Privacy Policy

BlissPoint Access ("BlissPoint Access," "we," "us," or "our") operates blisspointaccess.com and the tools, dashboards, and services available through it (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By creating an account or using the Service, you agree to the practices described here.

Account information. Name, email address, and password (stored as a salted hash — we never store or have access to your plain-text password) when you register.

Financial and business data. Transactions, invoices, bills, vendor records, bookkeeping entries, and other business or personal financial data you enter or upload to use tools like Bookkeeping, Invoicing, Vendor & AP Management, or the Tax Deduction finder.

Credit-building and reporting data. If you subscribe to Personal or Business Credit Building, we collect the information necessary to furnish accurate tradeline data to consumer credit bureaus on your behalf. See Section 4 for details specific to this feature.

Documents and content you create. Resumes, cover letters, contracts, spreadsheets, presentations, e-signature documents, CRM records, and similar content you create, upload, or store using the platform's tools.

Password Safe Keeper data. If you use our password manager, your vault entries are encrypted client-side with a master password only you know before they ever reach our servers — this is a zero-knowledge design, meaning we cannot read your stored passwords and cannot recover them if you forget your master password.

Payment information. Subscription and invoice payments are processed by Stripe. We do not store your full card number — Stripe shares with us only what's needed to manage your subscription (e.g., a payment method's last four digits and expiration).

Usage and device data. Pages visited, features used, browser type, and IP address, collected automatically (including via Google Analytics) to help us understand how the Service is used and to keep it secure.

Job postings and applications. If you use Job Search, we collect your resume and application data, and, if you post a job opening, the listing details and contact information you provide.

We use the information above to:

• Provide, maintain, and improve the Service and its individual tools
• Process payments and manage subscriptions
• Furnish credit data to bureaus for subscribers of Credit Building services
• Send transactional emails (password resets, booking confirmations, e-signature requests, alerts you've opted into)
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Understand aggregate usage patterns to prioritize what we build next
• Comply with legal obligations

We do not sell your personal information.

Personal and Business Credit Building are furnisher services: with your consent, we report payment and account data to major consumer credit bureaus using the Metro2 reporting format. This data is shared only with the credit bureaus for the purpose of building your credit history — never with unrelated third parties or for advertising. Automatic credit reporting is currently active for U.S. customers only.

We share information only as needed to operate the Service:

• Service providers who process data on our behalf under contract — payment processing (Stripe), email and SMS delivery (Brevo, SendGrid, Twilio), and cloud hosting/infrastructure (Fly.io, Neon, Cloudflare, Vercel).
• Credit bureaus, solely for subscribers of the Credit Building services, as described in Section 4.
• Calendar providers (Google, Microsoft), only if you explicitly connect your calendar to the Scheduling tool.
• The partner who referred you — if you signed up through an affiliate or accountant partner's link, that partner sees your first name, last initial, sign-up date and plan, so they know their referral counted. They never see your email address, your data or anything you do in BlissPoint Access.
• Legal or safety reasons — if required by law, subpoena, or to protect the rights, property, or safety of BlissPoint Access, our users, or the public.

We use industry-standard safeguards including encrypted connections (HTTPS), salted password hashing (bcrypt), encryption of sensitive stored data, and a zero-knowledge architecture for the Password Safe Keeper vault. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your information using practices appropriate to its sensitivity.

We retain account and content data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (Section 8); some records may be retained longer where required by law (for example, billing records) or where credit-reporting obligations require a longer retention period.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to opt out of certain uses. You can manage most of this yourself from your account Settings, or contact us at solutions@blisspointaccess.com and we'll assist you directly.

We use cookies and similar technologies (including Google Analytics) to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect some functionality.

Our own usage analytics. We record which pages and tools are used, where on a page people click and how far they scroll, errors that occur, and your approximate location (country, region and city, estimated by our hosting provider; we do not store IP addresses for this), browser language, time zone, browser and device type. We use this to fix problems and decide what to build. Raw records are deleted after 90 days.

Session recordings, and how to opt out. For quality and analytics purposes, some sessions may be recorded once you've been shown our recording notice: we record how you use pages (mouse movement, clicks, scrolling and page changes) so we can see where the Service is confusing or broken. Anything you type is hidden before it leaves your browser, as is page text that may contain your information. We never record the Password Safe, Tax, bookkeeping and financial statement pages, credit accounts or Settings. Recordings are visible only to our administrators and are deleted after 30 days. You can opt out at any time, from the notice or below; opting out stops recording in this browser and deletes the recordings already made in it. If your browser sends a Global Privacy Control signal we never record your sessions.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll remove it.

The Service is hosted in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your home country.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes, we'll make a reasonable effort to notify active users.

Questions about this policy or your data? Reach us at solutions@blisspointaccess.com.