Privacy Policy

Last updated: June 1, 2026  ·  Effective: June 1, 2026  ·  GTM Gameplan, LLC  ·  Los Angeles, California

This Privacy Policy (“Policy”) describes how GTM Gameplan, LLC, a California limited liability company (“GTM Gameplan,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information that we obtain through gtmgameplan.com and all related services, features, content, and tools (collectively, the “Service”). It also describes your rights and choices regarding your personal information under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable privacy laws.

This Policy applies to: (a) visitors to gtmgameplan.com; (b) individuals who create accounts or subscribe to the Service; (c) individuals who receive outreach or communications from or on behalf of GTM Gameplan; and (d) individuals whose personal information we process in the course of providing the Service to our business customers. By using the Service, you agree to the terms of this Policy.

This Policy does not apply to the personal information of our business customers' prospects or contacts that is processed through the Service on behalf of our customers. Our customers are responsible for providing their own privacy notices to their contacts regarding the use of the Service. GTM Gameplan processes such information as a service provider under applicable law.

1. Personal Information We Collect

We collect the following categories of personal information, depending on how you interact with us and the Service:

1.1 Information You Provide Directly

• Account and Registration Data: Name, work email address, username, password, company name, job title, phone number, property type, and other information you provide when creating an account or booking a demo.
• Contact and Communication Data: Information you include in any messages, inquiries, support requests, or other communications you send to us, including the content of those messages.
• Form Submission Data: Information submitted through forms on our website, including demo request forms, newsletter sign-up forms, and contact forms, such as your name, email address, company, property type, role, and any notes you include.
• Payment and Billing Data: Billing address, payment method details, and other financial information collected in connection with your Subscription. Note: we do not store full credit card numbers; payment processing is handled by our third-party payment processors.
• Survey and Feedback Data: Responses to surveys, questionnaires, user research, or feedback requests we conduct in connection with the Service.
• User Content: CRM data, prospect lists, contact information, and other Customer Data you upload to or process through the Service in connection with your use of our AI-assisted features.

1.2 Information We Collect Automatically

• Log Data: When you access the Service, our servers automatically record information including your IP address, browser type, browser version, operating system, referring URL, pages viewed, links clicked, time and date of each visit, time spent on pages, and other diagnostic data.
• Device Information: Type of device, device identifier, hardware model, operating system version, screen resolution, and similar technical identifiers associated with the device you use to access the Service.
• Usage Data: Information about how you interact with the Service, including features used, actions taken, settings chosen, error reports, and performance metrics.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, local storage, session storage, and similar tracking technologies as described in Section 6.
• Location Data: Approximate geolocation derived from your IP address. We do not collect precise GPS-level location data.

1.3 Information We Collect from Third Parties

• Analytics Providers: Information from analytics services such as Google Analytics 4, including aggregated demographic and behavioral data about users of our website.
• Data Enrichment Providers: We may supplement information about business prospects with data from commercial data providers, including company size, industry, funding history, and executive contact information, for the purpose of providing the Service.
• Publicly Available Sources: We collect and process information from publicly available sources, including company websites, news articles, press releases, regulatory filings, social media profiles, and other publicly accessible information, to generate Output for our customers.
• Referrals: If you were referred to us by a third party, we may receive basic contact information about you from that referral source.
• Integration Partners: If you choose to integrate the Service with third-party platforms such as CRM systems, we may receive information from those platforms as necessary to provide the integration.

2. How We Collect Personal Information

We collect personal information through the following means:

• Directly from you when you fill out forms, create accounts, contact us, or otherwise interact with the Service;
• Automatically through cookies, tracking technologies, and server logs when you visit our website or use the Service;
• From third parties including analytics providers, data enrichment services, publicly available sources, and integration partners;
• Through the Service when you upload Customer Data, use AI features, or otherwise use the Service in connection with your business activities.

