Privacy

Data we process

• Account data: name, email, and password (managed by our auth provider)
• Workspace data: organization name, timezone, and user role
• Brief content: titles, descriptions, questions, and responses created by users
• Recipient data: email addresses and acknowledgment status
• Audit logs: actor, action, and timestamp for every status-changing action

Processors we use

We use the following third-party processors to operate the service:

• Hosting: Bolt / Netlify
• Database and authentication: Bolt Database / Supabase
• Transactional email: SendGrid

For customer workspace data, the operator acts as a processor. A Data Processing Agreement (DPA) is available on request.

Cookies

We use only essential session cookies required for authentication. No tracking or advertising cookies are used. A cookie banner is not required.

Your rights

You have the right to access, rectify, erase, restrict, and port your personal data. To exercise these rights, contact us at team@thegtmlead.com.

Supervisory authority

Sächsische Datenschutzbeauftragte