Privacy at Bullpen
Last changed October 29, 2026.
What we keep. Your account: your name, company, email, and your password (only as a scrambled one-way "hash", so nobody can read it, us included). Your Bullpen: what you tell it about your business, your campaigns, the companies it found and what it read about them, the drafts, lists and notes, files you upload, and what each piece of research cost. Your sign-ins: when each started and was last used. Your IP address is used only to stop too many tries at once; it's kept in memory for at most an hour and never written to disk.
What we don't do. No ads, no tracking, no analytics, no third-party scripts, and we never sell or share your data. Two cookies only: one keeps you signed in, one protects your forms.
Where it lives. On a disk in Fly.io's Toronto data centre in Canada (Fly.io, a US company, hosts it for us). The disk is encrypted, and Fly keeps daily snapshots of it for a few days so we can recover from a failure.
What leaves Canada. To research and write, Bullpen sends text to Anthropic's AI model, in the US: public facts about the companies you look at, and what you've told Bullpen about your business and your notes. Anthropic's commercial terms say it doesn't train its models on what we send through its API. Neither do we.
Who helps us (subprocessors). Fly.io (hosting, Toronto). Anthropic (the AI model, US). Stripe (only if you pay; it never sees your Bullpen).
The businesses Bullpen researches. It reads what businesses publish on their own websites and keeps the business contact details they publish there (a name, a title, a work email) so you can write to them. If someone asks you to stop, Bullpen keeps them on your do-not-contact list.
Who can see your data. You. Autough's two founders, only to support you or fix a problem. Fly.io as our host. Nobody else, and never another Bullpen account.
Delete. Delete your account from Account, any time: your account and everything in your Bullpen are deleted at once; copies in the daily snapshots are gone within a week. We keep one thing: a scrambled fingerprint of your email address with how much free research it used, so the free amount can't be claimed twice. It can't be turned back into your address. To get a copy of everything first, write to business@autough.com.
If something goes wrong. If your data is ever exposed, we'll tell you as soon as we know.
Questions. business@autough.com · Autough Ltd, 79 Beach Grove Rd, Charlottetown, PE C1E 1J4, Canada.