3. How We Use Personal Information

We use personal information for the following business and commercial purposes:

3.1 Providing and Operating the Service

• Creating and managing your account and Subscription;
• Processing and fulfilling your requests for demos, reports, and other Service-related inquiries;
• Operating, maintaining, and improving the Service, including AI-assisted features and Output generation;
• Processing payments and managing billing;
• Providing technical support, troubleshooting, and responding to your inquiries;
• Communicating with you about your account, transactions, and Service-related matters.

3.2 Improving and Developing the Service

• Analyzing usage patterns and user behavior to understand how the Service is used and how it can be improved;
• Conducting research and development to improve existing features and develop new products and services;
• Training and improving our AI models and algorithms using aggregated, anonymized, or de-identified data (not using Customer Data without separate consent);
• Monitoring the performance, reliability, and security of the Service;
• Conducting A/B testing, product experimentation, and feature validation.

3.3 Marketing and Communications

• Sending you marketing and promotional emails about the Service, new features, case studies, and other content that may be of interest to you, subject to your consent where required;
• Delivering our newsletter and other content you have subscribed to;
• Personalizing marketing communications and tailoring content to your interests;
• Measuring the effectiveness of marketing campaigns and communications;
• Running advertising campaigns through third-party platforms.

3.4 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activity;
• Protecting the rights, property, and safety of GTM Gameplan, our users, and third parties;
• Enforcing our Terms & Conditions and other policies;
• Complying with applicable law enforcement requests and legal process.

3.5 Legal and Compliance

• Complying with applicable laws, regulations, legal process, court orders, and governmental or regulatory requests;
• Exercising or defending legal claims;
• Maintaining records required for audit, tax, and accounting purposes;
• Enforcing our legal agreements and rights.

3.6 Business Operations

• Conducting internal business operations, including financial reporting, strategic planning, and corporate governance;
• Evaluating and facilitating mergers, acquisitions, and other corporate transactions (see Section 18);
• Training and evaluating our personnel who provide the Service.

4. Legal Basis for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, our processing of your personal information is subject to the GDPR or UK GDPR. We process your personal information on the following legal bases:

• Performance of a Contract: Processing necessary to enter into or perform a contract with you, including providing the Service, processing payments, and managing your account.
• Legitimate Interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your interests or fundamental rights. Our legitimate interests include: improving and securing the Service, preventing fraud, managing our business, conducting analytics, and sending B2B marketing where permitted by law.
• Consent: Where we rely on your consent for processing, including for certain marketing communications, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal Obligation: Processing necessary to comply with our legal obligations under applicable law, including tax, financial reporting, and law enforcement requests.
• Vital Interests: Processing necessary to protect the vital interests of you or another person, in emergency situations.

5. How We Disclose Personal Information

We do not sell your personal information. We may disclose your personal information to the following categories of recipients for the purposes described in this Policy:

5.1 Service Providers and Vendors

We share personal information with third-party vendors and service providers who perform services on our behalf and in accordance with our instructions, including:

• Cloud infrastructure and hosting providers (e.g., AWS, Google Cloud, Azure) that host the Service and Customer Data;
• Payment processors that handle payment card transactions and billing;
• Analytics providers (e.g., Google Analytics) that provide usage analytics and insights;
• Email and communications providers that deliver transactional and marketing emails;
• CRM and customer success platforms that help us manage customer relationships;
• AI and machine learning service providers whose models power certain features of the Service;
• Data enrichment providers that supplement our data about business prospects;
• Security and fraud prevention services;
• Professional service providers including legal, accounting, and audit firms.

5.2 Business Partners

We may share personal information with trusted business partners in connection with joint marketing programs, co-branded products or services, or referral programs, subject to applicable law and with notice to you where required.

5.3 Affiliates and Subsidiaries

We may share personal information with our affiliates and subsidiaries for the purposes described in this Policy, subject to the same protections described herein.

5.4 Legal and Regulatory Disclosures

We may disclose personal information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce or apply our Terms & Conditions or other agreements; (c) protect our rights, property, or safety or that of our users, employees, or the public; (d) detect, prevent, or otherwise address fraud, security, or technical issues; or (e) respond to emergencies.

