Privacy policy

Last updated 11 November 2026.

This policy covers pro.gtmvault.co and the GTM Vault MCP connector at https://pro.gtmvault.co/mcp. Both are run by GTM Vault LLC, Wyoming. The GTM Vault newsletter and subscriptions run on Substack, and Substack's own privacy policy covers them.

What we collect

1. Your email address. Sign-in uses the email you subscribe to GTM Vault with, checked against the subscriber list exported from Substack, along with your plan (free or Pro).
2. Sign-in codes and tokens. The six-digit code we email you, and the OAuth access and refresh tokens issued when you connect GTM Vault to Claude. We store only hashes of these, never the codes or tokens themselves.
3. A connector call log. For each MCP request we record your account, the tool name, the time and whether it succeeded. We use it to apply the daily request limit for your plan.
4. Anything you submit through a form on the site, such as a stack submission, a deal submission, a survey answer or a sponsor inquiry.
5. Anonymous usage counts: page analytics through Vercel Analytics, which does not use cookies or identify you, and counts of clicks on buttons and deal links, which record the page and whether a visitor was signed in, not who they are.

What we do not collect

The connector does not store your Claude conversations or the text of what you ask. Tool inputs, such as a search phrase or your audit answers, are used to answer that one request and are not saved. The connector is read-only: it cannot change anything in your Claude account or any other system.

How we use it

To sign you in, to give you the access your plan includes, to enforce daily request limits, to keep the service secure, and to understand which tools and pages get used. We do not sell your data and do not use it for advertising.

Who we share it with

Only the providers that run the service, each processing data on our behalf: Vercel (hosting), Turso (database), Resend (sign-in emails) and Substack (the subscriber list). We share data with anyone else only if the law requires it.

How long we keep it

1. Sign-in codes expire after 10 minutes and the sign-in flow after 15 minutes.
2. Access tokens expire after 1 hour and refresh tokens after 30 days.
3. Your email and the connector call log are kept while you are a subscriber, and deleted on request.
4. Form submissions are kept until you ask us to delete them.

Your choices

You can disconnect GTM Vault from Claude at any time in Claude's connector settings, which stops all access. To see, correct or delete what we hold about you, email rick@ritegtm.com and we will reply within 30 days.

Contact

GTM Vault LLC, Wyoming. rick@ritegtm.com