Privacy Policy

Last updated: January 30, 2026

This Privacy Policy explains how BulkPayer Inc. ("BulkPayer", "we", "us") collects, uses, and protects information when you use the BulkPayer website, app, and related services (the "Service").

1) Who we are

• Controller / Business: BulkPayer Inc.
• Support email: admin@bulkpayer.com
• Privacy contact: admin@bulkpayer.com

2) What data we collect

Account & usage data

• Name, email, company name
• App settings and configuration (e.g., autopay rules)
• Logs needed to operate and secure the Service (timestamps, actions taken, error details)

QuickBooks data (when you connect)

Depending on your permissions and feature use, we may access:

• Customer identifiers and basic customer details
• Invoice details (numbers, amounts, due dates, balances, status)
• Payment records we create or sync
• Account references needed to record transactions properly

We do not access or use your QuickBooks data for any purpose other than providing the Service.

Payment data

If you use a payment processor such as Stripe, payment details are handled by the processor. We may store:

• Processor customer IDs / payment method tokens (not raw card numbers)
• Transaction IDs and status (success/failure) for reconciliation and support

3) How we use data

We use data to:

• Provide and operate the Service (bulk pay, autopay runs, syncing)
• Prevent fraud and secure accounts
• Maintain audit logs and troubleshoot issues
• Provide customer support
• Comply with legal obligations

4) Legal bases (if applicable)

Where applicable (e.g., GDPR), we process data based on:

• Performance of a contract (providing the Service)
• Legitimate interests (security, fraud prevention, product reliability)
• Consent (where required for cookies/analytics)

5) How we share data

We share data only as needed to run the Service, for example with:

• Infrastructure providers (hosting, databases, logging)
• Payment processors (to process transactions)
• Analytics providers (to improve the Service)

We do not sell your data.

6) Data retention

We retain data only as long as necessary to provide the Service and meet legal/accounting obligations. Typical retention:

• Operational logs: 90 days
• Audit/payment run history: 7 years (to meet accounting requirements)

You can request deletion at any time (see Data Deletion below).

7) Security

We use reasonable administrative, technical, and physical safeguards designed to protect data, including encryption in transit (TLS) and at rest, and access controls. No system is 100% secure, but we work to protect your information.

8) Your choices and rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Export your data (where applicable)

To exercise these rights, contact: admin@bulkpayer.com

9) International transfers

If data is processed outside your country, we use appropriate safeguards where required (e.g., contractual protections).

10) Third-party links

Our Service may link to third-party sites. Their privacy practices are their own.

11) Changes

We may update this policy from time to time. We'll update the "Last updated" date and, if changes are material, provide notice.