Privacy policy

What this policy covers

It covers this website, the client portal our clients sign in to, and the research we do for clients about companies and the people who work at them. Our work for a client is also governed by our agreement with that client.

Visiting this website

We do not add analytics, advertising or third-party tracking tools to this website, and its public pages set no cookies. There are two exceptions: the booking calendar, which is HubSpot’s and is described under the next heading, and the pages we make for a particular company, described after it. Some pages remember display choices, such as the view you last picked, in your browser’s local storage. That stays in your browser and is not sent to us.

Like any website, our server and our hosting provider record technical details of each request, such as your IP address, the page requested, the time and your browser, to keep the site running and secure.

The site’s typefaces are served by Google Fonts, so your browser asks Google for them, and Google receives your IP address when it does.

Booking a call

The calendar on our booking page is provided by HubSpot and runs inside our page. As soon as that page loads, before you enter anything, the calendar loads HubSpot’s own analytics and tracking scripts, and HubSpot receives the address of our page and technical details about your browser. When you book, the details you enter, such as your name, your work email and anything you choose to tell us, go to HubSpot and into our HubSpot account. We use them to arrange the call, prepare for it and follow up with you. HubSpot handles all of this under its own privacy policy, and may set its own cookies inside the calendar.

Pages made for a particular company

Some pages on gtmpipes.com, at addresses beginning gtmpipes.com/for/, are made for one company and sent to people there by a member of our team. They are not linked from the rest of the site and are hidden from search engines. On these pages, and only these, we do the following.

A cookie that remembers this browser. The first time you open such a page we set one cookie, gp_lv, on that page’s address only. It holds a random value and nothing else, and it lasts about six months. We do not store the value itself; we store a one-way code made from it, which lets us recognise a later visit from the same browser to the same page and nothing more. It is not shared with anyone and it is not used on any other page or site. If you fill in the form in front of a page that has one, we also set a second cookie, gp_lg, so you are not asked again on that browser for 30 days, or one day if your browser asks not to be tracked.

What we record. Our own code on the page records how the page is used: that it was opened, whether it was read for a while, how far the video was watched, which slides were opened, and which links on the page were clicked. There are no third-party trackers, advertising or analytics scripts. We use this to tell the person who sent you the page that it was read and what was of interest, so that any follow-up is relevant. We keep these records for 12 months and then delete them.

Personal links. A page may be sent to you with a link of its own, which ends in ?r= followed by a code. That link tells us the visit came from the person it was sent to, so the sender knows it reached you. It gives no access to anything else. If the link is passed on and opened in another browser, we note that it was opened by someone else; we do not learn who, unless they tell us.

If your browser asks not to be tracked. If your browser sends the Global Privacy Control signal or a “Do Not Track” request, we set no cookie (except gp_lg, for one day, if you fill in the form in front of a page), we do not connect the visit to you or to a personal link, and we keep only anonymous counts, for example that the video was watched by someone.

Forms on these pages. Some pages ask for your work email before showing the page, and a page may offer an optional form to share it with a colleague:

• “Share it with a colleague”: you may give a colleague’s name and email. We make them their own personal link and show it to you, and you send it to them yourself. We never send an email to an address entered in this form. We keep the colleague’s name and address with the page so the sender knows who it was shared with. Please only share it with someone you believe would expect to hear from you about it.
• The form in front of a page asks for your work email before the page is shown.

When you submit a form we keep what you entered, the date, and the exact wording that was shown next to the form, with the record of that page.

Who sees it. The person who sent you the page receives an email when the page is read, passed on, or a form is filled in. What you give us in these forms, and the record of what you looked at on the page, may also be added to our customer relationship system, HubSpot, which processes it for us, so that our team can follow up with you about the page. A colleague’s details entered in the share form are never added there; they are added only if that colleague gives their own details in a form on their link. We do not sell this information or use it to send marketing email.

Your choices. Every form on these pages is optional except the one in front of a page that has one. You can clear the cookie in your browser at any time, or turn on Global Privacy Control. To see, correct or delete what we hold about you from these pages, including anything a colleague entered about you, write to us at sales@gtmpipes.com.

