Privacy Policy

This Privacy Policy explains what information BulkFlow AI (“we”, “us”) collects when you use the Service, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Account information

• When you sign up with email: your name, email address and a hashed password (we never store your password in plain text).
• When you sign in with Google: your name, email address, Google account identifier and profile picture URL, as provided by Google. We do not receive your Google password.

Content you submit

• Supplier and marketplace URLs, product data, brand and pricing settings, integration details, and the catalogues, sheets and analyses you generate.
• Data collected from the public listing pages you ask us to process (titles, descriptions, images, prices, variants, specifications and the source URL).

Usage and technical data

• Log data such as actions taken in the app, job and export history, approximate IP address, and basic device/browser information, used for security, rate-limiting and improving the Service.
• Visitor analytics. To understand how the site is used, we record a random visit identifier (kept in your browser's session storage for that tab, not a cookie), the pages you view, how long you stay, your device type, and an approximate location (city, region and country) derived from your IP address. If you are signed in, the visit is linked to your account. We use this only to run and improve the Service — not for advertising — and we do not share it with advertisers.

Payment information

• Subscriptions are processed by Razorpay. We store your Razorpay customer and subscription identifiers and your plan status. We do not store card numbers, UPI credentials or bank details — those are handled directly by Razorpay.

Browser extension

If you use the BulkFlow browser extension, it runs only on the marketplace and seller sites named in its description. It keeps your connection token and the product links you collect locally in your browser. When you press Send to BulkFlow, those links and the titles and images shown for them are sent to your account. When you use the Single Listing or A+ tools, the product photos, brand and remark you provide, and the field names and options of the seller form you have open, are sent to our servers, where an AI service reads them to prepare values; nothing is ever submitted on Amazon or Flipkart on your behalf. When you open a manufacturer's own store page on Alibaba or 1688, the extension reads the store's logo image address and company name and saves them to your account so the manufacturer's record can show its logo. The extension does not read other pages, does not track your browsing, and sends data only to bulkflowai.com using your personal token, which you can revoke at any time in Settings → Browser Extension.

2. How we use information

• to provide, operate and maintain the Service and your account;
• to process the links and data you submit and generate your catalogues and exports;
• to take payment, manage subscriptions and enforce plan limits;
• to secure the Service, prevent abuse and troubleshoot problems;
• to send essential service messages (for example, “your sheet is ready”);
• to improve features and understand how the Service is used.

We do not sell your personal information.

3. Service providers we share data with

We share data with the following categories of providers only as needed to run the Service:

• Hosting & database — application hosting and the managed database that stores your account and content.
• Payments — Razorpay, for subscription billing and autopay.
• Authentication — Google, when you choose Google Sign-In.
• AI processing — third-party AI model providers used to translate, clean, categorise and score product data. Content sent for processing may include the product data from your links.
• Data collection — infrastructure used to fetch public listing pages.
• Email — a transactional email provider for service notifications.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety and security of BulkFlow AI, our users or the public.

4. Cookies and sessions

We use a single essential, HTTP-only session cookie to keep you signed in, and short-lived cookies during the Google Sign-In flow. We do not use third-party advertising or tracking cookies. Your browser may also store small preferences (such as light/dark theme) locally on your device.

5. Data retention and deletion

We keep your account and content for as long as your account is active. If you delete a project or your account, the associated data is moved to a recycle state and permanently removed after a short retention window. Some records (such as audit logs and billing records) may be kept longer where required for security or legal reasons. To request deletion, contact us at the address below.

6. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and encryption at rest for sensitive credentials such as API keys and integration tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 (and similar laws that may apply to you), you have the right to:

• Access the personal data we hold about you — download a copy any time from Settings → Privacy & data.
• Correct inaccurate information — update most details in the app, or write to us.
• Erase your data — delete your account from Settings → Privacy & data. See Data deletion for exactly what happens.
• Withdraw consent at any time — by deleting your account or writing to us. This does not affect processing done before you withdrew.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Complain to our Grievance Officer (below) and, if unresolved, to the Data Protection Board of India.

We process your data on the basis of your consent and to provide the Service you asked for. We collect only what the Service needs.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children.

9. International

The Service and our providers may process and store data in countries other than yours. By using the Service you consent to such transfers, subject to appropriate safeguards.

10. Grievance Officer

For any question, complaint or request about your personal data, contact our Grievance Officer:

• Name: Shekhar Sagar
• Email: support@bulkflowai.com

Please put “Privacy request” in the subject and include the email address of your account. We will acknowledge your request and resolve it as soon as reasonably possible and within the time required by law.

11. Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date and, for material changes, notify you in the app or by email.

12. Contact

support@bulkflowai.com