Privacy Policy
Last updated 8 September 2026
This Privacy Policy explains what information BulkFlow AI (“we”, “us”) collects when you use the Service, how we use it, and the choices you have. By using the Service you agree to this policy.
1. Information we collect
Account information
- When you sign up with email: your name, email address and a hashed password (we never store your password in plain text).
- When you sign in with Google: your name, email address, Google account identifier and profile picture URL, as provided by Google. We do not receive your Google password.
Content you submit
- Supplier and marketplace URLs, product data, brand and pricing settings, integration details, and the catalogues, sheets and analyses you generate.
- Data collected from the public listing pages you ask us to process (titles, descriptions, images, prices, variants, specifications and the source URL).
Usage and technical data
- Log data such as actions taken in the app, job and export history, approximate IP address, and basic device/browser information, used for security, rate-limiting and improving the Service.
Payment information
- Subscriptions are processed by Razorpay. We store your Razorpay customer and subscription identifiers and your plan status. We do not store card numbers, UPI credentials or bank details — those are handled directly by Razorpay.
2. How we use information
- to provide, operate and maintain the Service and your account;
- to process the links and data you submit and generate your catalogues and exports;
- to take payment, manage subscriptions and enforce plan limits;
- to secure the Service, prevent abuse and troubleshoot problems;
- to send essential service messages (for example, “your sheet is ready”);
- to improve features and understand how the Service is used.
We do not sell your personal information.
3. Service providers we share data with
We share data with the following categories of providers only as needed to run the Service:
- Hosting & database — application hosting and the managed database that stores your account and content.
- Payments — Razorpay, for subscription billing and autopay.
- Authentication — Google, when you choose Google Sign-In.
- AI processing — third-party AI model providers used to translate, clean, categorise and score product data. Content sent for processing may include the product data from your links.
- Data collection — infrastructure used to fetch public listing pages.
- Email — a transactional email provider for service notifications.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety and security of BulkFlow AI, our users or the public.
4. Cookies and sessions
We use a single essential, HTTP-only session cookie to keep you signed in, and short-lived cookies during the Google Sign-In flow. We do not use third-party advertising or tracking cookies. Your browser may also store small preferences (such as light/dark theme) locally on your device.
5. Data retention and deletion
We keep your account and content for as long as your account is active. If you delete a project or your account, the associated data is moved to a recycle state and permanently removed after a short retention window. Some records (such as audit logs and billing records) may be kept longer where required for security or legal reasons. To request deletion, contact us at the address below.
6. Security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and encryption at rest for sensitive credentials such as API keys and integration tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal information, or to object to or restrict certain processing. You can update most account information in the app, and you can contact us to exercise other rights.
8. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children.
9. International
The Service and our providers may process and store data in countries other than yours. By using the Service you consent to such transfers, subject to appropriate safeguards.
10. Changes to this policy
We may update this policy from time to time. We will update the “Last updated” date and, for material changes, notify you in the app or by email.