Privacy Policy

This Privacy Policy explains how Blissity LLC (“Blissity,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information in connection with GTMfusion, our B2B go-to-market (GTM) software platform, together with our websites and related services (collectively, the “Service”). GTMfusion is a product of Blissity LLC.

This Policy applies to (a) the people who create accounts and use the Service (“Users”), and (b) third-party business-professional contacts whose information may appear in the Service’s Lead Radar feature (“Contacts”). If you are a Contact, please also see “If you’re a contact in our system.”

If you do not agree with this Policy, please do not use the Service.

Account data

When you register, we collect your name, email address, and a hashed password. Authentication is handled via better-auth; we store a hashed password, never your plaintext password.

Connected mailbox (Outbound)

If you connect a Google Workspace or Microsoft 365 mailbox to use the Outbound feature, we access it through our email infrastructure provider, Nylas, and only in two ways. Sending: we send the emails you write and approve in the Service from your own address, including follow-ups you approve, using the Gmail “send email on your behalf” permission (gmail.send) or the equivalent Microsoft permission. Nothing is sent without your action. Reading: we read only the email threads you started from the Service, to detect whether the recipient replied and to show you that reply, using the Gmail read permission (gmail.readonly) or its Microsoft equivalent. We do not read, search, index, or store your other messages. We store the emails you send through the Service, the replies received in those threads, and the connection reference needed to act on your behalf, encrypted at rest. Reply text may be processed by our AI sub-processors solely to summarize and classify it for you. You can disconnect a mailbox at any time from the Outbound page, which revokes our access; you can also revoke it in your Google Account or Microsoft account security settings.

Google user data.GTMfusion’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the user-facing Outbound features described above; we do not sell it, do not use it for advertising, do not transfer it to third parties except to provide the feature (Nylas, as our processor) or as required by law, and no person at Blissity reads it except with your explicit permission for support, for security purposes, or to comply with law.

Company and GTM profile inputs

We collect the company, product, audience, and go-to-market information you enter into the Service (for example, your ideal customer profile, positioning, channels, and related inputs) so we can generate outputs for you.

AI-generated content

We store the content the Service generates for you (such as channel maps, audits, drafts, and recommendations) so it is available in your account.

Lead Radar: third-party contact data

Our Lead Radar feature collects and compiles business-professional contact information about third-party individuals, which may include name, job title, business email address, and LinkedIn profile. This information is gathered from publicly available sources and through our enrichment provider, Hunter.io. We collect only business-context professional data and use it to help Users identify and reach relevant business contacts.

Lawful basis (EEA/UK).Where the GDPR or UK GDPR applies, we process Contact data on the basis of our and our Users’ legitimate interests in B2B prospecting, relationship-building, and business development (Article 6(1)(f)). We limit collection to business-professional information, and you may object to this processing at any time as described in “Your rights” and “If you’re a contact in our system.”

Integration credentials

If you connect integrations, we store the credentials you provide, such as a HubSpot private-app token and a Slack webhook URL. These credentials are encrypted at rest.

Payment information

Payments are processed by Stripe. We do not collect or store full payment card numbers. Stripe processes your payment details under its own terms and privacy policy, and we receive limited billing information (such as subscription status and the last four digits or card brand) needed to manage your account.

Usage and analytics data

We collect information about how you interact with the Service, along with technical data such as IP address, device and browser information, and log data, to operate, secure, and improve the Service.

We use personal information to:

• Provide, operate, maintain, and secure the Service;
• Create and manage your account and authenticate you (via better-auth);
• Generate the GTM outputs, audits, and contact intelligence you request, including processing your inputs through AI providers;
• Power Lead Radar, including compiling and enriching business-professional contact data;
• Process payments, manage subscriptions and trials, and send related billing communications;
• Communicate with you about the Service, including service, security, and transactional messages;
• Monitor usage, prevent fraud and abuse, debug, and improve and develop the Service;
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We share personal information with service providers (“sub-processors”) who process it on our behalf to provide the Service, under contracts that require appropriate confidentiality and security protections. Our sub-processors include:

• Vercel: application hosting and content delivery;
• Neon: database hosting;
• Stripe: payment processing;
• Resend: transactional email delivery;
• Hunter.io, Prospeo, Tomba, and Apollo: business-contact enrichment for Lead Radar;
• Nylas: email infrastructure for connected mailboxes (sending the emails you approve, and reading replies in threads started from the Service);
• Anthropic, OpenAI, Google, and Perplexity: AI processing of inputs to generate outputs;
• Firecrawl: web content retrieval;
• Inngest: background job and workflow processing.

We may also disclose information (a) to comply with law, regulation, legal process, or governmental request; (b) to enforce our terms or protect the rights, property, or safety of Blissity, our users, or others; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect personal information consistent with this Policy.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we delete or anonymize it. Contact data in Lead Radar is retained while it remains relevant for B2B outreach and is deleted upon a valid deletion request or when no longer needed for that purpose.

We use technical and organizational measures designed to protect personal information. Integration credentials (such as your HubSpot token and Slack webhook) and other sensitive secrets are encrypted at rest, passwords are stored hashed, and data is transmitted over encrypted connections. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

We are based in the United States, and our sub-processors may process personal information in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. By using the Service, you understand that your information may be processed in countries with data-protection laws different from those of your country.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you;
• Correct: request that we correct inaccurate or incomplete information;
• Delete: request that we delete your personal information;
• Export / portability: request your information in a portable format;
• Opt out / object / restrict: object to or restrict certain processing, including processing based on legitimate interests, and opt out of non-essential communications.

EEA/UK (GDPR). You may exercise the rights above, and you have the right to lodge a complaint with your local supervisory authority. Where processing is based on consent, you may withdraw it at any time.

California (CCPA/CPRA). You have the right to know what personal information we collect, use, and disclose; to request deletion and correction; and to non-discrimination for exercising your rights. We do not sellpersonal information and do not “share” it for cross-context behavioral advertising as those terms are defined under the CPRA.

To exercise any of these rights, email us at privacy@blissity.com. We will verify and respond to your request as required by applicable law. You may use an authorized agent to submit a request on your behalf.

If you are a business professional whose contact information appears in Lead Radar and you would like to access, correct, or delete that information, or object to its processing, email us at privacy@blissity.com with the name and business email associated with the record. We will locate the relevant data and honor valid requests, including deletion and opt-out, in accordance with applicable law.

We use strictly necessary cookies and similar technologies to authenticate you and maintain your session. We do not use these cookies for third-party advertising. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from logging in or using parts of the Service.

The Service is a business tool intended for use by professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

For privacy questions or to exercise your rights, contact us at privacy@blissity.com.

Blissity LLC
8 The Green, STE B, Dover, DE 19901