Privacy Policy

Who we are

Allia is operated by GTM Labs SL, with Spanish tax identification number (NIF/CIF) B27607845.

Our address is Avenida Bélgica 45, 2º B, 28916 Leganés, Spain.

Contact ruben@managtm.com for privacy questions or requests.

GTM Labs SL is responsible for the personal information we process for our own business purposes, including enquiries, customer relationships and service security. Where we process personal information on a client’s documented instructions, the client determines the purposes of that processing and our responsibilities are governed by the applicable data-processing agreement.

Customer information and demo bookings

We process names, business email addresses, company and workspace details, account information, communications and information submitted through Allia. This includes brand briefs, creator criteria, priority markets, program terms and recruitment instructions. We also process limited technical, security and activity logs to operate and protect the service.

Book a demo opens our booking page on Cal.com. We receive the details you submit, such as your name, email address, meeting time and answers to booking questions, to arrange the meeting and manage your enquiry. Contact details are needed for us to respond or provide the requested service.

Booking takes place on Cal.com under its Privacy Policy. Following our booking link does not submit a booking by itself.

Creator information and its sources

We collect public professional information about creators, publishers and their content from public websites, social platforms, authorised APIs and licensed data providers. Sources may include YouTube, Instagram, TikTok and other creator or publishing platforms. Clients and creators may also provide information directly during recruitment or registration.

Depending on the source, this can include names, handles, profile and channel identifiers, URLs, descriptions, public business contact details, images and thumbnails, country and language, follower counts, public engagement statistics, content titles, captions, topics, formats and dates. We also process outreach history, replies, registration status and relevant creator details returned by the client’s connected systems.

Public availability does not remove a person’s privacy rights. We use this information to assess relevance to a client’s brief and manage recruitment, subject to applicable law and source restrictions.

Connected systems and third-party platforms

When a client connects a system, Allia processes the records and permissions made available through that connection. This may include CRM contacts, affiliate registrations, recruitment status and information requested through Allia. We use it to answer authorised questions, recruit creators and update the corresponding records as part of the agreed workflow.

We do not request social-platform passwords. Private account data requires an authorised connection. Access credentials or tokens provided for an integration are used to operate that connection. Clients can manage or revoke permissions through the connected service and contact us for assistance.

Each platform’s terms and data-use, retention and deletion requirements apply to information from that platform. Allia is independent and is not endorsed by Google, YouTube, Meta, Instagram, TikTok or other connected services merely because it uses their information or integrations.

YouTube API Services

Allia uses YouTube API Services to discover creators and access public channel and video information, including identifiers, URLs, titles, descriptions, thumbnails, publication dates and available statistics. Relevant information is made available to the client researching potential partners and to service providers helping us operate Allia.

Use of Allia is also subject to the YouTube Terms of Service. Google’s handling of information is described in the Google Privacy Policy.

The YouTube developer policies require stored public API Data to be refreshed or deleted within 30 calendar days. Applicable source-specific requirements take precedence over the general retention criteria below. Our own assessments are not official YouTube classifications or endorsements; this notice does not grant permission to use API Data beyond YouTube’s policies.

If you authorise access to Google account data, you can revoke it through your Google security settings. To request access to, correction of or deletion of information held by Allia, email ruben@managtm.com with the relevant channel or profile URL. YouTube’s applicable deletion deadlines govern YouTube API Data requests. Deleting information from Allia does not delete the original content on YouTube.

How we use information

We use information to manage customer accounts, understand brand briefs, find and qualify relevant creators, organise outreach and follow-ups, support registration in affiliate programs and keep connected records updated. Allia also uses relevant information to answer customer questions and support our recurring progress discussions.

We process information to handle enquiries and support, maintain and improve service reliability, investigate errors, prevent fraud or unauthorised access, and meet legal and contractual obligations. Custom implementations may involve additional processing described in the client agreement.

Legal bases for processing

Where European data-protection law applies, we rely on performance of a contract or steps requested before entering one when processing is necessary to provide a service to the individual concerned. For business contacts acting on behalf of a company, we rely on our legitimate interest in managing that business relationship and responding to relevant enquiries.