5.5 Business Transfers

See Section 18 for information about disclosure of personal information in connection with corporate transactions.

5.6 With Your Consent

We may share personal information with third parties when you have given us explicit consent to do so.

6. Cookies, Tracking Technologies, and Analytics

6.1 Types of Cookies We Use

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your interactions with the Service. The cookies we use include:

• Strictly Necessary Cookies: Required for the Service to function and cannot be switched off. They are set in response to actions you take, such as setting your privacy preferences, logging in, or filling out forms.
• Performance and Analytics Cookies: Allow us to count visits and traffic sources so we can measure and improve the performance of the Service. These include cookies set by Google Analytics 4 (with analytics.js or gtag.js).
• Functionality Cookies: Enable the website to provide enhanced functionality and personalization, such as remembering your preferences and settings.
• Targeting and Advertising Cookies: May be set through the Service by advertising partners to build a profile of your interests and show relevant advertisements on other websites. These cookies work by uniquely identifying your browser and internet device.

6.2 Google Analytics

We use Google Analytics 4 to collect and analyze information about how visitors use the Service. Google Analytics uses cookies and similar technologies to collect information such as pages visited, session duration, device type, and general location. The information generated by Google Analytics cookies is transmitted to and stored by Google on servers in the United States. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout. We use Google Analytics with IP anonymization enabled and have entered into a Data Processing Agreement with Google.

6.3 Managing Cookies

You can control and manage cookies in several ways:

• Browser settings: Most browsers allow you to refuse or delete cookies. The method varies by browser; consult your browser's help documentation. Disabling cookies may affect the functionality of the Service.
• Third-party opt-out tools: You can opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.
• Do Not Track: Some browsers offer a “Do Not Track” (DNT) feature. We currently do not respond to DNT signals, as there is no uniform standard for how DNT signals should be interpreted.

6.4 Event Tracking

We use Google Analytics custom events to track specific user interactions on the Service, including button clicks, form submissions, and navigation events. This information is used to understand user behavior, improve the Service, and measure the effectiveness of our marketing.

7. AI and Automated Processing

7.1 AI-Assisted Features

The Service uses artificial intelligence, machine learning, large language models, and other automated technologies to generate Output, including brand fit scores, research dossiers, and outreach drafts. These features process Customer Data and publicly available information to produce Output.

7.2 Data Used to Train AI Models

GTM Gameplan does not use Customer Data (as defined in our Terms & Conditions) to train our AI models without separate, explicit consent from Customer. We may use aggregated, anonymized, or de-identified data derived from use of the Service to improve our algorithms and models.

7.3 Automated Scoring and Profiling

The Service automatically scores and ranks brands and prospects based on criteria specified by our business customers. This automated scoring is performed on business entities and business contacts in their professional capacity, not on consumers in personal contexts. Our customers are responsible for reviewing and validating all automated scores and Output before taking any action based on them. Our automated processing does not produce decisions with legal or similarly significant effects on individuals.

7.4 Third-Party AI Providers

We use third-party AI and machine learning services to power certain features of the Service. We have entered into appropriate data processing agreements with these providers and require them to process data only as instructed by us and in accordance with applicable law.

8. Data Retention

8.1 Retention Principles

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Our retention decisions are based on the following criteria:

• The nature and sensitivity of the personal information;
• The purposes for which we collected and process the personal information;
• Whether we can achieve the same purposes through less-intrusive means;
• Legal, regulatory, and contractual obligations to retain data;
• Business needs and operational requirements.

8.2 Account Data

Personal information associated with active accounts is retained for the duration of the account relationship. If you close your account or your Subscription expires, we generally retain account data for up to seven (7) years for record-keeping, tax, legal, and audit purposes, after which it is deleted or anonymized.