Clients and the client portal

The portal is open only to the people we add at a client’s request, and to our own team. For each person we add, we keep:

• their work email address, and their name if we have it
• a record of each one-time sign-in link we send them (we keep only a scrambled fingerprint of the link, never the link itself), and when they last signed in
• which portal pages they viewed, and when
• comments and replies they leave on a page, and any changes they make to a page they are allowed to edit
• a record of the emails we send them: sign-in links, and notices of new comments and replies

If someone we have not added enters an email address on the sign-in page, we send nothing, but we keep that address and the time, so we can help if an invitation went to the wrong address.

The portal and its sign-in page use one cookie, gtmpipes_session. It is encrypted, holds only what is needed to sign you in and keep you signed in, and is used for nothing else. It keeps you signed in until 24 hours after your last visit, and your browser deletes it 30 days after your last visit. The portal’s question panel also remembers how wide you made it, in your browser’s local storage. Our emails are sent through Google Workspace.

Asking questions in the portal

Some portal pages let a reader ask questions about the page. When you ask one, we send OpenAI the question, the earlier questions and answers in the same conversation, and what is needed to answer it: the text of the page or, on pages built on our research data, the records the assistant looks up. OpenAI writes the answer on our behalf. We tell OpenAI not to store this material, but under its standard terms OpenAI may keep it for up to 30 days to detect abuse before deleting it.

We keep each question and answer for 90 days from when it was asked, and the conversation itself, including a title taken from its first question, for 90 days after it was last used. Our team reviews these records to improve the answers. Then they are deleted, and they drop out of our backups shortly after.

People and companies in our research

Our service researches companies for our clients, from public sources such as regulatory filings, company websites, news, job postings and investor material, and from commercial data providers. For some clients we also identify the people at those companies who are relevant to the client’s work: their name, job title, employer and professional profile and, where we can find them, their business email address and phone number. We deliver that information to the client who asked for it.

The real example on this website names a small number of people at real banks, with their job titles. It never shows an email address or a phone number, and it does not link to anyone’s profile, though a few of the sources it cites are public posts that people wrote under their own names.

If you are named in our research and would like to know what we hold about you, have it corrected or be left out of it, write to us at sales@gtmpipes.com.

How we use information

We use the information above to run this website and the portal, to answer you and arrange calls, to deliver the work our clients ask for, to keep our systems secure and to meet our legal obligations. We do not sell information about visitors to this website, and we do not use it for advertising.

Who we share it with

We share information only as this policy describes:

• with the service providers that run parts of our service for us: Fly.io, which hosts this website and the portal in the United States; HubSpot, for booking, our client records and following up on the pages we make for a particular company; Google, for email and fonts; OpenAI, for answers to portal questions; and the AI, data and workflow providers we use to research companies and to prepare and publish client documents, such as Anthropic and OpenRouter
• with our clients, in the case of the research described above
• when the law requires it, or to protect our rights, our users or the public
• with a buyer or successor, if our business is ever sold or reorganized, under the same protections

How long we keep it

Portal questions and answers are deleted 90 days after they are asked, and a conversation 90 days after it was last used. Other information is kept for as long as we need it for the purpose we collected it for, such as the life of a client relationship, and then deleted, unless the law requires us to keep it longer.

Your choices and rights

You can ask us what information we hold about you, ask us to correct or delete it, or object to how we use it, including in our research. Write to us at sales@gtmpipes.com and we will respond within the time the law allows. We may need to confirm who you are first. Depending on where you live, you may also have the right to complain to a data protection authority.

Security

This website and the portal are served only over encrypted connections. Sign-in cookies are encrypted, portal access is limited to the people a client invites, and only our team can reach our systems. No way of sending or storing information is perfectly secure, but we work to protect what we hold.

Children

This website and our service are for businesses. They are not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we change this policy, we will update it here and change the date at the top.

Contact

GTM Pipes is a trade name (DBA) of No Fluff Selling LLC. Write to us at sales@gtmpipes.com.