Privacy Policy

1. What We Collect

When you create an account, we collect your name, email address, and a hashed password. When you use our service, we collect usage data including the templates you upload, documents you generate, and your API activity. We also collect billing details through Stripe -- we never store full card numbers on our servers.

Uploaded template files and generated documents are stored in secure S3-compatible object storage. Documents are automatically deleted after their expiry window (which depends on your plan).

2. How We Use Your Data

We use your data to provide, maintain, and improve the BulkRender service. This includes processing document generation requests, sending transactional emails (confirmations, alerts, invoices), and enforcing plan limits. We do not sell your data to third parties.

Aggregate, anonymised analytics help us understand how the product is used so we can make it better.

3. Third-Party Services

We share data with the following third parties only to the extent necessary to operate the service:

• Stripe -- payment processing. Card data goes directly to Stripe and never touches our servers.
• HubSpot -- CRM. We sync your organisation name, email, and plan to help us manage our customer relationships. This data is only used internally.
• PostHog -- product analytics. Session and usage events are collected to understand feature adoption. No personally identifiable content from your documents is sent to PostHog.
• S3-compatible storage -- your uploaded templates and generated documents are stored in encrypted object storage.

4. Data Retention

Generated documents are automatically deleted after their plan-defined expiry window. You can also delete documents manually at any time from the dashboard. Account data is retained while your account is active. After account deletion, we purge your personal data within 30 days, except where retention is required by law (for example, invoicing records).

5. Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

6. Security

All data is transmitted over HTTPS. Passwords are hashed before storage. API keys are encrypted at rest. Access to production systems is restricted to authorised personnel only.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or via a notice in the dashboard. Continued use of the service after the effective date constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Email us at support@bulkrender.com.