8.3 Customer Data

Customer Data processed on behalf of our business customers is retained as specified in the applicable Terms & Conditions, Order Form, or Data Processing Agreement. Generally, we retain Customer Data for the duration of the Subscription plus a brief administrative period to allow data export, after which it is deleted.

8.4 Marketing Data

Personal information used for marketing purposes is retained until you opt out of marketing communications or request deletion. We maintain suppression lists of individuals who have opted out indefinitely to honor opt-out requests.

8.5 Legal Hold

We may retain personal information for longer periods if required by applicable law, regulation, or legal process, or if necessary to pursue or defend legal claims. In such cases, we will retain only the minimum information necessary for the applicable legal purpose.

9. Data Security

9.1 Security Measures

We implement and maintain administrative, technical, and physical security measures designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. Our security measures include:

• Encryption of personal information in transit using Transport Layer Security (TLS) and at rest using AES-256 or equivalent encryption;
• Access controls, including role-based access controls, multi-factor authentication, and the principle of least privilege;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Employee security training and background checks;
• Incident response and data breach notification procedures;
• Third-party vendor security assessments and contractual security requirements.

9.2 Limitations of Security

No method of electronic transmission or storage is completely secure. While we use commercially reasonable security measures, we cannot guarantee the absolute security of personal information. In the event of a security breach that affects your personal information, we will notify you as required by applicable law.

9.3 Your Role in Security

You are responsible for maintaining the security of your account credentials, including choosing a strong password and enabling multi-factor authentication where available. You should immediately notify us of any unauthorized use of your account or any other security breach.

10. International Data Transfers

10.1 Transfers to the United States

GTM Gameplan is based in the United States, and the personal information we collect is primarily stored and processed in the United States. If you are located in the EEA, UK, Switzerland, or another jurisdiction with data protection laws that differ from those of the United States, your personal information may be transferred to and processed in the United States, which may have different data protection standards than your home country.

10.2 Transfer Safeguards

Where required by applicable data protection law, we implement appropriate safeguards for international transfers of personal information, including:

• Standard Contractual Clauses (SCCs): We use the European Commission's approved Standard Contractual Clauses for transfers from the EEA to third countries;
• UK International Data Transfer Agreements (IDTAs): For transfers from the UK;
• Adequacy Decisions: Where the European Commission or UK government has issued an adequacy decision for the recipient country;
• Other Lawful Mechanisms: Including binding corporate rules, approved certifications, or other mechanisms as permitted by applicable law.

10.3 Data Localization Requirements

Some jurisdictions require that certain types of personal information be stored within their borders. If applicable data localization requirements apply to Customer Data you provide, please contact us to discuss appropriate arrangements.

11. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete such information from our records and terminate any associated account. If you believe that we may have collected personal information from a child under 18, please contact us immediately at evan@gtmgameplan.com. Parents or guardians who wish to request the deletion of their child's personal information may do so by contacting us at the address provided in Section 23.

12. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that we do not own or control. We are not responsible for the privacy practices, content, or security of any third-party website or service. This Policy does not apply to information collected by third parties through their websites or services. We encourage you to review the privacy policies of any third-party websites or services you visit before providing any personal information.

13. California Privacy Rights (CCPA/CPRA)

13.1 California Residents' Rights

If you are a California resident, the CCPA and CPRA grant you specific rights regarding your personal information. Subject to certain limitations and exceptions, you have the following rights:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you over the past 12 months, including the categories of personal information, the categories of sources, the business purposes for collection and use, the categories of third parties to whom we have disclosed personal information, and the specific pieces of personal information we hold about you.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions set forth in the CCPA/CPRA (e.g., if we need the information to complete a transaction, comply with a legal obligation, or for other permitted purposes).
• Right to Correct: You have the right to request that we correct inaccurate personal information about you, taking into account the nature of the information and our purposes for processing it.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. GTM Gameplan does not sell personal information as that term is defined in the CCPA. We may share personal information with advertising partners for targeted advertising as described in Section 6, which may constitute “sharing” under the CPRA. You may opt out of such sharing by contacting us at evan@gtmgameplan.com or by using any Global Privacy Control (GPC) signal enabled in your browser.
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit our use and disclosure of sensitive personal information to certain permitted purposes. See Section 17 for information about the sensitive personal information we collect.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level or quality of service because you exercise your privacy rights.

