Last updated: July 22, 2026
137 GTM Agent (“the Service”) is operated by MicroAnalytics, based in Bucharest & Brasov, Romania. We provide AI-powered automation for Google Tag Manager: installing tracking, auditing containers, and configuring consent — through a chat interface. For anything in this policy, contact us at hello@137.is.
Account information. Your name and email address, provided when you sign up with Google or with an email and password. Passwords are stored as salted hashes; we never see them in plain text.
Google Tag Manager data. When you connect your Google account, we access the GTM containers you choose to manage: their configuration (tags, triggers, variables, versions) and account metadata. See the dedicated Google section below.
Chat and task history. The messages you exchange with the agent and the results of operations it performs, so you can review what was done and why.
Billing information. Payments are processed by Stripe. We store your plan, subscription status, and invoice history — never your card number.
Usage data. Counts of operations performed against your plan limits, and standard technical logs (IP address, browser type) for security and rate limiting.
We request the minimum Google OAuth scopes the Service needs to work:
openid, email, profile) — to create and authenticate your account.tagmanager.readonly) — to list your accounts and containers and to run audits.tagmanager.edit.containers) — to create and update tags, triggers, and variables when you ask the agent to.tagmanager.manage.users) — to read and manage container permissions when you explicitly request it.Your Google refresh token is encrypted at rest with AES-256-GCM. You can disconnect Google at any time from Settings, or revoke access from your Google Account permissions page; either action invalidates our access.
137 GTM Agent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain terms: we use Google user data only to provide the features you see in the product. We do not sell it, we do not use it for advertising, we do not use it to train generalized AI models, and no human reads it except with your consent, for security purposes, or where the law requires.
The agent is powered by Anthropic's Claude models. To answer your requests, your chat messages and relevant container configuration are sent to the Anthropic API. Under Anthropic's commercial terms, API data is not used to train their models.
We share data only with the processors needed to run the Service:
Some providers process data in the United States. Where they do, transfers are covered by Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Account data, chat history, and task history are kept while your account is active. Google tokens are deleted when you disconnect Google or delete your account. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep records (e.g. invoices) to meet legal obligations.
The app uses essential cookies only: your session cookie and CSRF protection. We do not set third-party advertising cookies.
Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a portable copy, or object to or restrict processing. Email hello@137.is and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority — in Romania, ANSPDCP (dataprotection.ro).
If we make material changes, we will update this page and note the new date at the top. Significant changes affecting how we handle Google user data will be announced by email.