Your data

What happens to what you put in

Plain answers to the questions you should ask before putting anything confidential into any AI tool.


Is my data used to train AI models?

No. GTM Tools is built on Anthropic's Claude API. Inputs processed through the API are not used to train or improve Anthropic's models by default. This is Anthropic's stated policy for API usage — distinct from Claude.ai, where different terms apply. Source: anthropic.com/legal/privacy →

Who can see what I input?

Your inputs are transmitted securely to Anthropic's API for processing and are not stored by Anthropic beyond the scope of the API transaction. GTM Tools stores your generated outputs in your workspace so you can reference them later — these are associated with your account and are not accessible to other users or to us except for support purposes with your explicit permission.

We do not sell, share, or use your inputs or outputs for any purpose other than delivering the tool response to you.

Is the connection secure?

Yes. All data transmitted between your browser, GTM Tools, and Anthropic's API is encrypted in transit using TLS. Your workspace data stored in our database is encrypted at rest. Access to our infrastructure requires multi-factor authentication.

What should I avoid putting in?

GTM Tools is designed for strategic GTM analysis — market context, audience definitions, positioning, pricing frameworks. You do not need to include personally identifiable information, individual customer records, or regulated data (such as protected health information or material non-public financial information) to get value from the tools.

If your organization has an AI acceptable use policy, review it before inputting confidential strategic information into any third-party AI tool, including this one. When in doubt, anonymize or generalize the inputs — the tools produce strong outputs from directional context, not from raw sensitive data.

For confidential inputs that aren't publicly available, use the additional context upload field — you control what you share and can be as specific or general as your comfort level allows.

Does GTM Tools have enterprise compliance support?

For organizations that require a Data Processing Agreement (DPA), SSO, audit logs, or a documented security review, contact us at security@gtmtools.io.

Enterprise compliance support is on our roadmap. If this is a requirement for your organization, reach out — we want to know what you need.

Where is data stored?

GTM Tools runs on Vercel for deployment and Supabase for database infrastructure, hosted on AWS in the us-west-2 region (Oregon, United States). Workspace data is encrypted at rest.

If specific data residency outside the United States is a requirement for your organization, contact us before using the tool.