13.2 Categories of Personal Information Collected (CCPA)

In the preceding 12 months, we have collected the following categories of personal information from consumers:

• Identifiers (name, email, IP address, account username)
• Personal information described in California Customer Records Act (Cal. Civ. Code § 1798.80) (name, contact information, payment information)
• Protected classification characteristics under California or federal law (none intentionally collected)
• Commercial information (transaction and Subscription history)
• Internet or other electronic network activity information (browsing history, search history, interactions with the Service)
• Geolocation data (approximate, derived from IP address)
• Professional or employment-related information (company, job title, role)
• Inferences drawn from the above (user preferences, interests, behavior patterns)

13.3 Categories of Personal Information Disclosed for Business Purposes (CCPA)

In the preceding 12 months, we have disclosed personal information to service providers and other third parties for the business purposes described in this Policy, including categories of identifiers, commercial information, and internet activity information.

13.4 Submitting CCPA/CPRA Requests

To exercise your rights under the CCPA/CPRA, you or your authorized agent may submit a verifiable consumer request by: (a) emailing us at evan@gtmgameplan.com with “CCPA Privacy Request” in the subject line; or (b) contacting us through the information in Section 23. We will respond to verifiable requests within 45 days, with a possible extension of an additional 45 days where reasonably necessary. We may require you to verify your identity before processing your request. If you use an authorized agent, we may require written proof of the agent's authorization and verification of your identity.

14. EEA, UK, and Swiss Privacy Rights (GDPR)

14.1 GDPR Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have certain rights under the GDPR or UK GDPR, including:

• Right of Access: You have the right to obtain a copy of the personal information we hold about you and information about how we process it.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
• Right to Erasure: You have the right to request deletion of your personal information where there is no compelling reason for us to continue processing it, subject to legal obligations to retain certain data.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to our processing of your personal information where it is based on our legitimate interests, and where our legitimate interests do not override your interests, rights, and freedoms.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you.

14.2 Data Protection Authority

If you are located in the EEA or UK and you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority. For residents of the EU, you can find your local supervisory authority at edpb.europa.eu. For residents of the UK, you can contact the Information Commissioner's Office (ICO) at ico.org.uk.

14.3 EU Representative

If required by applicable law, GTM Gameplan will designate an EU representative. Please contact us at evan@gtmgameplan.com for information about our EU representative, if applicable.

15. Marketing Communications and Opt-Out

15.1 Marketing Emails

With your consent where required by applicable law, we may send you marketing emails about our products, services, promotions, events, and industry content. You may opt out of marketing emails at any time by: (a) clicking the “unsubscribe” link at the bottom of any marketing email; (b) contacting us at evan@gtmgameplan.com; or (c) adjusting email preferences in your account settings. Please allow up to 10 business days for your opt-out request to be processed. After opting out, you will continue to receive transactional and service-related emails (e.g., account notifications, invoices, security alerts) as these are necessary for our contractual relationship.

15.2 SMS and Text Messages

We do not currently send marketing text messages (SMS). If we add this capability in the future, we will only send SMS messages with your explicit consent and will honor opt-out requests promptly.

15.3 B2B Marketing

When we send marketing communications to individuals in their professional capacity as representatives of business organizations, we may rely on our legitimate interests as the legal basis for such communications (where applicable under GDPR) or on applicable B2B exemptions under anti-spam laws. Recipients may opt out of such communications at any time by using the unsubscribe mechanism in the email or by contacting us directly.

