← Back to BulkAPIs

Privacy Policy

Last updated: February 26, 2026

1. Introduction

BulkAPIs ("we", "our", "us"), operated by Pedersen LLC, is committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use our API platform at bulkapis.com.

2. Information We Collect

Account Information: Email address, name, and authentication data via Clerk.

Connected Account Data: OAuth tokens (encrypted with AES-256-GCM), platform user IDs, usernames, and profile information from connected social media accounts.

Usage Data: API call logs, endpoints used, timestamps, and estimated costs for billing and analytics.

Payment Data: Processed by Stripe. We store Stripe customer IDs and subscription IDs but never store credit card numbers.

Message Data: Direct messages sent through our platform are queued and delivered but not permanently stored beyond delivery logs.

3. How We Use Your Information

We use your information to: provide and maintain the Service; process API requests on your behalf; manage billing and subscriptions; monitor usage for rate limiting and plan enforcement; improve the Service; and communicate with you about your account.

4. Data Security

We take security seriously. OAuth tokens are encrypted using AES-256-GCM before storage. API keys are stored as SHA-256 hashes. All data is transmitted over HTTPS. Database connections use SSL in production. We implement rate limiting and abuse detection.

5. Data Sharing

We do not sell your personal information. We share data only with: connected social media platforms (to execute your API requests); Stripe (for payment processing); Clerk (for authentication); and as required by law.

6. Data Retention

Account data is retained while your account is active. Usage logs are retained for 90 days. Cached messages are retained for 30 days. Upon account deletion, all data is permanently removed within 30 days.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; request deletion of your data; export your data; disconnect connected accounts at any time; and revoke API keys at any time.

8. Cookies

We use essential cookies for authentication (via Clerk) and session management. We do not use third-party tracking cookies or advertising cookies.

9. Third-Party Services

We integrate with third-party services that have their own privacy policies: Clerk (authentication), Stripe (payments), X/Twitter (social media API). We encourage you to review their policies.

10. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. Continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions, contact us at privacy@bulkapis.com.