Snapshot 33993
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Statement
This Privacy Statement describes how Bullseye collects, uses, and protects information in connection with our website and our person-level website visitor identification services.
ChatGPT App Privacy AddendumDownload as PDF
On this page
1. Introduction
Bullseye ("we", "us", or "our") is committed to protecting your privacy. This Privacy Statement explains how we collect, use, disclose, and safeguard information when you use our website and services, including our person-level website visitor identification platform (the "Services").
We process information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using our Services, you agree to the practices described in this Privacy Statement.
If you connect the Bullseye app inside ChatGPT, the ChatGPT App Privacy Addendum is part of this Privacy Statement. Reviewers and users can read it at this URL before installing the app.
2. Information We Collect
We collect information that you provide directly to us, and information that we obtain when our Services are used by our customers on their websites.
Information you provide
When you sign up for an account, contact us, or use our Services, we may collect your name, email address, company name, job title, and other contact or profile information you choose to provide.
Website visitor information (B2B context)
Our Services help our customers identify visitors to their websites at a person level. In that context, we may process information about visits to our customers' sites (such as pages viewed, referrer information, and device/browser data) and match it to business contact information to support sales and marketing use cases. We focus on business contact data and U.S. web traffic and do not sell personal information for advertising purposes.
Cookies and similar technologies
We and our customers may use cookies, pixels, and similar technologies to operate our Services, analyze usage, and improve performance. You can control cookies through your browser settings and, where applicable, through opt-out mechanisms we provide.
3. How We Use Information
We use the information we collect to provide, maintain, and improve our Services; to process transactions and communicate with you; to comply with legal obligations; and to protect our rights and the rights of others.
When we process data on behalf of our customers (e.g., visitor identification on their sites), we do so in accordance with their instructions and our Data Processing Addendum where applicable.
4. Sharing and Disclosure
We may share information with service providers who assist us in operating our business (such as hosting, analytics, and payment processors). We require these providers to protect your information and use it only for the purposes we specify. A list of our sub-processors is available in our Data Processing Addendum.
We may also disclose information where required by law, to protect our rights or safety, or in connection with a merger, sale, or other transfer of assets, subject to applicable confidentiality obligations.
5. Data Retention
We retain information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Statement, and comply with legal obligations. When we process data on behalf of customers, retention is determined by our agreement with them and applicable law.
6. Security
We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular review of our security practices.
7. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, to data portability, and to object to or withdraw consent from certain processing. You may also have the right to lodge a complaint with a supervisory authority.
Opt-out: If you do not wish to be identified as a visitor on websites that use our Services, you may opt out via our opt-out form: Opt-out request form.
To exercise other rights or for questions about our processing, please contact us using the details in the Contact section below.
8. International Transfers
Our systems and data are primarily stored in the United States. If you are located outside the U.S., your information may be transferred to and processed in the U.S. or other countries. Where required by law, we use appropriate safeguards (such as standard contractual clauses) for such transfers.
9. Children
Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.
10. Changes to This Privacy Statement
We may update this Privacy Statement from time to time. We will post the updated version on this page and, where appropriate, notify you by email or through our Services. Your continued use of our Services after changes constitutes acceptance of the updated statement.
11. Contact Us
For questions about this Privacy Statement or our privacy practices, please contact us at [email protected].
12. ChatGPT App Privacy Addendum
This addendum is part of the Bullseye Privacy Statement. It applies when you connect or use the Bullseye app inside ChatGPT (the "ChatGPT App"). If this addendum and the rest of the Privacy Statement conflict for the ChatGPT App, this addendum controls.
The current version is published at https://www.bullseye.so/legal/privacy#chatgpt-app.
Last updated: October 1, 2026.
What the ChatGPT App does
The ChatGPT App lets a Bullseye customer who chooses to connect their account ask ChatGPT about records already in that customer's Bullseye workspace, and receive the answer in that chat. Connecting is optional. The app runs only when you invoke it.
