Privacy Policy

Last updated: February 6, 2026

1. Introduction

BulkComment ("we", "our", "us") provides an automated comment management platform for Instagram and Facebook. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

When you use BulkComment, we collect:

Account information: email address, name, company name, and phone number (if provided) when you sign up.
Connected social accounts: Facebook/Instagram page IDs, page names, and access tokens when you connect accounts via OAuth.
Comment data: comments received on your connected accounts, along with automated responses generated and actions taken.
Usage data: action logs, rate limit counters, and support tickets.

3. How We Use Your Information

We use your information to:

Provide and operate the comment automation service on your behalf.
Classify incoming comments using AI and execute your configured automation rules.
Send notifications about your account, token expiry, and service updates.
Process billing and subscription management.
Respond to support requests.

4. Third-Party Services

We integrate with the following third-party services:

Meta Platform (Facebook/Instagram): to read comments and execute actions (reply, hide, DM) on your behalf via the Graph API.
Anthropic (Claude AI): to classify comments and generate appropriate responses. Comment text is sent to Anthropic's API for processing.
Stripe: to process subscription payments securely. We do not store credit card details.

5. Data Security

We take security seriously:

All social media access tokens are encrypted at rest using Fernet symmetric encryption.
Passwords are hashed using bcrypt with salt.
All traffic is served over HTTPS.
API access requires JWT authentication.

6. Data Retention

We retain your data for as long as your account is active. Comment logs and action history are kept for your audit trail. You may request deletion of your account and associated data at any time.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and data.
Disconnect your social media accounts at any time.
Export your data.

8. Data Deletion

To delete your account and all associated data, you can disconnect your accounts from the dashboard or contact us. Upon deletion, we remove your personal information, connected account tokens, and associated logs.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.

10. Contact

If you have questions about this Privacy Policy, please reach out through our in-app support system.