Our legitimate interests include finding relevant professional partners for client programs, organising recruitment and protecting the service. When relying on these interests, the processing must be necessary and balanced against the person’s rights, reasonable expectations and potential impact. A public profile is not consent to every use, and outreach remains subject to applicable electronic-marketing rules.

We also process information where a legal obligation requires it, or on the basis of consent when required. Consent can be withdrawn. Where we act as a processor, the client is responsible for identifying the legal basis and giving lawful instructions for its processing.

Automated analysis and creator matching

Allia uses automated and AI-assisted analysis to compare creator information with a brand’s brief. This can produce classifications of content topics, formats, language, geographic relevance and brand suitability, together with scores or supporting explanations where available. These results help determine which creators are prioritised for outreach and may affect whether a creator is contacted about a program.

Assessments depend on the available evidence and can be incomplete, inaccurate or change over time. They are Allia’s assessments, not recommendations from the source platform. Clients remain responsible for their program terms and commercial decisions. You can contact us to question an assessment or request correction of the information it uses.

The service is designed to assess professional and content relevance, not to infer sensitive characteristics such as ethnicity, religion, political opinions, health or sexual orientation. Source-platform restrictions also apply to automated analysis and derived information.

Who we share information with

Relevant creator information and recruitment results are shared with the client running the program and its authorised connected systems. Customer workspace information is handled within the agreed service and access permissions.

We use providers for cloud and database hosting, authentication, AI processing, data enrichment and verification, email delivery, monitoring, security, scheduling and support. Professional advisers may receive information for legal or accounting purposes. Providers receive information needed for their role and are subject to applicable confidentiality and data-protection requirements.

We may disclose information where legally required or necessary to establish or defend legal claims. We do not sell personal data or offer raw social-platform data as a standalone database or feed.

Retention and removal

We retain information for the purposes described here, considering active customer relationships, the relevance of creator records, contractual requirements, legal obligations and potential claims. Booking and enquiry details are kept as needed to manage the enquiry and any resulting relationship. Technical and security records are retained according to operational and security needs.

Social-platform data, including related assessments where applicable, is subject to that platform’s refresh and deletion rules. These can require earlier updates or removal than our general criteria. Source information that is deleted or changes is subject to the same requirements.

Creators can ask to stop outreach using the opt-out method in our messages or by emailing ruben@managtm.com. We retain only the suppression information needed to honour that request, where permitted by law and the source platform’s requirements.

Cookies and technical information

We do not currently use advertising pixels or analytics cookies to profile visitors to the marketing website. The service and its authentication providers may use necessary cookies or similar storage for account sessions, security and essential functionality. Hosting and monitoring services also process limited technical information to operate the site and investigate errors.

External services you choose to visit, including Cal.com, have their own privacy and cookie practices. If we introduce non-essential cookies or tracking that require consent, we will provide the relevant information and request consent before using them.

Security and international processing

We use technical and organisational measures appropriate to the information and risks involved, including authentication, access restrictions and security monitoring. No online service can guarantee absolute security.

Some providers may process information outside Spain or the European Economic Area. Where an international transfer requires safeguards, these must include an applicable adequacy decision or another lawful mechanism, such as Standard Contractual Clauses with any additional measures required. Contact us for information about the safeguards applicable to your data or to request a copy.

Your rights and how to exercise them

Depending on the applicable law, you may request access, correction, deletion, restriction of processing or data portability. You may object to processing based on legitimate interests and to the use of your information for direct marketing. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send requests to ruben@managtm.com. For creator records, include the relevant profile, channel or account URL so we can locate the information. We may request proportionate information to verify your identity or authority. Where a client controls the data, we will help direct the request to that client or assist it as required.

Under the GDPR, we normally respond within one month. If a permitted extension is necessary, we will explain why within that period. Any shorter applicable platform deadline still applies. Removing information from Allia does not change the original record on another platform.

You can lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority where you live, work or believe an infringement occurred.

Children and policy updates

Allia is a business service and is not intended for children to create customer accounts. Contact us if you believe we hold a child’s personal information inappropriately so we can review the record and the request.

We may update this policy when our service, data practices or legal obligations change. The current version is published on this page with its revision date. We will provide additional notice or seek consent where required for a material change in how information is used.