Privacy Policy

Last updated: September 2, 2026

BulkPublish ("we", "us", "our") is a product of BROWSE (SMC-PRIVATE) LIMITED, a private limited company registered in the Islamic Republic of Pakistan, and operates the website at bulkpublish.com and the application at app.bulkpublish.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

BROWSE (SMC-PRIVATE) LIMITED, Old Golimar, Rexer, Karachi, Pakistan, is the data controller for the personal data described in this policy. You can reach us at support@bulkpublish.com.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and password. If you sign in with Google, we receive your name, email, and profile picture from Google's authentication service.

1.2 Social Media Account Data

When you connect a social media platform (such as Facebook, Instagram, TikTok, YouTube, X, Threads, Bluesky, Pinterest, LinkedIn, Google Business Profile, or Mastodon), we receive and store OAuth access tokens and refresh tokens necessary to publish content on your behalf. We also retrieve basic profile information (name, username, profile image) and channel/page identifiers from each connected platform.

1.3 Content You Create

We store the posts, media files (images, videos), captions, scheduling data, labels, and other content you create within the Service. Media files are stored using Cloudflare R2 object storage.

1.4 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, operating system, and IP address.

1.5 Billing Information

Payment processing is handled by our billing provider, Polar. We do not store your credit card number or bank account details on our servers. Polar may collect billing information in accordance with their own privacy policy.

1.6 Platform APIs and YouTube API Services

BulkPublish publishes on your behalf and retrieves basic profile and post-performance data using the official APIs of the platforms you connect. BulkPublish uses YouTube API Services. By connecting a platform you agree to that platform's terms of service; in particular, by using YouTube features you agree to the YouTube Terms of Service. Information we obtain through Google and YouTube APIs is also handled in accordance with the Google Privacy Policy.

1.7 Support Conversations

If you start a chat with us, the conversation and the details you share in it are handled by our self-hosted support desk (Chatwoot). On the marketing site the chat widget loads only after you click the chat button; nothing is loaded or stored before that.

1.8 Error and Performance Reports

When something goes wrong in the application, an error report (the error, the page, the browser, your account identifier and IP address) is sent to Sentry so we can fix it. We do not record your screen or session.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Publish and schedule content to your connected social media accounts
• Process transactions and manage your subscription
• Send account emails (verification, password resets), notification emails you have turned on, and billing notices
• Send occasional product updates to account holders (see Marketing email below)
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues or abuse
• Enforce our Terms of Service and comply with legal obligations

2.1 Legal Bases (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following bases:

• Performance of a contract: providing the Service you signed up for, publishing to the platforms you connected, billing, and account emails.
• Legitimate interests: keeping the Service secure and reliable, preventing abuse, understanding how the Service is used, answering support requests, and telling existing customers about the product. You can object to any of this (see Your Rights).
• Consent: optional product updates you ask for at sign-up, and any cookie or feature that asks you first. You can withdraw consent at any time without affecting what happened before.
• Legal obligation: keeping billing records and responding to lawful requests.

2.2 Marketing Email

We occasionally email account holders about new features, changes to plans, and similar product news. We send these to existing customers on the basis described above, and to anyone who ticked the product-updates box at sign-up. Every such email carries an unsubscribe link and supports one-click unsubscribe in your mail app; opting out takes effect immediately and is kept on a do-not-email list that survives account deletion so we never contact you again by mistake. Opting out does not stop the account emails you need to sign in or recover your account. We do not track whether you open or click our emails.

3. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

• Social Media Platforms: We transmit your content and media to the platforms you have connected, as directed by you.
• Service Providers: We use third-party services to operate the platform. These providers access data only as needed to perform their services:
  • Cloudflare, Inc. (USA) — hosting, media storage (R2), email delivery, and cookieless website analytics
  • Resend, Inc. (USA) — email delivery
  • Polar Software Inc. (USA) — billing and subscription management
  • Functional Software, Inc. (Sentry) (USA) — error and performance reporting
  • Chatwoot — support chat, self-hosted on our own infrastructure
  • Hetzner Online GmbH (Germany) — server hosting
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

4. Data Storage and Security

Your data is stored on servers managed through our hosting infrastructure. Media files are stored on Cloudflare R2. We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. OAuth tokens are encrypted at rest in our database and are never exposed to other users.

While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

Security incidents. If we become aware of a breach affecting your personal data, we will notify you and, where required, the relevant supervisory authority without undue delay and in any case within the timeframes the law sets (72 hours to the authority under the GDPR).

Data processing agreement. If you use the Service on behalf of a business that needs a data processing agreement, email us and we will provide one.

5. Data Retention

We retain your account data for as long as your account is active. Post and account statistics retrieved from connected platforms, including statistics obtained through YouTube API Services, are retained for no longer than 30 days, after which they are automatically deleted; your own publishing history is retained while your account is active. Records of the emails we sent you (recipient, subject, delivery status, never the content) are kept for 12 months.

When you delete your account, we remove your personal data, content, connected platform tokens, and media files within 30 days, unless we are required by law to retain it. Two things are kept: billing records held by Polar, for as long as tax and accounting law requires, and any entry on our do-not-email list, so an opt-out is honoured even after the account is gone. Deleting your account removes the platform tokens we hold but does not revoke BulkPublish in the platform's own settings; see Your Rights for how to do that.

6. Cookies

We use essential cookies to maintain your session and keep you logged in. We do not use advertising cookies or third-party tracking cookies. The marketing site (bulkpublish.com) does not set any cookies unless you open the support chat, at which point the chat widget stores a conversation identifier in your browser so you can pick the conversation up again. Website analytics are cookieless.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data by deleting your account or contacting us.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on our legitimate interests, including marketing email at any time.
• Restriction: Ask us to limit how we use your data while a question about it is resolved.
• Withdraw consent: Where we rely on consent, withdraw it at any time.
• Complain: Lodge a complaint with your local data protection authority. For the EEA that is the authority of the country you live in; for the UK it is the Information Commissioner's Office (ico.org.uk).
• Disconnect: Revoke access to any connected social media account at any time from the Channels page.
• Revoke API access: In addition to disconnecting a platform inside BulkPublish and deleting your stored data, you can revoke BulkPublish's access to your Google or YouTube account at any time via the Google security settings page at myaccount.google.com/connections. For other connected platforms, you can revoke access from that platform's connected-apps or app-permissions settings.

You can download a copy of your data at any time from Settings (Download your data) and delete your account from the same page. To exercise any other right, contact us at support@bulkpublish.com. We respond within 30 days.

7.1 California and Other US State Residents

We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done so in the preceding 12 months. The categories of personal information we collect are identifiers (name, email, IP address), account and content data you create, commercial information (subscription and billing history), and internet activity (how you use the Service), each for the purposes listed in section 2. You have the right to know, delete, correct, and to be free from discrimination for exercising these rights. You may use an authorized agent to make a request; we will ask the agent for proof of your authorization and may verify the request with you directly. Contact us at support@bulkpublish.com.

7.2 Google API Services

BulkPublish's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content or practices of any third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

9. Children's Privacy

The Service is not intended for anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

We are established in Pakistan, our servers are in Germany, and the providers listed in section 3 are mostly in the United States, so your information is processed outside the country you live in. Where data leaves the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) with each provider, together with the safeguards in section 4. You can ask us for a copy of the relevant clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date; for material changes we will also email account holders before the change takes effect. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@bulkpublish.com.