Privacy Policy
Last Updated: March 2026 • Version 2.1
Our Commitment to Container Privacy
GTM Analyzer accesses your Google Tag Manager containers exclusively via read-only API scopes or direct JSON exports you upload. We never modify your live containers without explicit user action and never store, sell, or monetize your analytics data.
1. Information We Collect
When you use GTM Analyzer, we collect information necessary to provide, optimize, and secure our automated container audit and documentation services:
- Account Credentials: When signing in through Google OAuth, we receive your name, email address, profile avatar, and verified email status.
- GTM Metadata: Account IDs, container IDs, workspace names, version numbers, and tag configuration JSON payloads necessary to generate audit and comparison reports.
- Usage Analytics & Logs: Audit execution timestamps, feature interactions, diagnostic failure logs, and billing transaction identifiers.
2. Google API Data & Permissions
GTM Analyzer adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
When connecting your Google account, GTM Analyzer requests access to the Google Tag Manager API using the minimum scope required (tagmanager.readonly). This permission allows our algorithms to retrieve container definitions, tags, triggers, and variables solely for the purpose of analyzing their health and generating documentation.
You may revoke GTM Analyzer's access to your Google account at any time through your Google Account Security settings.
3. How We Use Collected Data
We use your information exclusively for the following purposes:
- Executing static syntax checks, duplicate trigger audits, and tag verification algorithms.
- Synthesizing plain-English and developer-grade functional summaries using LLM analysis.
- Generating downloadable PDF reports and secure shareable links for client delivery.
- Managing billing, credit allocations, and subscription statuses.
- Sending critical operational notices, security advisories, and service updates.
4. Data Retention & Deletion
Audit reports and container snapshots remain accessible in your dashboard for your historical documentation and version comparison. You can delete individual reports, container histories, or request complete account erasure at any time.
Upon account termination, your stored reports, cached container structures, and access tokens will be permanently purged from our databases within 30 days.
5. Third-Party Service Providers
We work with reputable infrastructure partners to deliver our services. These subprocessors process data under strict data protection agreements:
- Hosting & Database: Secure cloud infrastructure providers with SOC 2 certification.
- Billing: Stripe, Inc. for payment processing (we never store raw credit card numbers).
- AI Documentation: Secure API endpoints with zero data-retention guarantees for model training.
6. Your Rights Under GDPR & CCPA
Depending on your geographical location, you have statutory rights regarding your personal information, including:
- The right to access the personal data we hold about you.
- The right to request rectification of inaccurate data.
- The right to request erasure (“right to be forgotten”).
- The right to export your audit data in a machine-readable format.
7. Contact Information
For questions regarding this Privacy Policy, your data rights, or to submit a deletion request, please contact our Data Protection team at: [email protected]