Private preview · Updated September 5, 2026

Your data in GTM OS.

GTM OS is a prelaunch project based in California, United States. This notice describes the current preview. Contact ajginternational5@gmail.com about your data or this notice.

What we use

We process your account and workspace details, business brief, customer records, task instructions and outputs to provide the features you use. We also keep authentication, usage, approval and operational records to control access, prevent duplicate actions and operate the service. Authentication uses necessary session cookies.

Your optional Gmail connection

With your permission, GTM OS reads your Google account identity and Gmail messages to let you search your mailbox and run tasks on messages you select. Access is read-only. The current add-on cannot send, forward, delete or change email. It does not download attachments or open links and remote images in messages.

Mailbox connections and saved mailbox tasks are private to the connecting user within their workspace. Other workspace members and administrators do not gain access through the app. Message bodies are retrieved for your search or task and are not saved in the GTM OS database. Search results may display message metadata and excerpts in your browser. Saved tasks contain your search, selected message identifiers, instructions and generated results.

AI processing

When you explicitly submit an email task, selected message text and your instructions are sent to OpenAI to generate the requested result. Review the selection before submitting; generated text can be inaccurate. GTM OS does not use your Google data to train models, advertise, build prospect lists or sell data, and does not send this mailbox content to Apollo or Instantly.

AI responses are requested without normal Responses API storage. This does not eliminate OpenAI’s abuse-monitoring logs, which can retain inputs and outputs for up to 30 days and longer under specified legal or security exceptions. See OpenAI’s API data controls. GTM OS does not claim zero data retention.

Calendar and managed sales tools

If you connect Google Calendar, we use your selected calendar and availability to support bookings and cancellations that you authorize. Inviting an attendee shares the event details with Google and that attendee. Separately, approved prospecting and outreach workflows can use Apollo and Instantly for selected business contacts, campaign messages and replies. Your optional Gmail connection does not authorize those workflows.

Service providers and access

Our service uses Supabase for authentication and data storage, Vercel for hosting, OpenAI for AI tasks and Inngest for background work. Google provides mailbox and calendar access. Features may also use Apollo, Instantly, Stripe for billing and Resend for transactional email. Providers receive information needed for the relevant feature. Processing may take place in the United States and other countries where these providers operate.

Google tokens are encrypted in our database. We restrict access to your data and do not permit routine human reading of Google mailbox content. Any exceptional human access must comply with Google’s Limited Use requirements, such as your affirmative permission for support, a security investigation or applicable law.

Disconnecting and deleting

You can disconnect Gmail from My mailbox to delete stored credentials and stop pending tasks. Disconnecting retains saved task history until you delete it. Deleting a task removes its saved content; minimal usage records remain so deletion cannot reset spending limits. To request deletion or a copy of other workspace data, contact us from your account email. Backup copies and records needed for security, accounting or legal obligations may remain for the applicable retention period.

You can also remove GTM OS access in your Google account. Google revocation can affect both Gmail and Calendar when they share a project grant. The app explains this before an explicit revoke action.

Google Limited Use

GTM OS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This notice will be updated when the service or data practices change. The current Gmail integration remains in Google testing while broader access and verification are prepared.