Privacy Policy

1. Introduction

Great Gateway LLC ("Great Gateway," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at greatgateway.io (the "Website") and use our services. This policy applies to all information collected through our Website and any related services, communications, or interactions.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Website.

2. Information We Collect

2.1 Personal Information You Provide

When you voluntarily submit information through our contact form or other interactions, we may collect:

• Name (first and last)
• Email address
• Phone number
• Website URL
• Message content (your inquiry or communication)
• Referral source ("How did you hear about us" response)

2.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies and tracking technologies, including:

• Browser type and version
• Operating system
• IP address
• Device type and screen resolution
• Pages visited and time spent on each page
• Referring URL (the website that directed you to our site)
• Click behavior and navigation patterns
• Date and time of visits
• Geographic location (derived from IP address)
• HubSpot tracking data, including session information, page views, form interactions, and visitor activity logs

2.3 Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies to collect and store information. See Section 6 for detailed information about the cookies we use.

3. How We Collect Information

3.1 Contact Form Submissions

When you fill out and submit our contact form, the information you provide (name, email, phone, website URL, message, and referral source) is transmitted directly to our Customer Relationship Management (CRM) platform, HubSpot. A contact record is created in our HubSpot portal upon form submission.

3.2 HubSpot Tracking Script

Our Website includes the HubSpot tracking code on all pages. This script places cookies on your browser and collects behavioral and analytics data about your visit. If you later submit our contact form, HubSpot may associate your previously collected browsing data with your contact record.

3.3 Third-Party CDN Requests

Our Website loads resources from third-party Content Delivery Networks (CDNs), including Google Fonts and Font Awesome. When your browser requests these resources, the CDN providers may receive your IP address and standard HTTP request headers.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to inquiries: To reply to your questions, requests, or communications submitted through our contact form
• CRM management: To create and maintain contact records in HubSpot for relationship management and communication tracking
• Service delivery: To provide AI consulting services to clients who engage us
• Marketing communications: To send relevant information about our services, with your consent where required by law
• Website analytics: To understand how visitors interact with our Website, identify trends, and improve the user experience
• Website optimization: To monitor and improve the performance, functionality, and content of our Website
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Business operations: To manage our business, including recordkeeping, reporting, and internal analysis

5. HubSpot Disclosure

We use HubSpot (HubSpot, Inc.) as our CRM and marketing automation platform. HubSpot is a third-party service provider that processes data on our behalf. Our HubSpot Portal ID is 245460849.

Data That Flows to HubSpot

The following data is transmitted to and stored in HubSpot:

• All personal information submitted through our contact form (name, email, phone, website URL, message, referral source)
• Website visitor tracking data, including pages visited, time on site, session duration, and navigation paths
• Cookie identifiers that allow HubSpot to associate browsing behavior with contact records
• IP address and geographic location data
• Form submission timestamps and metadata

How HubSpot Processes Data

HubSpot processes this data to:

• Create and maintain contact records in our CRM
• Track visitor interactions with our Website
• Enable us to follow up on inquiries
• Provide analytics about Website traffic and visitor behavior
• Facilitate email communications

HubSpot's own privacy practices are governed by the HubSpot Privacy Policy. HubSpot participates in the EU-U.S. Data Privacy Framework and maintains SOC 2 Type II certification.

6. Cookies and Tracking Technologies

6.1 HubSpot Cookies

Our Website uses the following HubSpot cookies:

6.2 Google Fonts

Our Website loads the Syne and DM Sans typefaces from Google Fonts CDN (fonts.googleapis.com and fonts.gstatic.com). When your browser requests these font files, Google may receive:

• Your IP address
• The referring page URL
• Browser user-agent string

Google's use of this data is governed by the Google Privacy Policy. Google Fonts does not set cookies, but the CDN request transmits the above data.

6.3 Font Awesome CDN

Our Website loads icons from the Font Awesome CDN (cdnjs.cloudflare.com or kit.fontawesome.com). When your browser requests these resources, the CDN provider may receive:

• Your IP address
• The referring page URL
• Browser user-agent string

6.4 PostHog Analytics

Our Website uses PostHog (PostHog, Inc.) for product analytics and user behavior tracking. PostHog collects data about how visitors interact with our Website, including pages visited, clicks, and session information. PostHog may set the following cookies:

PostHog's privacy practices are governed by the PostHog Privacy Policy. Data is sent to PostHog's US cloud infrastructure (us.i.posthog.com).

