1. Scope
This Privacy Policy applies to personal information we process about:
- Customers and account users, including people who create BlueChimp accounts, administer customer workspaces, subscribe to the Service, or use the Service on behalf of a business.
- Business contacts or prospects, meaning third parties whose business contact information may be sourced, enriched, scored, stored, displayed, imported, exported, or used through the Service.
- Website visitors, including people who visit our marketing site, documentation, or other public pages.
This Privacy Policy does not apply to third-party websites, services, or applications that we do not own or control, even if they are linked from or integrated with the Service.
2. Geographic Scope
Regardless of where a customer is located, the Service may only be used to process business-contact data about individuals located in the United States and Canada. Customers may not use the Service to intentionally collect, import, enrich, store, or conduct outreach to contacts located in the European Economic Area, the United Kingdom, or Switzerland.
We use geographic filters and related controls to help avoid ingesting contacts from regions outside our supported scope. If a contact's geography is unknown or cannot be reasonably classified, we may reject, suppress, or delete that contact from the Service.
3. Personal Information We Collect
3.1 Customer and Account User Information
We may collect the following information from or about customers and account users:
| Category | Examples |
|---|---|
| Account information | Name, business email address, company name, job title, role, workspace membership, login credentials, authentication information |
| Billing information | Stripe customer ID, billing address, subscription status, payment history, invoices, tax information. We do not directly receive full payment card numbers. |
| Usage information | Feature usage, searches, exports, outreach activity, audit logs, support requests, settings, preferences |
| Communications | Emails, support messages, feedback, survey responses, sales or onboarding communications |
| Device and technical information | IP address, browser type, device identifiers, operating system, pages viewed, timestamps, referral URLs, cookie and pixel data |
3.2 Business Contact and Prospect Information
The Service may collect, receive, generate, infer, or display information about business contacts or prospects, including:
| Category | Examples |
|---|---|
| Identifiers | Full name, business email address, business phone number, personal email address when provided by a data source, LinkedIn URL, profile URL, company domain |
| Professional information | Current employer, job title, seniority, department, role, years in role, company size, industry, business location, education history |
| Inferences and scoring | Buying-intent score, predicted decision-maker status, suggested communication approach, AI-generated summaries, AI-generated personality or communication assessments |
| Activity information | Whether a BlueChimp customer viewed, exported, enriched, emailed, suppressed, or otherwise interacted with a contact and when |
| Connection-graph information | LinkedIn connection information or relationship context when a customer connects a supported account and authorizes import through an integration |
3.3 Website Visitor Information
When you visit our website, we may collect:
- IP address and approximate location derived from IP address.
- Browser, device, operating system, and usage information.
- Pages viewed, referring pages, timestamps, and similar analytics information.
- Cookie, pixel, and similar tracking data.
- Information collected through website analytics, lead-identification, visitor-identification, or advertising technologies.
3.4 Information We Do Not Knowingly Collect
We do not knowingly collect the following categories of information from prospects:
- Government identification numbers.
- Social Security numbers.
- Financial account numbers.
- Precise geolocation.
- Biometric information.
- Health information.
- Information about known minors.
- Sensitive personal information used to infer characteristics.
For registered account users, we process authentication information as needed to secure account access. We do not use account credentials or authentication information to infer characteristics about users.
4. Sources of Personal Information
We may collect personal information from the following sources:
| Source | Examples |
|---|---|
| You | Information you provide when creating an account, configuring the Service, contacting us, or using the Service |
| Customers | Contact lists, CRM data, LinkedIn connection data, email account data, company information, outreach activity, suppression lists |
| Data providers and enrichment vendors | Apollo.io, Clay.com, Anymailfinder, decision-maker finders, intent-data vendors, company-data vendors |
| Integrations | LinkedIn-related integrations through Unipile, HubSpot, Salesforce, email providers, workflow tools, browser automation tools |
| Analytics and website technologies | Cookies, pixels, visitor-identification tools, IP-geolocation tools, analytics providers |
| Service providers | Stripe, hosting providers, customer support tools, security tools, AI service providers, workflow tools |
| Public and business sources | Public websites, business directories, social and professional networking pages, company websites, publicly available business records |
5. How We Use Personal Information
We may use personal information for the following purposes:
| Purpose | Examples |
|---|---|
| Provide and operate the Service | Create accounts, authenticate users, manage workspaces, return lead lists, enrich contacts, score intent, display results, sync CRM activity |
| Source and enrich business contact data | Find business contacts, enrich contact records, verify or supplement business emails, associate contacts with companies, identify decision-makers |
| Support outreach workflows | Generate AI-assisted email drafts, help customers manage prospecting workflows, send or facilitate outreach from customer-connected accounts, track customer activity |
| Process billing | Manage subscriptions, invoices, payments, taxes, chargebacks, and related records through Stripe |
| Improve the Service | Analyze product usage, troubleshoot bugs, develop features, train internal operations, monitor performance |
| Security and abuse prevention | Detect fraud, prevent misuse, protect accounts, enforce our Terms, audit activity, maintain suppression lists |
| Privacy compliance | Process access, deletion, correction, opt-out, suppression, appeal, and similar privacy requests |
| Communications | Send service messages, support replies, security alerts, product updates, administrative notices, and marketing communications where permitted |
| Legal and business purposes | Comply with law, respond to lawful requests, protect rights, handle disputes, enforce agreements, support corporate transactions |
6. How We Disclose Personal Information
We may disclose personal information as described below.
