Privacy policy

1. Who

Bulk.Farm is operated by Autotel LLC. Write to us through the contact page for anything about your data.

2. What we store

• Account: name, email, password hash, avatar, workspace membership and role.
• Workspace content: projects, lines, prompts, generated and uploaded media (stored on Cloudinary), captions, schedules, job logs and screenshots taken by your scripts.
• Connections: tokens and page/channel ids of the social accounts you connect, your Meta/Google/TikTok app credentials, AI keys, Hetzner tokens, AdsPower keys and proxies. These are encrypted at rest and used only to run your jobs.
• Billing: balance, statement lines, payment records. Card numbers never reach us: Stripe stores them and gives us a token and the last four digits. Crypto payments are processed by NOWPayments; we keep the invoice and payment ids.
• Technical: IP address and user agent on sign-in and on the contact form (rate limiting, abuse prevention), server logs kept 30 days.

3. Why

To run the service you asked for: generating, scheduling and publishing your content, operating your servers, billing, support and security. We do not sell data and do not use your content to train models. Emails we send are transactional: verification, password reset, invitations, billing and publishing alerts.

4. Who else sees it

Processors that help us run the service, each only for its job: Hetzner (servers, Germany/Finland), Cloudinary (media), Stripe (card payments), NOWPayments (crypto payments), Resend (email), AdsPower (browser profiles on your servers), and the social platforms and AI providers you connect with your own keys and accounts. Platform admins of Bulk.Farm can see workspace metadata (plan, usage, server status) to support you; they do not read your content unless you ask for help with it.

5. How long

As long as your workspace exists. Deleted projects, lines and media are removed from our database at once and from Cloudinary within 30 days. Closed workspaces are deleted within 30 days; payment records are kept as long as accounting law requires.

6. Your rights

You can see and change your data in the app, export your lines, and delete projects, servers, profiles and your account. You can ask us for a copy of everything we hold about you, for a correction, or for deletion; EU/UK residents have the rights of the GDPR, and you can complain to your supervisory authority.

7. Cookies

Only what the app needs: a session cookie after sign-in, a CSRF token, and your theme choice in local storage. No advertising or tracking cookies.

8. Changes

If this policy changes in a way that matters, we email the workspace owners before it applies.