The ChatGPT App is not the Bullseye website pixel, and it is not ChatGPT Ads audience export. It does not identify people who are using ChatGPT. It does not read, reconstruct, or store your ChatGPT conversation. It sees only the arguments of the specific tool call ChatGPT sends for the request you made.
Categories of personal data collected
Account connection
When you connect the ChatGPT App, we receive:
Your name, email address, and organization name on the Bullseye account
Your Bullseye user id and organization id
OAuth access and refresh tokens that authorize the connection
We do not ask you to paste passwords, API keys, multi-factor codes, or other secrets into the chat. Tool results never include those secrets.
Tool-call arguments
On each request, we receive only the arguments for that call. Examples are a search string, a contact id, a list id, or a filter you asked for. We do not receive your full ChatGPT transcript, and we do not pull it from OpenAI or from your client.
Records returned to the chat
When you ask, we may return records your connected Bullseye account is already allowed to see, and only the fields the request needs:
Person name
Work email address
Phone number
Job title
Company name and company domain
Professional profile URL
Website visit context already stored on that account: page URL, referrer, and visit time
List name, and whether a person is on that list
Workspace identifiers required to complete the request (account id, contact id, list id)
We do not collect or return payment card data, bank account numbers, government identifiers (including Social Security numbers), health information, precise location, IP address, or device identifiers through the ChatGPT App. We do not request raw location (city or coordinates) as an input.
Purposes of use
We use the data above only to:
Authenticate the connection and check that the account may see the records requested
Answer the request you made in ChatGPT by reading those records and returning them to that conversation
Protect the service (abuse prevention and debugging of failed calls)
Comply with law
We do not use ChatGPT App activity to train models. We do not sell personal information. We do not use the app to profile ChatGPT users or to track people inside ChatGPT. We do not use prompts or tool results for advertising.
Categories of recipients
You, inside the ChatGPT conversation where you invoked the app.
OpenAI, because tool results are returned to ChatGPT. OpenAI handles that conversation under its own terms. Bullseye and OpenAI are separate, independent controllers of their own services. Neither party processes personal data on behalf of the other.
Infrastructure sub-processors that already host Bullseye account data, listed in our Data Processing Addendum. They process that data only to run Bullseye.
Authorities, when the law requires us to disclose information.
The ChatGPT App does not send workspace data to Meta, Google, a CRM, Slack, email, or SMS. Those are separate Bullseye products. This app does not invoke them.
Workspace records the app reads (visitor and contact data stored for a customer) stay subject to that customer's agreement with Bullseye and the Data Processing Addendum. Connecting the app and asking a question is the customer's instruction to return those records into that chat.
Data retention
Workspace records (contacts, visitors, lists) stay under the retention rules in this Privacy Statement and your agreement with Bullseye. The ChatGPT App does not make a second copy of those records.
OAuth tokens are kept only while the app stays connected. Disconnecting the app in ChatGPT deletes the stored connection credentials. Closing the Bullseye account does the same. Access stops as soon as the connection is removed.
Tool arguments and returned contact or visitor records are not stored as a transcript. We do not keep the chat.
Security logs record the tool name, the time, the Bullseye account id, and whether the call succeeded. They do not include the contact or visitor records returned to ChatGPT. We keep these logs for 30 days, then delete them, unless we must keep a specific record longer to investigate abuse or to meet a legal obligation.
Controls
You can read this addendum before you connect. ChatGPT shows this privacy policy when you install the app.
You can decline to connect. Bullseye works without the ChatGPT App.
You can disconnect the app in ChatGPT at any time. We delete the stored connection credentials, and the app loses access immediately.
If you do not want to be identified as a visitor on websites that use Bullseye, use the opt-out request form in section 7 of this Privacy Statement.
To access, correct, or delete personal information, or to ask about this addendum, email [email protected].
Changes
We will update this addendum, and the date above, before the ChatGPT App collects or returns a new category of personal data. The live copy is always at https://www.bullseye.so/legal/privacy#chatgpt-app.
Last updated: October 1, 2026
↑ Back to top