6.1 Customers and Workspace Users
Information in a customer workspace may be available to the customer, customer administrators, invited account users, and connected systems authorized by that customer.
6.2 Service Providers and Sub-processors
We disclose personal information to service providers and sub-processors that help us operate, host, secure, support, analyze, improve, and bill for the Service. These may include:
- Supabase for hosting, database, and edge functions.
- Stripe for payments and billing.
- Apollo.io for lead sourcing and website visitor tools.
- Clay.com for enrichment workflows.
- Unipile for LinkedIn-related integration functionality.
- Anymailfinder for email lookup.
- Bombora and G2 for intent signals.
- HubSpot and Salesforce for customer-authorized CRM sync.
- Airtop or Browserflow for browser automation workflows.
- OpenAI and Anthropic for AI-assisted features.
- Slack for internal operational notifications.
- n8n for workflow orchestration.
- MaxMind, IPinfo, or similar tools for IP-based geolocation and geographic filtering.
A current sub-processor list should be posted at: https://www.blue-chimp.com/privacy.
6.3 Integrations Authorized by Customers
If a customer connects a third-party account or integration, we may exchange information with that integration according to the customer's configuration and authorization. Examples include CRM systems, email systems, LinkedIn-related integrations, enrichment tools, and workflow automation systems.
6.4 Business Contact Data Made Available Through the Service
BlueChimp's Service includes making business contact and prospect information available to customers. Some privacy laws may treat this activity as a "sale" of personal information or as "sharing" personal information. We provide opt-out and suppression mechanisms as described below.
6.5 Legal, Safety, and Corporate Transactions
We may disclose personal information when we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce agreements, protect rights or safety, prevent fraud or abuse, or support a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.
7. Cookies, Pixels, Analytics, and Similar Technologies
We and our service providers may use cookies, pixels, local storage, tags, and similar technologies for:
- Site operation and security.
- Analytics and performance measurement.
- Visitor identification and lead analytics.
- Product improvement.
- Marketing and advertising measurement.
You may be able to control cookies through your browser settings. We may also provide a cookie banner or preference tool. Disabling cookies may affect parts of the Service.
Where required by applicable law, we will provide a way to opt out of the sale or sharing of personal information through tracking technologies. See Your Privacy Choices below.
8. AI Features
BlueChimp may use AI service providers to generate summaries, drafts, intent scores, recommendations, classifications, and related outputs. Prompts or context sent to AI providers may include customer-provided information, business contact information, company information, outreach context, and Service usage context.
Customers are responsible for reviewing AI-generated outputs before using them. AI outputs may be inaccurate, incomplete, or unsuitable for a particular use.
9. Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, protect security, and honor suppression or opt-out requests.
Retention periods may vary based on the type of information and the context. For example:
| Information Type | General Retention Approach |
|---|---|
| Account information | Retained while the account is active and for a reasonable period afterward |
| Billing records | Retained as needed for accounting, tax, compliance, and dispute purposes |
| Prospect records | Retained while needed for the Service, unless deleted, suppressed, or restricted |
| Suppression records | Retained as needed to honor opt-outs and prevent reprocessing |
| Security and audit logs | Retained as needed for security, fraud prevention, debugging, compliance, and business continuity |
10. Your Privacy Choices
Depending on where you live and the nature of our relationship with you, you may have rights to:
- Know or access the personal information we process about you.
- Receive a portable copy of certain personal information.
- Correct inaccurate personal information.
- Delete personal information.
- Opt out of the sale or sharing of personal information.
- Opt out of targeted advertising.
- Opt out of certain profiling or automated decision-making where applicable.
- Limit certain uses of sensitive personal information where applicable.
- Appeal a denied privacy request where applicable.
- Not be discriminated against for exercising privacy rights.
To submit a request, use one of the following methods:
- Privacy request form: https://www.blue-chimp.com/privacy/request
- Your Privacy Choices page: https://www.blue-chimp.com/privacy-choices
- Email: product@blue-chimp.com
- Mail: 163 Elton Ct, Thomasville, NC 27360
We may need to verify your identity before completing certain requests. If you are submitting a request about a business contact record, please provide enough information for us to locate the record, such as your name, business email address, company, LinkedIn URL, or other relevant business contact details.
Authorized agents may submit requests where permitted by law. We may require proof of authorization and may ask the relevant individual to verify their identity directly with us.
11. Opting Out of Sale or Sharing
BlueChimp treats business contact information made available through the Service as information that may be considered sold or shared under some privacy laws.
