What we collect, why we collect it, and what we never do with it. Written to be read, not to be survived.
Last updated 10 October 2026.
fullgtm.ai and the services described on it are operated by Altitude Summit Ventures LLC, a Florida limited liability company, at 7901 4th St N, Ste 300, St. Petersburg, FL 33702. For anything in this policy, including a request to see or delete your data, write to [email protected].
We collect what you type into a form: your name, work email, company and whatever you tell us about what you need. We use it to answer you and to run the service you asked about. We also record the campaign, keyword or link that brought you here, so we know which of our own efforts actually work.
We do not sell that data, we do not rent it, and we do not add you to lists you did not ask for.
Some services need a Google grant you make yourself, on Google's own consent screen, and only for the account you pick there. Outbound uses Gmail. Paid acquisition uses Google Ads. They are separate grants. We do not request a Google scope this page does not name.
Our outbound service sends prospecting emails from the mailbox of a real person on your team, usually a sales rep, and handles the replies those emails receive. That person connects their own work mailbox through Google's consent screen. Nobody can connect a mailbox for them.
We request these scopes and no others: https://www.googleapis.com/auth/gmail.send, to send the outreach emails and their follow-ups from that address; https://www.googleapis.com/auth/gmail.modify, to read recent messages in the inbox and the sent folder so we can tell when one of the people we wrote to has answered, and to create drafts for review when a campaign is set to review before sending; and https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile, with openid when you sign in with Google, to know which account was connected and attach it to the right workspace. We do not delete, archive or label your messages, and we do not request Drive, Calendar, Contacts or any other Google product.
To find replies, we look at the messages of the last few days and compare each sender and recipient with the contacts of your outreach. A message that is not part of an outreach conversation is discarded: we do not store its content, and at most its sender and the start of its subject line appear for a short time in our operational logs. For messages that are part of an outreach conversation, we store the sender, the recipients, the subject, the date and the text.
We use those conversations only to run the outreach you hired: to show them to you and your team, to stop the follow-up sequence for anyone who answered, and to classify each reply (interested, not now, out of office, asked not to be contacted). That classification may be done by a language-model provider (Anthropic) that processes the text on our behalf and may not use it for its own purposes. If you switch on the integrations, the reply is also recorded in your own CRM and announced in your own Slack workspace.
The outreach conversations are visible to the people your company authorises in its workspace and, when you hired us to run the outreach for you, to the Fullstack GTM staff assigned to your account. Nobody reads any other message in your mailbox, except with your explicit permission for a specific message, when needed for security purposes such as investigating abuse, or to comply with applicable law.
We store the authorisation token Google issues, encrypted at rest, and the address of the mailbox you connected. We never see, receive or store your Google password, and we do not keep a copy of your mailbox. Outreach conversations are kept while you are a client and deleted when you ask us to. We do not use Gmail data to serve advertisements, and we do not use it to develop, improve or train generalised artificial intelligence or machine-learning models.
This scope, when you connect an advertising account: https://www.googleapis.com/auth/adwords. It lets us read and manage the Google Ads accounts you authorise. Connecting Gmail does not grant this, and connecting Ads does not grant Gmail.
We read performance data (spend, clicks, conversions, search terms) so we can report on and improve the campaigns we run for you. And we create or change campaigns, budgets, keywords and ads in the account you connected, as part of the service you hired.
The authorisation token Google issues, encrypted at rest, plus the identifier of the advertising account you selected. We never see, receive or store your Google password. Performance data we pull is kept only as long as it is needed for reporting.
We do not sell Google user data. We do not transfer it to anyone except as needed to provide the service you asked for, to comply with law, or as part of a merger or acquisition with notice to you. We do not use it for advertising targeting, for credit decisions, or to train generalised artificial intelligence models.
Fullstack GTM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can withdraw the authorisation at any time from your Google account permissions, without asking us; from that moment we can no longer read or send from that mailbox. If you prefer, write to us and we will delete the stored token ourselves and confirm when it is gone.
We use third parties to run the service: hosting providers, email delivery, language-model providers, and the advertising and data platforms a given service depends on. Each of them receives only what their part of the job requires, and none of them is allowed to use it for their own purposes.
While you are a client, and afterwards only as long as the law requires us to keep records. Ask us to delete your data and we will, except for what we are legally obliged to retain.
You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to [email protected] and we will answer within 30 days. If you are in a jurisdiction that gives you additional rights, those rights apply.
If we change how we handle data, we update this page and move the date at the top. The address of this page stays the same, so a link to it never goes stale.