Privacy Policy

BulkDescribe — last updated 24 July 2026

BulkDescribe ("the App") is provided by TBP GROUP d.o.o. ("we", "us"). This policy explains what data the App collects from a Shopify store that installs it, how that data is used, and who it is shared with.

1. Information we collect

When you install the App, we receive from Shopify:

• Your store domain, store name and the access token issued for the App
• Product data you choose to process: product title, existing description, product type, vendor, tags and SEO fields

We do not request or receive customer records, order data, payment information or any other personal data belonging to your shoppers.

2. How we use the information

• To generate product descriptions and SEO metadata at your request
• To write the generated content back to your store
• To authenticate your store and keep your session valid
• To diagnose errors and keep the service running

We do not sell your data, and we do not use your product data to train any machine learning model.

3. Sub-processors

To deliver the service we share the minimum necessary data with the following providers:

• Anthropic PBC — product text is sent to the Claude API to generate descriptions. Anthropic does not train its models on data submitted through the API.
• Fly.io — application hosting (Frankfurt, EU).
• Supabase — database hosting for session storage (Ireland, EU).
• Shopify Inc. — the platform your store runs on.

4. Data retention

We store only your session record for as long as the App remains installed. Product content is processed in transit and is not retained after the generated text has been written back to your store. When you uninstall the App, the associated session record is deleted, and any remaining data is removed within 30 days.

5. Your rights (GDPR)

If you are located in the European Economic Area, you may request access to, correction of, or deletion of the data we hold about your store, and you may object to or restrict its processing. Contact us at the address below and we will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

The App supports Shopify's mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact).

6. Security

All traffic is encrypted with TLS. Access tokens and API credentials are stored as encrypted environment secrets and are never exposed to the browser.

7. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

8. Contact

TBP GROUP d.o.o.
Email: tim.papez@siol.net