16. Do Not Sell or Share My Personal Information

GTM Gameplan does not sell personal information for monetary or other valuable consideration, as that term is defined under the CCPA. We may share certain personal information with advertising partners (such as identifiers and browsing data collected through cookies) for the purpose of cross-context behavioral advertising, which may constitute “sharing” under the CPRA. To opt out of the sharing of your personal information for cross-context behavioral advertising, please: (a) email us at evan@gtmgameplan.com with “Do Not Share” in the subject line; (b) use a browser or browser extension that broadcasts a Global Privacy Control (GPC) signal (we honor GPC signals); or (c) manage your cookie preferences as described in Section 6.3. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

17. Sensitive Personal Information

Under the CPRA, certain categories of personal information are classified as “sensitive personal information” and receive heightened protection. GTM Gameplan does not intentionally collect sensitive personal information as defined under the CPRA (including Social Security numbers, financial account numbers, precise geolocation, health or medical information, biometric data, or information about sexual orientation). If you believe you have provided sensitive personal information to us inadvertently, please contact us at evan@gtmgameplan.com so that we can take appropriate action.

To the extent we incidentally collect any sensitive personal information, we use it only for the purposes of providing the Service and as required by applicable law. You have the right to direct us to limit the use of your sensitive personal information to uses necessary to provide the Service. To exercise this right, please contact us at evan@gtmgameplan.com.

18. Business Transfers and Corporate Transactions

If GTM Gameplan is involved in a merger, acquisition, reorganization, joint venture, financing, asset sale, or similar corporate transaction (collectively, a “Corporate Transaction”), personal information held by us may be transferred to or acquired by the successor entity or acquirer as part of that transaction. We will: (a) provide you with prior notice of any Corporate Transaction where your personal information will be used in a materially different way than described in this Policy; (b) give you the opportunity to opt out of any such new use if you have a right to do so under applicable law; and (c) require any successor entity to honor the commitments made in this Policy or to provide comparable privacy protections.

19. Data Processing Agreements

To the extent that GTM Gameplan processes personal information subject to the GDPR, UK GDPR, or CPRA on behalf of our business customers, GTM Gameplan acts as a “processor” or “service provider” under applicable law, and our customers act as “controllers” or “businesses.” In such cases, our processing is governed by a Data Processing Agreement (DPA) entered into with the customer. Business customers who require a DPA should contact us at evan@gtmgameplan.com. Our standard DPA includes the European Commission's Standard Contractual Clauses (SCCs) for transfers of personal data from the EEA and the UK International Data Transfer Addendum (IDTA) for transfers from the UK, as applicable.

20. California Shine the Light Law

California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request certain information once per calendar year about our disclosure of personal information to third parties for their direct marketing purposes. Specifically, you may request: the categories of personal information we disclosed, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. GTM Gameplan does not currently disclose personal information to third parties for their direct marketing purposes without your consent. If you have questions about this, please contact us at evan@gtmgameplan.com.

21. Nevada Privacy Rights

Nevada residents may request that we not sell their covered information (as defined in Nevada Revised Statutes Chapter 603A) to third parties. GTM Gameplan does not sell personal information as defined under Nevada law. If you are a Nevada resident and have questions about our privacy practices, please contact us at evan@gtmgameplan.com.

22. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or business operations. We will notify you of material changes by: (a) posting the updated Policy on our website with an updated “Last updated” date; (b) sending an email notification to the email address associated with your account; or (c) providing a prominent notice within the Service, at least 30 days before the change takes effect for material changes. Your continued use of the Service after the effective date of any updated Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, please discontinue use of the Service and, where applicable, close your account or contact us to request deletion of your personal information.

23. Contact Us and Privacy Requests

If you have any questions, concerns, or requests related to this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please contact us at:

GTM Gameplan, LLC — Privacy Team
Los Angeles, California
Email: evan@gtmgameplan.com

When submitting a privacy request, please include: (a) your name; (b) your email address or other contact information; (c) the nature of your request; and (d) sufficient information to allow us to verify your identity and locate your personal information. We will respond to all verifiable requests within the timeframes required by applicable law.

If you are not satisfied with our response to a privacy request or believe we are processing your personal information unlawfully, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, as described in Section 14.2.