Privacy policy

last updated November 9, 2026

gtm.dev is a B2B data API and MCP server operated by RocketSDR ("we"). This policy covers two groups: people who sign up for and use gtm.dev, and the business professionals whose work information appears in our data.

If you have a gtm.dev account

• Account. Your email address. If you sign in with Google, we receive your Google account's email address and whether Google has verified it; we use only the email address, to create and identify your account. We don't receive your Google password or access to your Gmail, Drive or any other Google data.
• Usage. For each API or MCP call: the tool called, credits charged, status and time, and the IP address the request came from (for rate limiting and abuse prevention). We keep the inputs and results of a call only where needed to run it, such as bulk jobs and caches of email-verification results.
• Billing. If you buy credits, payment is handled by our payment processor; we don't store card numbers.
• Website. We use Google Analytics and the Meta Pixel to measure visits and sign-ups. Your signed-in session is kept in your browser's local storage.
• Email. We send sign-in codes and links through Amazon SES, and service notices about your account.

We use this information to provide gtm.dev, bill usage, prevent abuse and improve the product. We don't sell it. Our service providers (hosting, email delivery, payments, analytics) process it on our behalf. We keep account data while your account is open and delete it on request, except what we must keep for billing, legal or security reasons.

If you appear in our data

gtm.dev provides business information about companies and the professionals who work at them: name, job title, employer, work location, professional profile URLs and work email addresses. It comes from publicly available sources, such as company websites, public professional profiles and public job and event listings, and from verification we run ourselves. We provide it to businesses for B2B sales, marketing and research, which is our legitimate interest. You can ask us what we hold about you, to correct it, or to delete it and not collect it again, by emailing support@rocketsdr.ai.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you can ask to access, correct, delete or export your personal information, and to object to or restrict its use. We don't sell personal information about account holders. To make a request, email support@rocketsdr.ai; we answer within 30 days.

Security and transfers

Data is encrypted in transit; API keys, sessions and sign-in codes are stored only as hashes. We process data in the United States and other countries where our providers operate.

Children

gtm.dev is a business service and isn't meant for anyone under 16.

Changes and contact

If we change this policy we'll update the date above, and tell account holders by email about material changes. Questions: support@rocketsdr.ai.