Private preview · Updated September 8, 2026

Your data in GTM OS.

GTM OS is a prelaunch project based in California, United States. This notice describes the current preview. Contact hello@trygtmoscloud.com about your data or this notice.

What we use

We process your account and workspace details, business brief, customer records, task instructions and outputs to provide the features you use. We also keep authentication, usage, approval and operational records to control access, prevent duplicate actions and operate the service. Authentication uses necessary session cookies.

Previous Gmail connections and tasks

Google Calendar is the available Google connection in this release. New Gmail connections, Gmail reads and email AI tasks are unavailable, including for a previously connected mailbox. Earlier previews offered read-only Gmail search and tasks on explicitly selected messages; that access did not send, forward, modify or delete email.

Retained mailbox connections and saved mailbox tasks are private to the connecting user within their workspace. Other workspace members and administrators do not gain access through the app. Gmail message bodies are not saved in the GTM OS database. Saved tasks can contain your search, selected message identifiers, instructions and generated results, which may include excerpts from selected messages. You can review and delete saved tasks in Mailbox history.

AI processing

For enabled AI tasks, your instructions and the context you submit go to OpenAI to generate the requested result. Generated text can be inaccurate. Earlier Gmail tasks sent explicitly selected message text and instructions to OpenAI. This release does not start new Gmail tasks or send Gmail content to a model. GTM OS does not use your Google data to train models, advertise, build prospect lists or sell data, and does not send this mailbox content to prospecting or outreach services.

AI responses are requested without normal Responses API storage. This does not eliminate OpenAI’s abuse-monitoring logs, which can retain inputs and outputs for up to 30 days and longer under specified legal or security exceptions. See OpenAI’s API data controls. GTM OS does not claim zero data retention.

Calendar and managed sales tools

If you connect Google Calendar, we use your selected calendar and availability to support bookings and cancellations that you authorize. Inviting an attendee shares the event details with Google and that attendee. Separately, approved prospecting and outreach workflows can share selected business contacts, campaign messages and replies with our managed prospecting and email-delivery providers. A Google connection does not authorize those workflows.

Service providers and access

Our service uses Supabase for authentication and data storage, Vercel for hosting, OpenAI for AI tasks and Inngest for background work. Google provides Calendar access; previous previews also used Gmail. Features may also use managed prospecting and email-delivery services, Stripe for billing and Resend for transactional email. Providers receive information needed for the relevant feature. Contact us for provider information relevant to your workspace. Processing may take place in the United States and other countries where these providers operate.

Google tokens are encrypted in our database. We restrict access to your data and do not permit routine human reading of Google mailbox content. Any exceptional human access must comply with Google’s Limited Use requirements, such as your affirmative permission for support, a security investigation or applicable law.

Presentations and onboarding

Optional presentations and business intake forms use hosted presentation and onboarding services. Opening an embedded introduction shares browser and request information; the hosting provider may also record interactions and use cookies or similar technologies. Intake forms collect the business answers you enter so we can prepare your GTM OS setup. We do not pass your signed-in workspace records, mailbox content or account credentials to the public introduction.

Disconnecting and deleting

You can disconnect a previous Gmail connection from Mailbox history to delete stored mailbox credentials and stop pending tasks. Disconnecting retains saved task history until you delete it. Deleting a task removes its saved content; minimal usage records remain so deletion cannot reset spending limits. To request deletion or a copy of other workspace data, contact us from your account email. Backup copies and records needed for security, accounting or legal obligations may remain for the applicable retention period.

You can also remove GTM OS access in your Google account. Google revocation can affect both Gmail and Calendar when they share a project grant. Local mailbox disconnection does not revoke the Calendar grant.

Google Limited Use

GTM OS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This notice will be updated when the service or data practices change. Google access remains subject to its testing and verification requirements; this notice does not claim Google approval.