You may request that we not sell or share your personal information by using:
- https://www.blue-chimp.com/privacy-choices
- https://www.blue-chimp.com/privacy-choices
- product@blue-chimp.com
If we process your opt-out request, we may keep limited suppression information so we can honor the request and avoid re-adding or re-disclosing the same contact record. We may still disclose information to service providers or processors where permitted by law and necessary to operate the Service or honor the opt-out.
12. Global Privacy Control and Opt-Out Preference Signals
Where required by applicable law and technically feasible for the relevant property, we will process recognized browser-based opt-out preference signals, such as Global Privacy Control, as requests to opt out of sale or sharing for that browser or device.
Because many business contact records are not tied to a website browser session, a browser signal may not allow us to identify every offline or database record associated with you. For contact-data opt-outs, please also use the privacy request methods listed above.
13. California Notice at Collection
This section provides additional information for California residents.
| Category of Personal Information | Examples | Sources | Purposes | Disclosed To | Sold or Shared? | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Name, business email, phone, LinkedIn URL, account email, IP address | You, customers, data providers, integrations, website tools | Provide Service, identify contacts, billing, security, support, privacy requests | Customers, service providers, integrations, legal recipients | Prospect identifiers may be sold or shared; customer account identifiers are not sold except as tracking laws may define sharing | As needed for Service, records, suppression, compliance |
| Customer records and commercial information | Subscription status, billing history, payment records, plan details | You, Stripe, customer administrators | Billing, account administration, tax, support | Stripe, service providers, legal recipients | No | As needed for billing, tax, records, disputes |
| Internet or network activity | Pages viewed, logs, usage activity, cookie data, product events | Website, Service, devices, analytics tools | Security, analytics, product improvement, advertising, support | Analytics, hosting, security, advertising, service providers | May be shared through analytics or advertising technologies | As needed for analytics, security, business purposes |
| Professional or employment-related information | Employer, title, department, seniority, role, company, industry | Customers, data providers, public sources, integrations | Source leads, enrich records, score intent, display prospects | Customers, service providers, integrations | Yes, for prospect records made available through the Service | As needed for Service, suppression, compliance |
| Education information | Education history when provided by data sources | Data providers, public or professional sources | Enrichment, prospect context | Customers, service providers | Yes, when included in prospect records | As needed for Service, suppression, compliance |
| Inferences | Buying intent, decision-maker status, AI-generated summaries, communication assessments | Service usage, data providers, AI providers, customer inputs | Scoring, enrichment, outreach support, recommendations | Customers, service providers, AI providers | Yes, when included in prospect records | As needed for Service, suppression, compliance |
| Approximate geolocation | Approximate location from IP address or business location | Devices, IP tools, data providers, public/business sources | Geographic filtering, fraud prevention, analytics, Service operation | Service providers, customers where part of prospect data | May be sold or shared if part of prospect records or tracking | As needed for filtering, analytics, records |
| Sensitive personal information | Account credentials for registered users, if applicable | Users | Authentication and account security | Hosting and security service providers | No | As needed for account security |
We do not knowingly sell or share personal information of minors under 16.
We do not use or disclose sensitive personal information for purposes that would require a separate right to limit use under California law.
14. California Privacy Rights
California residents may have the right to request:
- The categories and specific pieces of personal information we have collected about them.
- The categories of sources from which we collected personal information.
- The purposes for collecting, selling, or sharing personal information.
- The categories of third parties to whom we disclose, sell, or share personal information.
- Deletion of personal information, subject to exceptions.
- Correction of inaccurate personal information.
- Opt-out of sale or sharing.
- Non-discrimination for exercising rights.
California residents may submit requests using the methods in Your Privacy Choices above.
15. Other US State Privacy Rights
Residents of certain US states may have privacy rights similar to those described above. Depending on the state, these may include rights to access, correct, delete, obtain a copy, opt out of sale, opt out of targeted advertising, opt out of profiling, appeal a decision, or designate an authorized agent.
We will process requests according to applicable law.
16. Canadian Residents
BlueChimp is operated from the United States and is intended for business use. Canadian residents may contact us to request access, correction, or deletion of personal information, or to ask questions about our privacy practices, using the contact methods above.
Customers using BlueChimp for outreach to Canadian recipients are responsible for complying with applicable Canadian privacy and anti-spam laws, including consent, identification, and unsubscribe requirements.
17. Children's Privacy
The Service is intended for business users and is not directed to children. We do not knowingly collect personal information from children or minors. If you believe we have collected information about a child or minor, contact us and we will take appropriate steps to delete or suppress the information.
18. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is perfectly secure. We cannot guarantee that personal information will never be accessed, used, disclosed, altered, or destroyed without authorization.
19. International Processing
We are based in the United States. Personal information may be processed in the United States, Canada, the European Union, or other locations where our service providers operate. By using the Service or submitting information to us, you understand that your information may be processed in locations that may have privacy laws different from those in your location.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide notice where required by law. Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated policy.
21. Contact Us
Findable LLC
Attn: Privacy
163 Elton Ct, Thomasville, NC 27360
Email: product@blue-chimp.com
Privacy request form: https://www.blue-chimp.com/privacy/request