This Privacy Statement describes how Bullseye collects, uses, and protects information in connection with our website and our person-level website visitor identification services.
Bullseye ("we", "us", or "our") is committed to protecting your privacy. This Privacy Statement explains how we collect, use, disclose, and safeguard information when you use our website and services, including our person-level website visitor identification platform (the "Services").
We process information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using our Services, you agree to the practices described in this Privacy Statement.
If you connect the Bullseye app inside ChatGPT, the ChatGPT App Privacy Addendum is part of this Privacy Statement. Reviewers and users can read it at this URL before installing the app.
We collect information that you provide directly to us, and information that we obtain when our Services are used by our customers on their websites.
When you sign up for an account, contact us, or use our Services, we may collect your name, email address, company name, job title, and other contact or profile information you choose to provide.
Our Services help our customers identify visitors to their websites at a person level. In that context, we may process information about visits to our customers' sites (such as pages viewed, referrer information, and device/browser data) and match it to business contact information to support sales and marketing use cases. We focus on business contact data and U.S. web traffic and do not sell personal information for advertising purposes.
We and our customers may use cookies, pixels, and similar technologies to operate our Services, analyze usage, and improve performance. You can control cookies through your browser settings and, where applicable, through opt-out mechanisms we provide.
We use the information we collect to provide, maintain, and improve our Services; to process transactions and communicate with you; to comply with legal obligations; and to protect our rights and the rights of others.
When we process data on behalf of our customers (e.g., visitor identification on their sites), we do so in accordance with their instructions and our Data Processing Addendum where applicable.
We retain information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Statement, and comply with legal obligations. When we process data on behalf of customers, retention is determined by our agreement with them and applicable law.
We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular review of our security practices.
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, to data portability, and to object to or withdraw consent from certain processing. You may also have the right to lodge a complaint with a supervisory authority.
Opt-out: If you do not wish to be identified as a visitor on websites that use our Services, you may opt out via our opt-out form: Opt-out request form.
To exercise other rights or for questions about our processing, please contact us using the details in the Contact section below.
Our systems and data are primarily stored in the United States. If you are located outside the U.S., your information may be transferred to and processed in the U.S. or other countries. Where required by law, we use appropriate safeguards (such as standard contractual clauses) for such transfers.
Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.
We may update this Privacy Statement from time to time. We will post the updated version on this page and, where appropriate, notify you by email or through our Services. Your continued use of our Services after changes constitutes acceptance of the updated statement.
For questions about this Privacy Statement or our privacy practices, please contact us at support@bullseye.so.
This addendum is part of the Bullseye Privacy Statement. It applies when you connect or use the Bullseye app inside ChatGPT (the "ChatGPT App"). If this addendum and the rest of the Privacy Statement conflict for the ChatGPT App, this addendum controls.
The current version is published at https://www.bullseye.so/legal/privacy#chatgpt-app.
Last updated: October 1, 2026.
The ChatGPT App lets a Bullseye customer who chooses to connect their account ask ChatGPT about records already in that customer's Bullseye workspace, and receive the answer in that chat. Connecting is optional. The app runs only when you invoke it.
The ChatGPT App is not the Bullseye website pixel, and it is not ChatGPT Ads audience export. It does not identify people who are using ChatGPT. It does not read, reconstruct, or store your ChatGPT conversation. It sees only the arguments of the specific tool call ChatGPT sends for the request you made.
When you connect the ChatGPT App, we receive:
We do not ask you to paste passwords, API keys, multi-factor codes, or other secrets into the chat. Tool results never include those secrets.
On each request, we receive only the arguments for that call. Examples are a search string, a contact id, a list id, or a filter you asked for. We do not receive your full ChatGPT transcript, and we do not pull it from OpenAI or from your client.
When you ask, we may return records your connected Bullseye account is already allowed to see, and only the fields the request needs:
We do not collect or return payment card data, bank account numbers, government identifiers (including Social Security numbers), health information, precise location, IP address, or device identifiers through the ChatGPT App. We do not request raw location (city or coordinates) as an input.
We use the data above only to:
We do not use ChatGPT App activity to train models. We do not sell personal information. We do not use the app to profile ChatGPT users or to track people inside ChatGPT. We do not use prompts or tool results for advertising.
The ChatGPT App does not send workspace data to Meta, Google, a CRM, Slack, email, or SMS. Those are separate Bullseye products. This app does not invoke them.
Workspace records the app reads (visitor and contact data stored for a customer) stay subject to that customer's agreement with Bullseye and the Data Processing Addendum. Connecting the app and asking a question is the customer's instruction to return those records into that chat.
We will update this addendum, and the date above, before the ChatGPT App collects or returns a new category of personal data. The live copy is always at https://www.bullseye.so/legal/privacy#chatgpt-app.
Last updated: October 8, 2026
