Privacy Policy

Lightbulb GTM LLC (“Lightbulb,” “we,” “us,” or “our”) operates lightbulb.com, the GTM Vendor Audit, and related services, reports, forms, communications, and consulting offerings (collectively, the “Services”).

This Privacy Policy explains how we collect, use, store, disclose, and delete information when you use the Services, including when you submit contracts, invoices, and related records for a vendor audit, or connect a CRM or other third-party system.

By using the Services, submitting materials for an audit, or connecting a third-party system through the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

Information you provide

We may collect information you provide directly to us, including your name, email address, company name, company website, job title, phone number, team size, estimated tool spend, meeting details, messages, and any other information you submit through forms, email, scheduling links, or other communications.

Audit materials

If you engage us for a vendor audit, you may submit business records for analysis. These may include vendor contracts, order forms, quotes, amendments, and renewal or notice terms; invoices, billing statements, and purchase records; seat, license, and provisioning exports; product usage and utilization reports; vendor, reseller, and vendor-contact information; pricing, tier, and discount terms; and other documents or exports you choose to send us for the audit. These materials may contain personal information about your personnel, such as names, business email addresses, and license assignment or login activity.

Connected systems

If you connect a CRM or other third-party system to the Services, we may access and process information made available through that connection and the permissions you grant. Depending on the connected system, this may include organization metadata, object and field metadata, and structured business records and related activity needed to produce the requested deliverable, including data from objects such as Leads, Contacts, Accounts, Opportunities, Campaign Members, Opportunity Contact Roles, Tasks, Events, and related history, mapping, completeness, and configuration data.

Technical information

We may also automatically collect limited technical information when you use the Services, such as IP address, browser type, device information, timestamps, referring pages, and basic request or system logs. See Section 12 for cookies and advertising measurement.

2. How We Use Information

We may use collected information to:

• provide, operate, maintain, and improve the Services;
• analyze your software spend, contracts, seat allocation, and utilization;
• identify renewal dates, auto-renewal terms, and notice windows, and assemble your renewal calendar;
• produce per-vendor recommendations, such as whether to keep, renegotiate, consolidate, or replace a tool;
• prepare negotiation guidance, benchmarks, and supporting analysis;
• calculate and document findings of recoverable spend, including for purposes of the audit guarantee;
• authenticate users and support authorized integrations;
• deliver reports and deliverables, schedule and conduct calls, respond to inquiries, and provide support;
• troubleshoot technical issues and monitor system performance;
• protect the security and integrity of the Services; and
• comply with legal obligations, maintain business and billing records, and enforce our terms.

We do not sell your audit materials or connected system data, and we do not use them for advertising or for any purpose outside of producing, delivering, supporting, and securing the Services you requested.

3. AI Processing

Some parts of the Services may use third-party AI tools or models, including Claude models, to help interpret, classify, analyze, or summarize information needed to produce your deliverables, such as contract and invoice terms, field and object metadata, seat and utilization data, and related summaries.

Where AI tools are used, we send only the inputs reasonably necessary for the analysis.

We use third-party AI tools only as part of providing the Services described in this Privacy Policy.

4. What We Store and Retain

Audit source materials

Contracts, invoices, seat and license exports, and other source records you submit for an audit are deleted from our active systems within 30 days after we deliver your audit, unless you and Lightbulb continue working together, you ask us to retain them, or applicable law requires us to keep them longer.

Deliverables and business records

We may retain the deliverables we produce for you (such as your renewal calendar, verdicts, and negotiation playbook), limited supporting metadata, and ordinary business records such as engagement, invoicing, tax, and support records, for as long as reasonably necessary for our legitimate business purposes and legal obligations.

Connected system data

We do not retain data from connected systems longer than reasonably necessary for the purposes described in this Privacy Policy.

Stopping use of the Services, or disconnecting a third-party system, does not by itself delete deliverables or business records we have already retained. You can ask us to delete them as described in Section 7. Deleted data may persist for a limited period in routine backups before being overwritten.

