Privacy Policy
1. Who we are
BulkoPin is operated by Hüseyin Memiş, an individual sole trader trading as "BulkoPin". For any personal data we collect about you, Hüseyin Memiş acts as the data controller. Contact: support@bulkopin.com.
2. Our approach
BulkoPin is privacy-first by design. The Chrome extension does not ask for your Pinterest username, password, session cookies, or device cookies. It does not request the cookies or identity Chrome permissions. Exports run in your own logged-in Pinterest tab and are limited to content you can already see in that session. Image, video and ZIP/PDF/CSV files are assembled on your machine and are never uploaded to BulkoPin.
3. Personal data we collect
| Category | Purpose | Legal basis |
|---|---|---|
| Email address (account) | Create and authenticate your BulkoPin account, send transactional messages (sign-in, billing, security) | Performance of contract |
| Subscription status and plan | Determine which features you have access to (Free, Pro, Studio, Lifetime); enforce plan limits | Performance of contract |
| Quota / usage events (board URL, pin count, format, timestamp) | Enforce plan limits, debug, prevent abuse | Legitimate interest |
| AI categorization input (optional, Pro only) | When you enable AI folder categorization, pin title and description text metadata only is sent to our AI provider to suggest folder paths. Image bytes, image URLs and source URLs are never sent. | Performance of contract |
| Opt-in error reports | If you enable "Send error reports", a redacted event name, app version and stack trace hash are uploaded. URLs, emails, JWTs and raw HTML are stripped client-side and rejected server-side. Off by default. | Consent |
| Server logs (IP address, request metadata) | Security, fraud prevention, rate limiting | Legitimate interest, legal obligation |
| Support correspondence | Respond to your inquiries | Legitimate interest |
| Billing data (handled by Paddle) | Payments are processed by Paddle, our Merchant of Record. BulkoPin does not see or store your payment card details. We only receive a customer ID, transaction metadata and subscription state. | Performance of contract |
We do not collect Pinterest credentials, do not read your Pinterest cookies or session tokens, do not run third-party advertising trackers, and do not sell or rent personal data.
4. Recipients and sharing
- Paddle.com Market Limited — Merchant of Record. Processes payment, handles billing, tax compliance, invoices, refunds, and disputes. Paddle's privacy notice: paddle.com/legal/privacy.
- Subprocessors — cloud hosting (Supabase) and the Lovable platform for backend infrastructure. Bound by data-processing agreements.
- Authorities — only where required by valid legal process.
We do not share personal data with any party for advertising or profiling.
5. International transfers
Our infrastructure providers may process data outside your country of residence (including within the EU/EEA and the United States). Transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions where applicable.
6. Retention
- Account data — kept while your account exists; deleted within 30 days of account closure.
- Subscription / billing metadata — kept while the subscription is active and for 12 months after the last renewal for dispute and chargeback handling.
- Quota / usage events — kept for up to 90 days.
- AI categorization inputs/outputs — not stored by BulkoPin beyond the request itself. Only pin title/description text is sent to the AI provider; image bytes, image URLs and Pinterest source URLs are never sent. Any short-lived logging of these text inputs depends on the AI infrastructure / provider's own settings, which we do not control. We do not send your downloaded files, payment details, Pinterest credentials or session cookies to the AI provider.
- Opt-in error reports — kept for up to 30 days, then purged.
- Server / rate-limit logs — kept for up to 30 days.
- Support correspondence — kept for up to 24 months.
- Billing records — kept by Paddle for the period required by tax law (typically 7–10 years).
To request account deletion or a copy of your personal data, email support@bulkopin.com from the address on your account.
7. Your rights
Depending on your country you have the right to access, rectify, delete, restrict, port, or object to processing of your personal data, to withdraw consent, and to lodge a complaint with your data-protection authority. To exercise these rights, email support@bulkopin.com. We respond within one month.
8. Security
We apply appropriate technical and organisational measures including TLS in transit, encryption at rest, access controls, audit logging, and row-level database security.
9. How the extension works
The Chrome extension runs in your own Pinterest tab using your existing logged-in session. When you start an export, it reads pin URLs from the page you are viewing, downloads the images and videos directly from Pinterest's CDN, and packages them into a ZIP, PDF or CSV file on your machine. The image and video bytes are never uploaded to BulkoPin servers. Exports are always user-initiated — there is no background or continuous scraping.
10. Permissions
The extension requests only the Chrome permissions it actually needs. Notably, it does not request cookies or identity.
- activeTab, scripting — read pins from the Pinterest tab you're viewing, only after you click the toolbar icon.
- downloads — save the resulting ZIP, PDF or CSV to your Downloads folder.
- storage, unlimitedStorage — remember your export preferences and cache thumbnails locally so retries don't re-download.
- tabs, alarms, notifications — detect when a Pinterest tab finishes loading, keep the service worker alive during long exports, and notify you when a job completes.
- host permissions for
*.pinterest.comand*.pinimg.com— fetch pin pages and image/video files. - host permissions for
bulkopin.comand the Supabase auth endpoint — check your subscription, log quota usage, and authenticate your BulkoPin account.
11. Cookies
See our Cookie Policy. We only set strictly necessary cookies for authentication and theme preference. No analytics or advertising cookies.
12. Children
BulkoPin is not directed at children under 13 and we do not knowingly collect data from minors.
13. Changes
Material changes to this policy will be reflected by a new "Last updated" date and, where appropriate, by direct notice to account holders.