Privacy Policy

Bullseye is operated by Beam Enterprises (Bullseye, we, us). This policy explains how we handle personal data when you visit bullseye.li, sign up, use the Bullseye app at chat.bullseye.li, connect Bullseye to another AI assistant, or contact us.

For your account, billing and website data we decide how and why it is processed, and are the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the DPDP Act). When an organisation subscribes and its members use Bullseye for its work, we process the content they submit on that organisation's behalf and under its instructions; questions about that content can also go to the organisation.

• Account details: your name and email address, from Google or Microsoft when you sign in with them, or the email address you register with. Passwords are held by Google's sign-in service, not by us.
• Organisation and billing details: your plan, seats, subscription and invoice records, billing contact and address, and GSTIN if you give one. Card, UPI and bank details are collected by our payment processor and never reach us.
• Your content: the questions you ask, files you upload, answers and documents the Service produces for you, and the chats, matters, knowledge bases, preferences and memories you save. Your content may contain personal data about other people, such as parties to a contract.
• Usage data: what you do in the app (for example that a question was asked, a file uploaded or a citation opened, but not what you wrote), the amount of AI processing each request used and its cost, and technical logs such as IP address, browser type and request times.
• Website data: request logs from our web host.
• Communications: what you send us when you email us, book a demo or ask for support.

We do not ask for government identifiers such as Aadhaar or PAN, biometric data or health data.

• to provide the Service: answer your questions, work on your documents, and keep your history and settings;
• to run your account and subscription: sign-in, seats, usage limits, invoices and payments;
• to keep the Service secure: detect abuse, scraping and fraud, and investigate faults;
• to support you when you ask, and to tell you about changes to the Service or your account;
• to understand and improve the Service, using usage data and aggregate measures rather than your content;
• to meet legal, tax and accounting obligations.

We do not use your content to train or fine-tune AI models, and we do not sell personal data. Our staff look at your content only where that is needed to give you support you asked for, to investigate a fault, abuse or security issue, or to comply with the law.

We process personal data with your consent, which you give when you sign up and use the Service and can withdraw at any time, and otherwise for the legitimate uses the DPDP Act allows, such as meeting a legal obligation.

We use service providers to run Bullseye: cloud hosting and storage, AI model providers, document text recognition, web search, sign-in, and billing and payments. They process personal data for us, under contract, only to provide their service. When you ask a question or work on a document, the relevant text is sent to an AI model provider so it can produce the response. Organisations can ask us for the current list of these providers.

We also share personal data:

• within your organisation, with its administrators and with the colleagues you share chats, matters or knowledge bases with;
• with an AI assistant you connect to Bullseye, which receives the answers to the requests it makes;
• with authorities, where the law requires us to or to protect rights, safety and security;
• with a buyer or successor if our business is sold or reorganised, under the same protections.

Your account data, content and files are stored on Google Cloud in India (Mumbai). To produce a response, the text of a request may be processed by an AI model provider outside India. Transfers outside India are made as the DPDP Act permits. Organisations that need processing kept within India can contact us to discuss their options.

• Account and usage data: while your account is open.
• Your content: until you delete it or your account is deleted. Working copies our document tools make while processing a file are deleted automatically after 30 days.
• Technical logs: 30 days, and up to 400 days for audit logs of administrative actions.
• Backups: up to 7 days, after which deleted data is gone from them too. An archive kept from our move to a new app in October 2026 is deleted by 17 November 2026.
• Invoices and billing records: as long as tax and accounting law requires.

When your account is deleted, we delete your content, files, saved memories and preferences, and your sign-in account. Some things stay because they belong to others: a question you asked in a colleague's shared chat stays in that chat, and a note you added to a colleague's matter stays with that matter.

Data is encrypted in transit with TLS and at rest. Access to the app requires sign-in through Google's identity-aware proxy, every request is checked against your subscription, and access to production systems is limited to the people who operate them. No system is perfectly secure; if a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Under the DPDP Act you can:

• get a summary of the personal data we hold about you and how we process it;
• have it corrected, completed or updated;
• have it erased, unless we must keep it by law;
• withdraw your consent, which ends the Service for you;
• nominate someone to exercise these rights if you die or become unable to;
• raise a grievance with us, and then with the Data Protection Board of India.

To use any of these, email support@bullseye.li. We may need to confirm your identity first. If you use Bullseye through your organisation, we may refer requests about its content to it.

• The Bullseye app uses only the cookies needed to keep you signed in. It sets no advertising or analytics cookies.
• This website sets no cookies of its own. It remembers your light or dark theme choice in your browser's local storage. You can block or delete cookies in your browser settings.

Bullseye is for professionals and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.

We will update this policy when what we do changes; the date at the top shows when it last changed. We will tell you about a material change by email or in the app before it takes effect.

Questions, requests and complaints about personal data go to our Grievance Officer, Agni Iyer, at agni@bullseye.li. We respond to a grievance within 30 days.