5. How We Share Information

We may share information in the following circumstances:

Service providers

We may share information with vendors and service providers that help us operate the Services, including providers for hosting, infrastructure, databases, file storage, analytics, email and communications, scheduling, payments, and AI processing. These providers are permitted to process information only to provide services to us.

At your direction

We may process or disclose information when you instruct us to do so, including when you submit audit materials, connect a system, request a deliverable, or request follow-up.

Advertising measurement

Subject to your choices in Section 12, we share limited website activity with Meta to measure our advertising. We do not share your audit materials or connected system data with advertising platforms.

Legal and security reasons

We may disclose information if we believe doing so is reasonably necessary to comply with applicable law, respond to lawful requests, protect rights or safety, investigate misconduct, or prevent fraud, abuse, or security issues.

Business transactions

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

6. Third-Party Platforms and Authorized Connections

The Services may allow you to connect third-party platforms such as Salesforce or other CRM, GTM, or data systems, and involve records created with third-party vendors.

By connecting a third-party system or submitting materials for an audit, you represent that you are authorized to do so, and to permit Lightbulb to process that information for the purposes described in this Privacy Policy. If your agreements with a vendor restrict disclosure of contract terms, you are responsible for confirming you may share those materials with us.

We are not responsible for:

• a user's lack of authority to connect a third-party account or system, or to share materials;
• the privacy, security, availability, or practices of third-party platforms; or
• the terms, policies, or acts of third-party providers.

Third-party platforms are governed by their own terms and privacy policies.

7. Your Choices, Access, and Deletion Requests

You may request access to, correction of, or deletion of personal information and audit data we retain about you or your organization, and you may withdraw a prior instruction to retain materials. To make a request, email:

jorge@lightbulb.com

Please provide enough information for us to identify the relevant records and verify the request. Depending on where you live, you may have additional rights under applicable privacy law, including rights to opt out of targeted advertising; see Section 12 for advertising choices, which you can change at any time.

Subject to applicable law, legal obligations, security requirements, fraud prevention needs, and technical limitations such as backups, we will use commercially reasonable efforts to delete retained data from our active systems, and we will not discriminate against you for exercising these rights.

8. Data Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect the information we process through the Services, including encryption in transit and at rest with our infrastructure providers.

Human access to audit materials is limited to the Lightbulb personnel performing your audit. Our infrastructure and AI providers process information on our behalf as described in Sections 3 and 5.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Services are intended for business and professional use and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. International Users

If you access the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version on this page and update the Last Updated date above. Your continued use of the Services after an updated Privacy Policy becomes effective means the updated Privacy Policy applies to your use of the Services.

12. Cookies and Advertising

We use cookies and similar technologies to operate the site and to measure the performance of our advertising. We use the Meta Pixel and Meta's Conversions API to understand how visitors reach us from our ads and which pages lead to a booked call. This may involve sharing limited information with Meta, such as pages visited, actions taken (for example, booking a call), IP address, browser information, and, where you provide it, a hashed version of your email address. We do not share audit materials or connected system data with Meta.

If you are visiting from the United States, advertising measurement is on by default and you can opt out at any time. If you are visiting from outside the United States, nothing loads for advertising measurement unless you accept it in the banner shown on your first visit. Either way, your choice applies to both the Meta Pixel in your browser and the information we send from our servers through the Conversions API.

To change your choice at any time, use Privacy Choices here or in the footer of any page. We also honor the Global Privacy Control browser signal as an opt-out, and when your browser sends that signal we do not load the pixel or send Conversions API events. You can learn more about how Meta uses this information, and manage your ad preferences, at facebook.com/ads/preferences.

Declining or opting out does not affect your use of the site, and we do not use advertising cookies to build profiles about you beyond measuring our own campaigns.

13. Contact Us

If you have any questions about this Privacy Policy or would like to make a privacy request, contact:

Jorge Cianca, Lightbulb GTM LLC

jorge@lightbulb.com