gtmindex.io

Privacy on GTM Index

GTM Index is a public catalog. Operators, hirers, and agents can read people, playbooks, tools, and jobs without creating an account. This page is the privacy statement for that public surface.

What is public

People pages, playbooks, the tools catalog, jobs, WebMCP answers, and machine files (/llms.txt, /openapi.json, sitemaps) are published so they can be retrieved without a login. Those pages repeat information already collected for the talent index — names, headlines, public career history, and sourced playbook writeups. Do not treat a catalog row as a private dossier.

What we store from visitors

Browsing the HTML site may set a theme preference in local storage. Claiming a profile uses Supabase Auth; that login is for humans who want to attach a LinkedIn identity to an existing page, not for API keys. Server logs from Vercel and the Gateway may include IP address, user agent, and the path requested, for abuse response and reliability.

Agents and APIs

Open WebMCP and GET /v1/people or GET /v1/jobs do not ask for an API key. We advertise a public rate limit so agents can self-throttle. Queries are not sold as a marketing list. There is no public write API and no webhook subscription that would store your callbacks.

Contact

Privacy questions belong on the GTM Index contact page. This statement covers the public catalog at https://gtmindex.io. It is not legal advice and not a DPA for a paid enterprise product we do not currently sell.