Privacy Policy

Last updated: June 2026

1. Information We Collect

When you use BulkVid, we may collect:

  • Account data: Email address and bcrypt-hashed password when you register.
  • Usage data: URLs and identifiers you submit for download or editing, credit transactions, download history metadata, and follow-list entries.
  • Technical data: IP address, browser type, and access logs (retained up to 30 days).
  • Anti-abuse signals: Hashed device identifier, hashed browser fingerprint visitor ID, and hashed registration IP — used to prevent duplicate trial claims and registration abuse. We store hashes only, not raw device IDs.
  • Payment references: Order IDs, transaction references, and payment status — not full bank or wallet credentials.

We do not collect payment card numbers. Bank, crypto, and PayPal payments are handled by SePay, on-chain verification, and PayPal respectively.

2. How We Use Your Information

  • To provide, operate, and improve the Service
  • To manage your account, credits, subscriptions, and affiliate balance
  • To process and verify payments
  • To send transactional email (e.g. email verification) via Brevo when enabled
  • To prevent fraud, abuse, and duplicate trial claims
  • To enforce our Terms of Service
  • To respond to support requests

3. Data Storage and Retention

  • Account data is stored in a MySQL database on our servers.
  • Downloaded media is not stored long-term — files are streamed to your device or held in short-lived temporary storage for ZIP/edit jobs.
  • Video metadata cache (stream URLs) typically expires within 2 hours.
  • Bulk Edit upload files and job outputs use temporary storage with automatic TTL cleanup.
  • Access logs are retained up to 30 days, then deleted.

4. Data Sharing

We do not sell your personal data. We share data only as needed to operate the Service:

  • SePay: Bank transfer reference data to match VND payments to your order.
  • Blockchain explorers (Etherscan, Solscan): Transaction hashes you submit to verify USDT/USDC payments.
  • PayPal: Payment and order data when you pay via PayPal (order ID, transaction status, payer email where provided by PayPal).
  • Third-party media metadata services: URLs and public identifiers you submit for download — we do not send your social login credentials from TikTok, Instagram, or other platforms.
  • Brevo: Email address and message content for verification and transactional email.
  • Cloudflare Turnstile (when enabled): Bot-check token during registration — governed by Cloudflare's privacy policy.
  • Google Analytics (when configured): Anonymous usage metrics via GA4.
  • Legal requirements: When required by law or to protect rights and safety.

5. Cookies and Local Storage

  • Session cookie (app_sess) — maintains login state.
  • Local storage — UI preferences (e.g. quality picker, platform selection) on your device.

We do not use advertising or cross-site tracking cookies.

6. Your Rights

You may request access to, correction of, or deletion of your account and associated personal data. Contact us via the Contact page. Account deletion removes your profile, follows, and transaction history subject to legal retention requirements for payment records.

7. Security

We use bcrypt password hashing, HTTPS (via Cloudflare), and industry-standard server practices. No method of transmission or storage is 100% secure.

8. Children

The Service is not directed at users under 13. We do not knowingly collect data from children.

9. International Users

Data may be processed on servers located outside your country. By using the Service, you consent to transfer and processing as described here.

10. Changes

We may update this Privacy Policy. Significant changes will be noted with an updated date on this page.

11. Contact

Privacy questions: [email protected] or Contact page. Copyright / abuse: Copyright Policy.