Privacy policy
For founders, CEOs, CMOs, CROs, demand generation heads and security reviewers. The decision: whether you can enter real company metrics into GTM Alpha safely.
The free EPIC audit form, the EPIC audit API for developers and GTM Alpha in Claude keep nothing you type. New audits are not kept, and older records are deleted on request within 30 days. Our pages count visits with Google Analytics, which sets cookies only if you accept, and Ahrefs Web Analytics. This page explains what we collect, why, how long we keep it and what you can ask us to do.
1. Who is responsible for your data
Helix GTM Consulting ("we", "us", "our") decides how the personal data collected through this website and the GTM Alpha tools is used.
Contact:
Shashwat Ghosh
Email: shashwat@gtmhelix.com
Website: gtmalpha.gtmhelix.com
2. What we collect
2.1 The free EPIC audit form
| What you enter | Why | Do we keep it? |
|---|---|---|
| Your name and role, company name, company description, GTM challenge, industry, business stage, team size, monthly budget, primary focus, company website and LinkedIn address, and any of the optional questions you answer (contract value, deal cycle, net revenue retention, addressable accounts, main deal source, primary market and self serve sign up) | To build your free EPIC audit report | No. Your answers go to our server, which checks them, builds your report straight away and sends it back to your browser. Our code does not save or log your answers or your report, and sends them to no one |
The form does not ask for your email address and takes no payment, so it asks for no payment details. Your report stays in your browser tab. If you download it as a PDF, the file is saved on your device.
2.2 The EPIC audit API for developers
Developers can send company details to the EPIC audit API (described in the API docs). New audits are not kept: what they send is used only to build the result, and our code does not save it. Audits that earlier versions of the API saved stay in a database at Netlify, the company that hosts this site, and are deleted on request within 30 days.
2.3 GTM Alpha in Claude and other apps
When your AI assistant uses a GTM Alpha tool, our server receives the name of the tool and the details for that request, and uses them only to build the answer. Our code does not save or log the details or the answer, and it never sees the rest of your conversation. It does count the call (see 2.5). Answers are marked so that they are not stored in any cache.
2.4 What is collected automatically
- Our pages count visits with Google Analytics and Ahrefs Web Analytics. Google Analytics sets cookies only if you select Accept in the cookie choice, and Ahrefs sets none. Neither receives what you type. The usage count in 2.5 is separate.
- Netlify, which hosts this site, handles each visit (including your IP address and browser details) to deliver the page and to apply the rate limits, and keeps its own logs: netlify.com/privacy.
- Our pages load their fonts, images and scripts from this site.
2.5 Usage counts
Since 17 October 2026, each audit from the free EPIC audit form or the EPIC audit API, and each GTM Alpha tool call, adds one record to a usage count, kept in Netlify's storage for this site. It shows us which tools people use. Each record holds only:
- The date and time of the call.
- This site's name and the tool's name.
- One word for the kind of app that made the call, such as
claude,chatgptorbrowser. It is read from the User-Agent header the app sends. - Whether the call came from the website or an AI assistant.
It never holds your answers, your inputs, the report, your IP address or the full User-Agent. Nothing in a record says who you are.
2.6 Older records
Earlier versions of this site saved the answers people gave in an older consultation form, in the same database at Netlify. For orders placed when that form took payments, the record also holds the service chosen and its price. These records hold no card or bank details. Nothing adds to them now, and they are deleted on request within 30 days.
3. How we use your data
- To build your free EPIC audit report and EPIC scores from your answers
- To answer requests to the EPIC audit API and the GTM Alpha tools
- To meet our legal obligations
We do not sell your data, share it with competitors or use it to train AI models.
4. Who else sees your data
- Netlify: hosts the site, stores the usage counts, holds the database (older EPIC audit API records and the older consultation records) and keeps request logs, on our behalf
- Legal authorities: only when the law requires it
5. How long we keep it
| Data | How long it is kept |
|---|---|
| Free EPIC audit form answers and reports | Not kept |
| What is sent to the EPIC audit API, and its results | New audits: not kept. Older records: until you ask us to delete them, then deleted within 30 days. Nothing is deleted automatically |
| Older consultation records | Until you ask us to delete them, then deleted within 30 days |
| What your AI assistant sends to the GTM Alpha tools, and the answers | Not kept |
| Usage counts (see 2.5) | No set end date. They cannot be linked to you, so we cannot find or delete one person's records |
| Netlify request logs | Kept by Netlify under its own policy |
6. Your rights
- Access: ask for a copy of your personal data
- Correction: have wrong data corrected
- Deletion: have your data deleted
- Portability: receive your data in a file a computer can read
- Restriction: limit how we use your data
- Objection: object to uses based on our legitimate interests
- Withdrawing consent: where we rely on your consent
To use these rights, email shashwat@gtmhelix.com with the subject "Data Rights Request". Each saved record carries the company name you gave and the time it was saved, so please include your company name and roughly when you used the site. We find and delete records by hand within 30 days.
7. Cookies
Our pages set no advertising cookies or tracking pixels. Google Analytics sets analytics cookies only if you select Accept.
8. Where your data is processed
- India: where we are based
- United States: where Netlify hosts the site
Netlify processes this data in the United States under its own data processing terms.
9. Security
- Every page and request is encrypted (HTTPS)
- Every page is sent with security settings that, among other things, stop other websites from showing this site inside theirs
- We hold no user accounts or passwords, and take no payments
- Rate limits: the free EPIC audit form, the EPIC audit API and the status check share 30 requests a minute per visitor, and the GTM Alpha tools allow 300 a minute
- The free EPIC audit form accepts only its own questions, each with a length limit, and a hidden field turns away automated submissions
- Size limits: a request to the free EPIC audit form or the EPIC audit API may hold at most 32,000 bytes, with at most 4,000 characters for the company description and for the GTM challenge; a request to the GTM Alpha tools may hold at most 65,536 bytes, with at most 4,000 characters in each text input
- Saved records cannot be read back through any public address
10. Children
GTM Alpha is not meant for anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy. Changes are published on this page with a new date.
12. Complaints
If you have concerns about how we handle data:
- Contact us first at shashwat@gtmhelix.com
- You can also complain to your local data protection authority
Email shashwat@gtmhelix.com
How to read the answer
Section 2 explains what the free EPIC audit form, the developer API, and the MCP connector receive, and shows that new inputs and reports are used once to build your answer and are not saved, while older API and consultation records remain until deleted on request (sections 2.2 and 2.6) and section 2.5 lists the four anonymous fields kept in the usage count.
What to do next
- Founder: Confirm that new company metrics are not stored, then run the free EPIC audit with your real deal numbers.
- CEO: Share this page with your legal or security lead if they need to review data handling before your team connects GTM Alpha.
- CMO: Connect GTM Alpha in your assistant knowing that GTM Alpha does not store the tool inputs it receives or use them to train AI models.
- CRO: Enter your real contract value, sales cycle, and net revenue retention in the EPIC audit to get a full score instead of a preliminary result.
- Demand generation head: Use the web form or MCP connector with your current funnel figures to generate your 30 to 90 day roadmap.
Why come back
Come back whenever you need to verify data handling for a security review or check the policy date after a site update. The tool applies the same fixed rules every time. It does not call an AI model, and this site does not keep what you enter.
Choose your app
Run the free audit in your browser. Copy its result into ChatGPT, Claude or Gemini when you want help acting on it. The MCP connector works with supported plans in Claude, ChatGPT, Cursor, VS Code and Windsurf. Gemini CLI and Antigravity use the separate Helix GTM Suite skills package.