Privacy policy

01.Introduction

This Privacy Policy describes how Buuulkify ("we," "our," or "us") collects, uses, and protects your information when you use our Shopify application (the "App"). We are committed to protecting your privacy and ensuring the security of your data.

By using Buuulkify, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

02.Information We Collect

2.1 Information You Provide

When you install and use Buuulkify, we may collect:

• Store information (store name, domain, email address)
• Staff user details provided by Shopify when you use the App (user ID, name and email), used to attribute operations in the Activity Log and to save personal views
• Product data that you choose to manage through the App
• Feedback messages you send us, and an optional contact email
• Settings and preferences, such as saved filter views, API keys and outgoing webhook endpoints you configure

2.2 Automatically Collected Information

We automatically collect certain information when you use the App:

• Shopify store data accessed through the Shopify Admin API (products, inventory, locations, sales channels, and orders and reports used for sales and stock reports)
• Activity logs of the operations you run, including before and after values so they can be undone (kept for 90 days)
• API request logs for the Buuulkify API, including IP address and user agent (kept for 30 days)
• Storefront engagement events from our Shopify web pixel (product views, add-to-cart and checkout events), recorded per product only with no customer identifiers; daily engagement totals are kept for up to 400 days
• Error logs and diagnostic information
• Session information and authentication tokens

03.How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our App: Enable bulk product management features and ensure proper functionality
• To process your requests: Execute bulk operations on your products, including price updates, tag management, and inventory adjustments
• To generate content you request: send product information to our AI provider to create SEO fields and product descriptions
• To produce reports: calculate stock, sales, catalog health and storefront engagement reports for your store
• To communicate with you: respond to your inquiries and feedback
• To ensure security: Detect and prevent fraud, abuse, and security issues
• To comply with legal obligations: Meet regulatory requirements and respond to legal requests

04.Data Storage and Security

We implement industry-standard security measures to protect your information:

• Data is encrypted in transit using SSL/TLS protocols
• Access to your data is restricted to authorized personnel only
• We use secure authentication mechanisms provided by Shopify
• Regular security audits and updates are performed

Your data is stored securely and is only retained for as long as necessary to provide our services or as required by law.

05.Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Shopify: As required to provide App functionality through the Shopify platform
• Hosting & Infrastructure: Fly.io (application hosting) and Neon (managed Postgres database) process and store App data on our behalf
• AI Provider: OpenAI processes product information (such as title, vendor, type, tags, price, options and existing description) only when you use AI generation features. No customer data is sent
• Webhooks You Configure: If you set up outgoing webhooks or use API keys, the App sends the event data you choose to the endpoints you configure
• Feedback Form: Formspree receives feedback you submit from the App (your message, your store domain, your staff account email, an optional contact email and any files you attach) and forwards it to our team's inbox
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

06.Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations). All shop data is deleted when Shopify sends the shop/redact webhook, about 48 hours after you uninstall
• Data Portability: Request a copy of your data in a portable format, or export products and the Activity Log from within the App
• Uninstall: You can uninstall the App at any time through your Shopify admin panel

To exercise these rights, please contact us using the contact information provided below.

07.Shopify API Access

Buuulkify requires access to your Shopify store data through the Shopify Admin API. The App requests the following permissions:

• read_products, write_products: To read and edit the products, variants, metafields, media, SEO fields and collections you change in bulk
• read_publications, write_publications: To show and change which sales channels your products are published to
• read_locations: To list your locations for multi-location inventory
• read_inventory, write_inventory: To read and update stock levels
• read_orders, read_reports: To calculate sales performance, stock coverage and inventory reports
• write_pixels, read_customer_events: To install and run the web pixel that records anonymous, product-level storefront engagement
• write_app_proxy: To receive web pixel events through a signed Shopify app proxy, so only genuine events from your store are accepted

These permissions are necessary for the App to function. We only access data required for the features you use, and we do not access data beyond what is necessary for App functionality.

08.Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings

You can control cookies through your browser settings, though this may affect App functionality.

09.Children's Privacy

Buuulkify is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10.International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification for material changes (if applicable)

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13.Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Shopify's Partner Program Agreement and API License Agreement