6.5 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically:

• View cookies currently stored on your device
• Delete cookies individually or in bulk
• Block cookies from specific sites or all sites
• Set preferences for first-party vs. third-party cookies

Please note that disabling cookies may affect the functionality of our Website. For information on how to manage cookies in your specific browser, visit your browser's help documentation.

To opt out of HubSpot tracking specifically, you can use HubSpot's cookie consent mechanisms if presented, or block cookies from the domain hubspot.com and hs-analytics.net in your browser settings.

7. Third-Party Services

We use the following third-party services in connection with our Website:

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. Our third-party service providers are contractually obligated to use your information only as necessary to provide their services to us.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form submissions: Retained in our HubSpot CRM indefinitely or until you request deletion
• HubSpot tracking data: Retained according to HubSpot's standard retention policies (typically up to 7 years for contact activity data)
• Website analytics data: Retained for up to 36 months for trend analysis
• Communication records: Retained for as long as the business relationship exists, plus a reasonable period thereafter for legal and compliance purposes

When personal information is no longer needed, we will securely delete or anonymize it.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

9.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

9.3 Right to Deletion

You have the right to request that we delete your personal information. Upon receiving a verified deletion request, we will delete your personal data from our systems, including your HubSpot contact record, within 30 days, unless we are required to retain it by law.

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

9.5 Right to Data Portability

You have the right to request that we provide your personal information in a structured, commonly used, and machine-readable format.

9.6 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can do this by:

• Clicking the "unsubscribe" link in any marketing email we send
• Contacting us at the email address below
• Replying "STOP" to any marketing text message

9.7 Right to Withdraw Consent

Where we process your personal information based on consent, you have the right to withdraw that consent at any time.

10. How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: Gregory@greatgateway.io

Please include the following in your request:

• Your full name and email address (so we can locate your records)
• A description of the right you wish to exercise
• Any additional information that may help us verify your identity

We will respond to your request within 30 days. If we need additional time, we will notify you of the extension and the reason for the delay.

We will not discriminate against you for exercising any of your privacy rights.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:

• Encryption: Data transmitted to and from our Website is encrypted using TLS/SSL (HTTPS)
• Access controls: Access to personal information is restricted to authorized personnel on a need-to-know basis
• Secure hosting: Our Website is hosted on Vercel, which maintains industry-standard security certifications
• Third-party security: Our primary data processor, HubSpot, maintains SOC 2 Type II certification and implements comprehensive security measures
• Regular review: We periodically review our security practices and update them as necessary

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to implementing and maintaining reasonable security measures.

12. Children's Privacy

Our Website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at Gregory@greatgateway.io. If we become aware that we have collected personal information from a child under 16, we will take immediate steps to delete that information from our systems.

13. California Residents -- CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

13.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.

13.2 Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.

13.3 Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

13.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes. If this practice changes in the future, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link on our Website.

13.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights.

13.6 Categories of Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

13.7 How to Submit a Request

To exercise your CCPA/CPRA rights, contact us at Gregory@greatgateway.io. We will verify your identity before processing your request.

14. International Data Transfers

Great Gateway LLC is based in the United States. If you access our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central database are operated.

By using our Website, you consent to the transfer of your information to the United States. We will take reasonable steps to ensure that your information is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we rely on the following legal bases for processing your personal information:

• Consent: Where you have given us consent to process your data (e.g., submitting the contact form)
• Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., analytics, Website improvement), provided these interests are not overridden by your rights
• Legal obligation: Where processing is necessary to comply with applicable law

Our third-party service providers, including HubSpot and Vercel, participate in recognized data transfer mechanisms and maintain appropriate safeguards for international data transfers.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our Website
• For material changes, we may notify you via email (if we have your contact information) or through a prominent notice on our Website

Your continued use of our Website after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Great Gateway LLC
Attn: Gregory Gorin, CEO

Email: Gregory@greatgateway.io
Website: greatgateway.io

This Privacy Policy is effective as of March 9, 2026.