GTMBUNNY
Privacy Policy
Last updated: 5 November 2026
Contact: contact@gtmbunny.com
About this notice
GTMBunny provides company research and outreach campaign tools. This notice explains how GTMBunny handles information when you use the service. For privacy questions, access requests, corrections, exports, or deletion requests, contact contact@gtmbunny.com.
Information we process
We process account identifiers and profile information supplied through Google or email sign-in; business websites, briefs, and targeting preferences you submit; researched public company and professional information; campaign contacts, drafts, schedules, sending activity, and conversation records. Public research may include names, job titles, business contact details, professional-profile links, and publicly available portraits. We also process essential session information and operational records needed to run and protect the service.
Connecting Google and Gmail
Signing in to GTMBunny and connecting Gmail are separate actions. If you connect Gmail, we receive your mailbox address and OAuth tokens. We request gmail.send to send campaign messages and replies you authorize, and gmail.readonly to detect replies, delivery failures, and opt-outs and pause remaining outreach. The reading permission covers your mailbox; the current service fetches bounded batches of recent messages, including messages unrelated to campaigns, to identify matches. It stores matching campaign replies and delivery information rather than importing your entire mailbox into the workspace. Authorizing the connection does not launch a campaign.
How information is used
We use information to authenticate you, preserve guest research in your account, produce company and prospect research, prepare message drafts, run campaigns you approve, display related conversations, respect opt-outs, troubleshoot failures, and protect account access. AI research and copy generation use business briefs and researched company information. The current integrations do not send connected-mailbox message contents or OAuth tokens to those AI features.
Google data restrictions
GTMBunny uses Google user data to provide the user-facing mailbox and campaign features described here. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI or machine-learning models. GTMBunny’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Service providers and transfers
The service uses Vercel for frontend hosting, AWS for backend hosting and database operation, Supabase for authentication, OpenAI for research and drafting, and contact-enrichment services when a lookup is requested. Providers receive information necessary for their function. Google and Microsoft process connected-mailbox requests under their own policies. Hosting and processing may occur outside your country. Enrichment services are used for prospect information, not connected-mailbox contents or OAuth tokens.
Storage and security
Production connections use HTTPS. OAuth credentials are encrypted before storage in the application database, and workspace access is restricted to the authenticated account. These measures reduce risk but cannot guarantee that every security incident will be prevented.
Retention and deletion
Saved research, campaign information, contacts, and matched conversations are retained to provide your workspace unless their removal is requested. These records currently have no automatic expiry. Disconnecting a mailbox clears its active stored OAuth credentials and stops new activity through that connection; it does not delete saved research or existing conversation records. To request deletion or an export, email contact@gtmbunny.com. Requests may require verification of account ownership. Separate backups can retain earlier copies until those backups are removed; contact us for the status of a deletion request and any remaining backup copies.
Your controls
You can pause campaigns, disconnect a mailbox in Email accounts, and revoke GTMBunny’s access from your Google Account’s third-party connections page. You do not need to grant Gmail access to use company research. Contact us to request access, correction, export, or deletion of your account information or public professional information indexed by the service.
Cookies and changes
We use essential authentication and guest-session cookies to keep you signed in and associate research with your browser and account. This notice will be updated when relevant data practices change. The revision date is shown above. Questions can be sent to contact@gtmbunny.com.