Your Privacy Matters
GTM Alpha is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding your data.
1. Data Controller
GTM Alpha Consulting ("we", "us", "our") is the data controller for personal data collected through this website and services.
Contact:
Shashwat Ghosh
Email: shashwat@hyperplays.in
Website: gtm-alpha.netlify.app
2. Data We Collect
2.1 Information You Provide
| Data Type | Purpose | Legal Basis |
|---|
| Name, Email | Consultation requests, service delivery | Contract performance |
| Company Name, Website | GTM analysis, EPIC framework audit | Contract performance |
| Business Challenges | Provide relevant consulting advice | Legitimate interest |
| Payment Information | Process payments (via PayPal) | Contract performance |
2.2 Automatically Collected Data
- Usage Data: Pages visited, time spent, referral source (via Netlify Analytics)
- Device Data: Browser type, operating system, screen resolution
- IP Address: For security and approximate location (country-level)
2.3 MCP Server Data
When you use GTM Alpha via MCP (Model Context Protocol) integration:
- Tool invocation requests and parameters
- Analysis results generated
- No conversation content from your AI assistant is stored
3. How We Use Your Data
- Provide GTM consultation and analysis services
- Generate EPIC framework reports and roadmaps
- Process payments and maintain records
- Improve our services and user experience
- Communicate about your consultation or service updates
- Comply with legal obligations
4. Data Sharing
We do not sell your personal data. We may share data with:
- PayPal: Payment processing (as a data processor)
- Netlify: Website hosting and analytics (as a data processor)
- Legal Authorities: When required by law
5. Data Retention
| Data Type | Retention Period |
|---|
| Consultation Records | 3 years from last interaction |
| Payment Records | 7 years (legal requirement) |
| Analytics Data | 26 months (Netlify default) |
| MCP Usage Logs | 30 days |
6. Your Rights
Under GDPR (EU), DPDP (India), CCPA (California), and similar laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Where processing is based on consent
To exercise these rights, email us at shashwat@hyperplays.in with subject "Data Rights Request".
7. Cookies
We use minimal cookies:
- Essential Cookies: Required for website functionality
- Analytics: Netlify Analytics (privacy-focused, no personal tracking)
We do not use third-party advertising cookies or tracking pixels.
8. International Transfers
Your data may be processed in:
- India: Primary business location
- United States: Netlify hosting, PayPal processing
Transfers are protected by Standard Contractual Clauses (SCCs) where required.
9. Security
We implement appropriate security measures including:
- HTTPS encryption for all data in transit
- Secure payment processing via PayPal
- Access controls and authentication
- Regular security reviews
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy periodically. Significant changes will be notified via email or website notice.
12. Complaints
If you have concerns about our data practices:
- Contact us first at shashwat@hyperplays.in
- You may also lodge a complaint with your local data protection authority