep that address and the time, so we can help if an invitation went to the wrong address.

The portal and its sign-in page use one cookie, gtmpipes_session. It is encrypted, holds only what is needed to sign you in and keep you signed in, and is used for nothing else. It keeps you signed in until 24 hours after your last visit, and your browser deletes it 30 days after your last visit. The portal’s question panel also remembers how wide you made it, in your browser’s local storage. Our emails are sent through Google Workspace.

Asking questions in the portal

Some portal pages let a reader ask questions about the page. When you ask one, we send OpenAI the question, the earlier questions and answers in the same conversation, and what is needed to answer it: the text of the page or, on pages built on our research data, the records the assistant looks up. OpenAI writes the answer on our behalf. We tell OpenAI not to store this material, but under its standard terms OpenAI may keep it for up to 30 days to detect abuse before deleting it.

We keep each question and answer for 90 days from when it was asked, and the conversation itself, including a title taken from its first question, for 90 days after it was last used. Our team reviews these records to improve the answers. Then they are deleted, and they drop out of our backups shortly after.

People and companies in our research

Our service researches companies for our clients, from public sources such as regulatory filings, company websites, news, job postings and investor material, and from commercial data providers. For some clients we also identify the people at those companies who are relevant to the client’s work: their name, job title, employer and professional profile and, where we can find them, their business email address and phone number. We deliver that information to the client who asked for it.

The real example on this website names a small number of people at real banks, with their job titles. It never shows an email address or a phone number, and it does not link to anyone’s profile, though a few of the sources it cites are public posts that people wrote under their own names.

If you are named in our research and would like to know what we hold about you, have it corrected or be left out of it, write to us at sales@gtmpipes.com.

How we use information

We use the information above to run this website and the portal, to answer you and arrange calls, to deliver the work our clients ask for, to keep our systems secure and to meet our legal obligations. We do not sell information about visitors to this website, and we do not use it for advertising.

Who we share it with

We share information only as this policy describes:

• with the service providers that run parts of our service for us: Fly.io, which hosts this website and the portal in the United States; HubSpot, for booking and our client records; Google, for email and fonts; OpenAI, for answers to portal questions; and the AI, data and workflow providers we use to research companies and to prepare and publish client documents, such as Anthropic and OpenRouter
• with our clients, in the case of the research described above
• when the law requires it, or to protect our rights, our users or the public
• with a buyer or successor, if our business is ever sold or reorganized, under the same protections

How long we keep it

Portal questions and answers are deleted 90 days after they are asked, and a conversation 90 days after it was last used. Other information is kept for as long as we need it for the purpose we collected it for, such as the life of a client relationship, and then deleted, unless the law requires us to keep it longer.

Your choices and rights

You can ask us what information we hold about you, ask us to correct or delete it, or object to how we use it, including in our research. Write to us at sales@gtmpipes.com and we will respond within the time the law allows. We may need to confirm who you are first. Depending on where you live, you may also have the right to complain to a data protection authority.

Security

This website and the portal are served only over encrypted connections. Sign-in cookies are encrypted, portal access is limited to the people a client invites, and only our team can reach our systems. No way of sending or storing information is perfectly secure, but we work to protect what we hold.

Children

This website and our service are for businesses. They are not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we change this policy, we will update it here and change the date at the top.

Contact

GTM Pipes is run by No Fluff Selling LLC. Write to us at sales@gtmpipes.com.