Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you use BulkForge, we collect information you provide directly:

• Account Information: Name, email address, company name, password
• Billing Information: Payment method, billing address (processed by Stripe)
• Profile Information: Profile photo, job title, team member details
• WordPress Site Data: Site URLs, API credentials, site metadata
• Content Data: Posts, pages, products, and media you manage through our Service
• Communication Data: Support requests, feedback, survey responses

1.2 Information Collected Automatically

We automatically collect certain information when you use the Service:

• Usage Data: Features used, time spent, actions performed, workflow patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, errors encountered, performance metrics
• Cookies: Authentication tokens, preferences, analytics (see Cookie Policy)

1.3 Information from Third Parties

• Authentication Providers: Google, GitHub (if you use social login)
• WordPress Sites: Content, user data, site statistics via WordPress REST API
• Payment Processor: Stripe (transaction confirmations, payment status)
• Analytics Services: Aggregated usage patterns (anonymized)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Provide and Improve the Service

• Process your bulk content operations and AI generation requests
• Sync data between BulkForge and your WordPress sites
• Store and manage your content, workflows, and team settings
• Improve AI model accuracy and feature recommendations
• Debug issues and optimize performance

2.2 Communication

• Send transactional emails (job completions, approval requests, errors)
• Respond to support requests and provide customer service
• Send important updates about the Service (security, changes to Terms)
• Send marketing emails (with your consent; you can opt-out anytime)

2.3 Security and Compliance

• Detect and prevent fraud, spam, and abuse
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations (GDPR, CCPA, subpoenas)
• Protect our rights, property, and safety

2.4 Analytics and Research

• Analyze usage patterns to improve features (anonymized and aggregated)
• Conduct research to develop new capabilities
• Generate usage reports for your team (within your account)

3. How We Share Your Information

We do NOT sell your personal data. We share your information only in these limited circumstances:

3.1 Service Providers

We work with trusted third-party providers who help us operate the Service:

• Supabase: Database hosting and authentication
• Vercel: Application hosting and CDN
• Stripe: Payment processing
• Resend: Transactional email delivery
• QStash: Background job processing
• OpenAI/Anthropic: AI content generation (your content is not used for training their models)

All service providers are bound by data processing agreements and security requirements.

3.2 Within Your Organization

Information is shared with team members you invite to your BulkForge account based on their role permissions.

3.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal process (subpoenas, court orders)
• Respond to government requests
• Protect our rights and property
• Investigate fraud or security issues

3.4 Business Transfers

If BulkForge is acquired or merged with another company, your information may be transferred to the new owner. We will notify you before your information becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your data:

While we use best practices to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our security posture.

5. Data Retention

We retain your information for as long as necessary to provide the Service:

• Active Accounts: Data retained while your account is active
• Closed Accounts: Most data deleted within 30 days; some data retained for legal/accounting purposes (up to 7 years)
• Backups: Data in backups may persist for up to 90 days after deletion
• Logs: Access logs and analytics retained for 90 days
• Legal Holds: Data preserved if required by law or active legal matter

6. Your Privacy Rights

Depending on your location, you have certain rights regarding your personal data:

6.1 GDPR Rights (European Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Export your data in machine-readable format
• Object: Opt-out of certain processing activities
• Withdraw Consent: Revoke consent for marketing communications

6.2 CCPA Rights (California Users)

• Know: What personal information we collect and how we use it
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy rights exercise

6.3 How to Exercise Your Rights

To exercise any of these rights:

• Email us at privacy@bulkforge.app
• Use the "Data & Privacy" section in your account settings
• We will respond within 30 days (GDPR) or 45 days (CCPA)
• We may verify your identity before processing requests

7. Children's Privacy

BulkForge is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@bulkforge.app.

8. International Data Transfers

BulkForge is based in [Your Country]. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• EU-US Data Privacy Framework compliance (for US transfers)
• Standard Contractual Clauses (SCCs) with service providers
• Encryption of data in transit and at rest
• Data processing agreements with all vendors

9. Cookies and Tracking

We use cookies and similar technologies to provide and improve the Service. For detailed information, see our Cookie Policy.

You can control cookies through your browser settings. Note that disabling cookies may affect functionality of the Service.

10. Third-Party Links

The Service may contain links to third-party websites or services (e.g., WordPress.org, documentation sites). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Email notification (to your account email address)
• Prominent notice in the Service
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.