Bulky — Privacy Policy

Some contact and legal details are being finalized before launch. For privacy questions in the meantime, reach us through the Bulky listing on the Shopify App Store.

1. Summary

Bulky helps Shopify merchants bulk-edit product data (titles, SEO fields, tags, type, vendor, status, prices). To do this it needs access to your store’s products only. Bulky does not access, store, or process your customers’ personal data — it requests no customer, order, or checkout permissions.

2. Data we collect

a) Data collected through the Shopify API

• Product/catalog data — product titles, descriptions metadata (SEO title and meta description), tags, product type, vendor, status, and variant prices / compare-at prices. This is read to display the editable table and written back when you save a change.
• Shop information — your store’s myshopify.com domain and shop currency, used to scope your data and format prices.

b) Data collected from merchants (you and your staff)

• Authentication/session data provided by Shopify when you install and use the app: an OAuth access token, and the identifying fields Shopify returns for the logged-in staff user (name, email address, locale, user ID, and account-owner/collaborator flags). This is stored to keep you authenticated and is staff/merchant data — not shopper data.
• App-generated records you create — your change history (per-field before/after values of the products you edited, with timestamps), monthly usage counts, saved edit templates, and scheduled edits.
• Preferences — column visibility and similar UI settings (stored in your browser’s local storage, on your device).

c) Data collected from merchants’ customers

• None. Bulky has no access to customers, orders, checkouts, or any shopper personal data, and stores none.

3. How we use data

• To provide the app’s functionality: display your products, preview and apply the edits you make, stream save progress, and let you undo/revert changes.
• To authenticate your session and scope all data to your store.
• To enforce plan limits (the Free monthly edit count) and billing tier.
• For the AI SEO feature only (AI plan): see §4.

We do not sell your data, use it for advertising, or use it to train AI models.

4. AI SEO feature and sub-processors

When you use the optional AI SEO suggestion feature, Bulky sends the relevant product fields — product title, vendor, product type, tags, and any existing SEO title/meta description — to a third-party AI provider to generate suggested SEO text. No customer, order, or personal data is sent (Bulky holds none).

• AI sub-processor: Anthropic, PBC and/or DeepSeek, depending on the configured provider. The provider returns suggested SEO text, which you review before applying.
• The AI feature is off unless you are on the AI plan and use it. If you never use it, no product data is sent to any AI provider.
• Infrastructure: the app runs in details pending; session and app records are stored in the app’s database on that host.

5. Data retention and deletion

• We retain your data for the life of the installation.
• When you uninstall Bulky, Shopify sends a shop/redact request 48 hours later; on receipt Bulky erases all data for your store — change history, usage counts, edit templates, scheduled edits, and your session — from its database.
• We respond to Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact) and complete any required action within 30 days. Because Bulky stores no customer data, the customer-data requests have nothing to return or erase.
• You may also request deletion at any time via the privacy contact above.

6. Data storage location / European users

• App data is stored and processed in details pending.
• The AI sub-processor (§4) may process the submitted product fields in its own regions. Only product fields are sent — no customer, order, or personal data is included.

7. Security

All data is transmitted over TLS/HTTPS. Access to your store data is scoped to your store and gated by Shopify OAuth. Bulky requests the minimum scope it needs (write_products) and no customer/order scopes.

8. Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your data, and to object to or restrict processing. To exercise these, contact us at details pending. We will respond within the timeframe required by applicable law.

9. Changes to this policy

We may update this policy; the “Effective date” above reflects the latest version. Material changes will be communicated through the app or by updating this page.

10. Contact

details pending
details pending
details pending

Support